Privacy Policy

1. Controller

The data controller for this website and platform is LoopCraft OÜ (trading as "LoopCraft Systems"). Registered in Estonia (EU member state) — serving clients across Europe. Contact: hello@loopcraftsystems.com

2. Data We Collect

We collect only what is necessary to provide the service:

• Account data: email address, name (via Clerk authentication)
• Usage data: pages visited, features used, session duration (PostHog analytics)
• Payment data: billing information processed by Stripe — we never store card numbers
• Communication data: emails you send us via contact forms
• Technical data: IP address, browser type, device information (for security and fraud prevention)

3. Legal Basis (GDPR Article 6)

• Contract performance (Art. 6(1)(b)): Account creation, service delivery, invoicing
• Legitimate interest (Art. 6(1)(f)): Security monitoring, fraud prevention, product improvement
• Consent (Art. 6(1)(a)): Analytics cookies (PostHog) — you can withdraw at any time
• Legal obligation (Art. 6(1)(c)): Tax records, compliance with EU law

4. Data Processors & Transfers

All processors are bound by Data Processing Agreements. EU data stays in the EU where possible:

5. Retention

• Account data: until account deletion, then 30 days
• Payment records: 10 years (EU tax law requirement)
• Analytics data: 12 months rolling window
• Email correspondence: 3 years

6. Your Rights (GDPR Chapter III)

• Right of access (Art. 15) — request a copy of your data
• Right to rectification (Art. 16) — correct inaccurate data
• Right to erasure (Art. 17) — delete your data ("right to be forgotten")
• Right to restriction (Art. 18) — limit how we process your data
• Right to portability (Art. 20) — receive your data in machine-readable format
• Right to object (Art. 21) — object to processing based on legitimate interests
• Right to withdraw consent — for analytics cookies, at any time via cookie settings

To exercise any right, email privacy@loopcraftsystems.com. We respond within 30 days. You also have the right to lodge a complaint with your national supervisory authority.

7. Cookies

We use analytics cookies (PostHog) only with your explicit consent. See our Cookie Policy for details. You can change your preferences at any time via the cookie banner.

8. Changes

We will notify registered users of material changes via email at least 30 days before they take effect. Minor updates are published here with an updated date.