Privacy Policy

At LoopIt.ai, we are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, share, and safeguard your information when you visit our website, loopit.ai, or interact with our services, in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other relevant regulations.

1. Scope of This Policy

This Privacy Policy applies to all users of our website and services, including visitors, subscribers, and other individuals who provide personal information to us. It covers data collected through our website, email communications, and any related services or tools provided by LoopIt.ai.

2. Data We Collect

We collect information to provide and improve our services. The types of data we may collect include:

• Personal Information: Information you voluntarily provide, such as your name, email address, company name, and phone number when you subscribe to our newsletter, contact us, fill out forms, or interact with our website.
• Usage Data: Information about how you interact with our website, such as your IP address, browser type, device information, pages visited, and time spent on the site, collected automatically via cookies and similar technologies.
• Analytics Data: Aggregated or anonymized data used to understand user behavior and improve site performance, such as click patterns and navigation paths.
• Vehicle and Claims Data: When using our AI-powered damage assessment services, we may collect vehicle images, damage reports, and related claims information.

We do not collect sensitive personal information (e.g., financial data, health information) unless explicitly provided by you for a specific purpose, and we will always obtain your consent where required by law.

3. How We Use Your Data

We use your data for the following purposes:

• To Provide Services: To deliver website functionality, respond to inquiries, process claims, and send newsletters or updates you've subscribed to.
• To Improve Our Website: To analyze usage patterns and optimize site performance, content, and user experience.
• To Train AI Models: To improve our AI-powered vehicle damage assessment technology using anonymized data.
• For Marketing: To send promotional communications or personalized advertisements, where you have consented to such use.
• For Legal Compliance: To comply with applicable laws, regulations, or legal processes, such as responding to lawful requests from authorities.

Our legal basis for processing your data under GDPR includes:

• Consent: Where you have given explicit consent, such as for marketing cookies or newsletters.
• Legitimate Interests: For improving our services, ensuring site security, and analyzing usage, where these interests do not override your rights.
• Legal Obligation: To comply with applicable laws or regulations.

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. These technologies include:

• Essential Cookies: Necessary for core website functionality, such as maintaining security, session management, and enabling basic navigation. These cannot be disabled.
• Functional Cookies: Enable personalized features, such as remembering your language preferences, font sizes, or region selections, to enhance user experience.
• Analytics Cookies: Collect anonymized data to analyze website usage, visitor behavior, and performance metrics, helping us improve our services.
• Marketing Cookies: Used to deliver personalized advertisements and promotions based on your interests and online activities, with your consent.

You can manage your cookie preferences through our cookie consent pop-up, which appears when you first visit our site or after 30 days when cookies expire. You may withdraw consent for non-essential cookies at any time via the cookie settings panel. Essential cookies are always active to ensure the website functions properly.

5. Data Sharing and Third Parties

We may share your data with third parties under the following circumstances:

• Service Providers: We work with trusted third-party providers (e.g., analytics platforms, email marketing services, cloud hosting) to process data on our behalf. These providers are contractually obligated to protect your data and comply with applicable privacy laws.
• Business Partners: With insurance companies, repair shops, or fleet management partners when necessary to provide our services, and only with your consent.
• Legal Requirements: We may disclose your data to comply with legal obligations, such as responding to court orders or government requests, or to protect our rights, property, or safety.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity, with appropriate safeguards in place.

We do not sell your personal data to third parties for their own marketing purposes under any circumstances.

6. Your Rights

Depending on your location and applicable laws, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your data, subject to legal retention requirements.
• Restriction: Request that we limit the processing of your data in certain circumstances.
• Data Portability: Request a copy of your data in a machine-readable format for transfer to another service.
• Objection: Object to processing based on legitimate interests or for direct marketing purposes.
• Withdraw Consent: Withdraw consent for data processing (e.g., for marketing or non-essential cookies) at any time, without affecting the lawfulness of prior processing.

To exercise these rights, please contact us at [email protected]. We will respond to your request within the timeframes required by law (e.g., 30 days under GDPR, 45 days under CCPA). We may ask for additional information to verify your identity before processing your request.

For California residents, under the CCPA, you have the right to opt out of the sale of your personal data. As we do not sell personal data, no opt-out is necessary, but you may still exercise other CCPA rights, such as requesting access or deletion.

7. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or misuse. These measures include:

• Encryption: Using secure protocols (e.g., HTTPS) to encrypt data in transit.
• Access Controls: Limiting access to personal data to authorized personnel only.
• Regular Audits: Conducting periodic reviews of our data practices to ensure compliance with privacy regulations.

While we strive to protect your data, no system is completely secure. If we become aware of a data breach, we will notify affected users and relevant authorities as required by law.

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. For example:

• Personal Information: Retained for the duration of your subscription to our services (e.g., newsletter) or until you request deletion.
• Cookie Data: Retained for up to 30 days, after which you will be prompted to renew your cookie preferences.
• Analytics Data: Retained in anonymized form for up to 24 months for performance analysis.
• Vehicle and Claims Data: Retained as necessary to provide services and improve AI models, typically for 3-5 years or as required by insurance regulations.

When data is no longer needed, we securely delete or anonymize it in accordance with applicable regulations.

9. International Data Transfers

LoopIt.ai operates online and may use third-party service providers located in different countries. If you are located in the European Economic Area (EEA) or another region with strict data protection laws, your data may be transferred to countries outside your region (e.g., the United States). We ensure that such transfers comply with applicable laws, using safeguards such as:

• Standard Contractual Clauses (SCCs): Agreements approved by the European Commission to ensure adequate data protection.
• Binding Corporate Rules: Where applicable, for intra-organizational data transfers.

We only transfer data to third parties that meet our privacy standards and comply with applicable data protection laws.

10. Children's Privacy

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we learn that we have collected such data without parental consent, we will promptly delete it. If you believe we have collected data from a child under 16, please contact us at [email protected].

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website with a revised "Last Updated" date. Please review this policy periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

We aim to respond to all inquiries within 30 days, or sooner as required by applicable law. For GDPR-related inquiries, you may also contact your local data protection authority if you believe we have not addressed your concerns adequately.