Privacy Policy

1. Information We Collect

When you use Loomo, we may collect the following types of information to provide and improve our service:

• Personal Information: Name, email address, and account details.
• Content Data: Prompts entered into our tools, and the resulting AI-generated content.
• Usage Analytics: Information on how you interact with our application to help us improve the user experience.

2. AI Models and Your Data

Trust is our top priority when you build your brand using our platform.

Customer content is not used to train our AI models.

When you enter your brand strategy, content ideas, or other proprietary information, it is solely used to generate your requested content. We use third-party AI providers (such as Google Gemini) to power these features. We ensure that our agreements with these providers prohibit them from using your data to train their foundational models.

3. Data Retention, Location, and Deletion

Storage Location: Your data is securely hosted on servers located primarily in the United States, utilizing enterprise-grade encryption both in transit and at rest.

Retention Period: We retain your personal data and generated content only for as long as your account remains active, or as necessary to provide you with our services and fulfill legal obligations.

Your Rights & Deletion: You have the right to request the deletion of your account and associated data at any time. You may also export your generated content before deleting your account. Upon deletion, your data will be permanently and irreversibly removed from our active databases, subject to any legal retention obligations.

4. How We Use Your Information

We use the collected information primarily to:

• Provide, maintain, and improve the Loomo platform.
• Process transactions and send related information (e.g., invoices).
• Send technical notices, updates, security alerts, and support messages.
• Respond to your comments, questions, and customer service requests.

5. International Data Privacy Laws (GDPR & CCPA)

Depending on your location, you may have additional rights under international data protection laws such as the General Data Protection Regulation (GDPR) in Europe, or the California Consumer Privacy Act (CCPA) in the United States.

• GDPR (Europe): You have the right to data portability, the right to object to processing, and the right to restrict processing of your personal data. We rely on your explicit consent and the necessity to fulfill our contract with you as our lawful basis for processing.
• CCPA (California, USA): You have the right to know what personal information is collected, disclosed, or sold. We do not sell your personal information. You have the right to request deletion of your personal information and the right to non-discrimination for exercising your privacy rights.
• Cross-Border Data Transfers: Your data may be transferred to, stored, and processed in countries other than your own. We ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data during these transfers.

6. Your Rights under the DPDP Act 2023 (India)

If you are a resident of India, you are granted specific rights under the Digital Personal Data Protection (DPDP) Act 2023 regarding your personal data:

• Right to Access & Information: You have the right to know what personal data we process and request a summary of the data we hold.
• Right to Correction: You can request corrections to inaccurate or incomplete personal data.
• Right to Erasure: You can request the permanent deletion of your account and all associated personal data when it is no longer necessary for the purpose it was collected.
• Right to Grievance Redressal: You have the right to an accessible mechanism to register and resolve privacy-related grievances.

To exercise any of these rights globally, please contact our Grievance & Data Protection Officer using the details below. We will respond to all legitimate requests within the legally mandated timeframe.

7. Grievance & Data Protection Officer

In compliance with global data laws including the DPDP Act 2023 and GDPR, we have appointed a dedicated officer to address your concerns regarding the processing of your personal data.