Privacy Policy - Loopency

1. Introduction

Loopency is a product of Jowgik ("we", "our", or "us"). Jowgik is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use Loopency.

By using Loopency, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you register for an account, we collect:

Name
Email address
Password (encrypted)
Organization/workspace name

2.2 Payment Information

For paid subscriptions, payment information is collected by Polar (polar.sh), which acts as our merchant of record and processes payments, billing and applicable sales taxes. We do not store your complete credit card information on our servers.

2.3 User Content

We store the data you create, upload, and manage within the Service, including:

Workspaces, collections, and records
Files and attachments
Comments and collaboration data
Dashboards and reports
Automation rules and workflows

2.4 Usage Information

We automatically collect certain information when you use the Service:

IP address and device information
Browser type and version
Pages visited and features used
Time and date of access
Performance and error logs

2.5 Cookies and Tracking

We use essential cookies to keep you signed in and the Service secure; they need no consent. Analytics cookies (Google Analytics and PostHog) load only if you allow them. On our website we ask with a cookie banner before any analytics loads. When you create an account we ask again, as an optional checkbox beside the required consents, unticked unless you tick it. Inside Loopency there is no banner: you can change your answer at any time in Settings, Appearance, under Cookies and analytics. If you never answer, for example because you joined by invitation, analytics stays off. You can also instruct your browser to refuse all cookies. See our Cookie Policy for more details.

3. How We Use Your Information

We use collected information for the following purposes, along with the legal basis under GDPR for each:

Providing and maintaining the Service (contractual necessity)
Processing payments and subscriptions (contractual necessity)
Sending administrative information and updates (contractual necessity)
Responding to your requests and support inquiries (contractual necessity)
Monitoring and analyzing usage patterns (consent)
Improving and optimizing the Service (legitimate interest)
Marketing communications (consent)
Detecting and preventing fraud and abuse (legitimate interest)
Complying with legal obligations (legal obligation)

4. Data Sharing and Disclosure

4.1 Service Providers

We may share your information with third-party service providers who perform services on our behalf:

Hostinger (hosting of our servers, in Malaysia)
Polar (merchant of record and payment processing)
Resend (email delivery)
Cloudflare (DNS, content delivery, network protection and website analytics)
OpenAI (AI features, through a paid API account)
TypeSafe AI (experimental setup suggestions during onboarding, through a paid API account)
Google (Google Sign-In)
Microsoft (Microsoft sign-in)
Google Analytics and PostHog (website analytics, only if you allow analytics cookies)

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

4.3 Business Transfers

If Jowgik or Loopency is involved in a merger, acquisition, or asset sale, your information may be transferred. We will provide notice before your information is transferred and becomes subject to a different Privacy Policy.

4.4 We Do Not Sell Your Data

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

4.5 AI-Generated Content

AI features use a paid API account with OpenAI, and an experimental setup feature uses one with TypeSafe AI. Before any text is sent to any of them, personal names, email addresses, phone numbers, card numbers, national ID numbers and bank account numbers are replaced with placeholders. AI-generated outputs may not always be accurate and should be reviewed before use. We do not use your data to train AI models. See our AI Usage Policy for details.

5. Data Security

We implement appropriate technical and organizational security measures to protect your data:

Encryption in transit (TLS/SSL)
Tenant isolation enforced in the database with row-level security
Passwords stored as bcrypt hashes
Access controls and authentication
Personal data masked before AI processing and before logs are written

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymize your personal information within 30 days, except as required by law or for legitimate business purposes.

Specific retention periods by data category:

Account data: Duration of active account + 30 days post-deletion
Payment and billing records: 7 years (tax and legal requirements)
Usage analytics and logs: 12 months
Support communications: 24 months
Error and security logs: 6 months
Marketing consent records: Duration of consent + 3 years

You can request deletion of your data at any time by contacting us at contact@loopency.com.

7. Your Rights (GDPR)

If you are in the European Economic Area (EEA), you have certain data protection rights:

Access: Request a copy of your personal data
Rectification: Request correction of inaccurate data
Erasure: Request deletion of your data
Restriction: Request restriction of processing
Portability: Request transfer of your data
Objection: Object to processing of your data
Withdrawal: Withdraw consent at any time
Lodge a complaint: Lodge a complaint with your local data protection supervisory authority if you believe your data has been processed unlawfully.

To exercise these rights, please contact us at contact@loopency.com.

8. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:

Right to know what personal information we collect
Right to know if we sell or disclose your information
Right to opt-out of the sale of your information (we do not sell)
Right to request deletion of your information
Right to non-discrimination for exercising your rights

9. International Data Transfers

Loopency's servers are located in Malaysia, and some subprocessors process data in other countries, including the United States. Your information may therefore be processed outside your country, where data protection laws may differ.

Where personal data is transferred outside the European Economic Area, we ensure appropriate safeguards are in place:

Standard Contractual Clauses (SCCs): We rely on EU-approved SCCs where applicable to provide adequate protection for international transfers.
Subprocessors: Each subprocessor, where it is located and what it processes are listed at loopency.com/subprocessors.

As the Korean Personal Information Protection Act (PIPA) requires: the recipients, their countries, the items each receives and why are listed on the Subprocessors page. Data is transferred over encrypted connections when you use the feature concerned, and each recipient keeps it only as long as its service needs it or until your account is deleted. If you do not want your data transferred overseas, you can decline the optional features concerned (Google or Microsoft sign-in, AI features, analytics cookies) or delete your account; the Service cannot run without hosting.

10. Children's Privacy

Our Service is not intended for children under 14 years of age. We do not knowingly collect personal information from children under 14. If you become aware that a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.

12. Data Processing Agreement

Business customers who process personal data through Loopency are covered by our Data Processing Agreement, published at loopency.com/data-processing-agreement, with the subprocessors listed at loopency.com/subprocessors.

13. Your Rights in Korea (PIPA)

If PIPA applies to you, you may ask to access, correct, delete or suspend the processing of your personal information, and withdraw consent at any time. Email contact@loopency.com, or act through a representative with written authorisation. We respond within 10 days.

When a retention period ends or the purpose is fulfilled, we delete personal information without delay: electronic records are deleted so they cannot be recovered, and paper records are shredded.

14. Privacy Officer and Complaints

Privacy officer (개인정보 보호책임자): Uddin S M Nadim, CEO of Jowgik. Email: contact@loopency.com

If you are not satisfied with our response, you can contact:

Personal Information Infringement Report Center: privacy.kisa.or.kr, phone 118
Personal Information Dispute Mediation Committee: kopico.go.kr, phone 1833-6972
Supreme Prosecutors' Office Cyber Investigation Division: phone 1301
Korean National Police Agency Cyber Bureau: ecrm.police.go.kr, phone 182

15. Data Controller

Data Controller: Jowgik, operator of Loopency (Business Registration Number 459-10-03101), B02, 47 Seongnam-daero 1390beon-gil, Sujeong-gu, Seongnam-si, Gyeonggi-do 13119, Republic of Korea. Representative: Uddin S M Nadim. Contact: contact@loopency.com

16. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: contact@loopency.com