Privacy Policy

1. What We Collect

To provide Loop's scheduling service, we collect and store:

• Google account email — used to identify your account and send briefings
• Google OAuth refresh token — stored securely, used only to access Google Calendar on your behalf
• Calendar event data — event titles, times, attendees, and conflict status are cached to detect scheduling issues
• Reschedule decisions — proposed and approved new times are stored for audit and undo purposes
• Daily briefing records — generated summaries of your schedule are stored and emailed to you

2. How We Use Your Data

Your data is used exclusively to operate Loop. Specifically:

• Read your Google Calendar events to detect conflicts and identify scheduling opportunities
• Generate and send you daily briefing emails
• Send reschedule notification emails to meeting attendees when you approve a proposal
• Display your schedule and briefing history in the Loop dashboard

We do not sell, share, or use your calendar data for advertising or any purpose unrelated to Loop.

3. Data Retention & Deletion

Your data is retained as long as your Loop account is active. To delete your data:

• Revoke Loop's OAuth access from your Google Account Permissions page
• Contact support@loopwhale.polsia.app to request full account deletion

Once deleted, your data is removed from our systems within 30 days. Calendar events in Google are not affected — Loop does not delete anything from your Google Calendar.

4. Third Parties

Loop shares data with:

• Google — for calendar access via OAuth. Google's use of your data is governed by Google's own Privacy Policy.
• Stripe — for Pro plan billing. Card and payment data is handled by Stripe; Polsia does not store payment card numbers.
• Polsia infrastructure — our own hosting and database services, governed by Polsia's platform privacy practices.

5. Cookies

Loop uses minimal cookies — only a session identifier to persist your dashboard login. We do not use tracking pixels, advertising cookies, or third-party analytics.

6. Security

OAuth tokens are stored encrypted at rest. The Loop dashboard uses HTTPS on all connections. No data is transmitted without encryption.

Loop is a beta product — if you discover a security vulnerability, please report it to support@loopwhale.polsia.app.

7. Children's Privacy

Loop is not intended for users under 16. We do not knowingly collect data from minors.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via the Loop dashboard and email. Continued use of Loop after changes constitutes acceptance of the updated policy.

9. Contact