1. Who we are

Loopsii is an all-in-one app for freelance designers and developers that brings projects, clients, tasks, time tracking, invoicing, and an AI meeting assistant into one place. This Privacy Policy explains how we collect, use, share, and protect personal data.

The data controller is Stanislav Bondar, a sole proprietor trading as STABONDAR STANISLAV BONDAR, registered in the Polish Central Register of Business Activity (CEIDG) with VAT ID PL5214141953, at aleja Wilanowska 67E, 02-765 Warsaw, Poland ("Loopsii", "we", "us"). For any privacy question or to exercise your rights, contact us athey@loopsii.com.

2. Scope of this policy

This policy covers our website, our waitlist (which closed on 8 October 2026), and the Loopsii application and related services (together, the "Service"). Where we link to third-party services (for example a video-call provider or your bank), their own privacy notices apply to what they do.

3. Our roles: controller and processor

For your account and the data about you (your profile, billing details, usage), Loopsii acts as a controller and this policy applies.

For the content you put into the Service about your own clients and projects(client contacts, meeting recordings and transcripts, files, notes), you are the controller and Loopsii acts as a processor that handles that data on your instructions. Your use of that data is governed by our terms and, where applicable, a Data Processing Agreement (available on request). You are responsible for having a lawful basis (and, where required, consent) to put that data into Loopsii.

4. The personal data we collect

Website & waitlist

Our waitlist closed on 8 October 2026. If you joined it, we collected your name,email address, the role you selected, your update preferences, and whether you wanted to be a beta user. We keep these details only until we send our beta announcement, and then delete them.

Account & profile

When you create an account we collect your email, full name, and profile photo, plus the business details you add: business name, VAT/tax ID, billing address, registration number, currency, timezone, and bank account details (such as IBAN, BIC, account and routing numbers) used to display payment information on your invoices.

Content you create

The Service stores the content you add to run your work: clients (names, emails, phone numbers, addresses, VAT IDs, notes), projects, milestones, tasks, comments, attachments, time entries, and invoices. This may include personal data about your clients and collaborators.

Meeting assistant

If you use the AI meeting assistant, the desktop app records meetings locally on your Mac (no bot joins your calls) and transcribes them on your device. The app then syncs each meeting's transcript to the Service, where it is used to generate summaries and suggested tasks, and by default it also uploads the meeting's audio and, with screen recording on, a video of the call. If you use the Loopsii Companion browser extension, participant names from Google Meet, Microsoft Teams or Zoom calls in your browser are attached to those transcripts on your Mac (see section 7). See section 6.

Integrations

If you connect Google Calendar, we receive and store (in encrypted form) OAuth tokens and the calendar data needed to schedule and link meetings to your projects, limited to the scopes you approve: your list of calendars and the titles, times, attendees and join links of upcoming events. We use that data only to show your upcoming meetings, start and link recordings to the right meeting, and prepare pre-meeting briefs. We never create or change events, never use calendar data for advertising, never sell it, do not use it to train AI models, and no human at Loopsii reads it unless you ask us to, it is needed for a security or abuse investigation, or the law requires it. You can disconnect at any time, which deletes the stored tokens. Loopsii's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.

AI assistants (MCP connectors)

If you connect an AI assistant such as Claude, ChatGPT, Codex or Cursor to Loopsii, you sign in through a standard OAuth screen that lists what the assistant may do: read your workspace and create and update records. Loopsii then issues that assistant short-lived access tokens (one hour, renewed automatically) which it uses to call our API on your behalf. We store the tokens hashed, together with the app's identity, the permissions you granted and when it was last used. The assistant receives only the data returned for the requests you make — for example the tasks it lists or the meeting it summarises — and that data is then handled by the assistant's provider (for example Anthropic or OpenAI) under their own terms; we do not receive or store your conversations with the assistant. You can see and disconnect every connected assistant at any time in Settings → API → Connected apps, which invalidates its tokens immediately.

Technical & usage data

Like most services, we automatically receive technical data — IP address, device and browser type, pages viewed, and diagnostic/error logs — used to operate, secure, and improve the Service.

We also record product-usage events — which features you use and when, for example that a meeting was recorded, a project was created or the desktop app was connected — linked to a pseudonymous account ID. These events never contain the content of your work: no names of projects or clients, no transcripts, notes or documents, and no email addresses, and we do not store IP addresses with them. Inside the app, which pages you open and which buttons you press in your browser are recorded only if you allow it (see section 13), and pages are recorded by their type (for example "a project page"), never by their address or title.

5. Why we use your data and our legal bases

To provide the Service (create your account, run your projects, generate invoices) — performance of a contract.
To send our beta announcement to people who joined the waitlist, and product updates you ask for — your consent, which you can withdraw at any time.
To keep the Service secure, prevent abuse, debug, and improve it — our legitimate interests in running a safe, reliable product.
To understand how Loopsii is used and improve it (product analytics) — for usage events recorded by our servers, our legitimate interest in building a better product; for analytics in your browser (pages opened and buttons pressed in the app), your consent, which you give in the app and can withdraw at any time in Settings → Account → Privacy.
To meet legal, accounting, and tax obligations (e.g. retaining invoice records) — compliance with a legal obligation.
To record and transcribe meetings — your consent and your instructions (see section 6).

6. The AI meeting assistant & call recordings

The Loopsii desktop app records meetings locally on your Mac — it captures your microphone and your computer's audio output directly, and no bot joins your calls. Transcription happens on your device. The app then syncs each meeting's transcript to the Service, where our AI providers — Anthropic, Z.ai (Zhipu AI) and OpenAI — process it to create summaries, suggested tasks and chapters, and where it is turned into text embeddings (Voyage AI) so you can search it. Requests to these providers can go through Vercel AI Gateway, which can also route them to xAI, Google (Gemini), TypeSafe (its Jev model) and GLM models hosted by Nebius (see section 8). Our AI providers process meeting and screen-recording transcripts and notes; to work out which project a screen recording belongs to, a vision model may also receive a few still frames from it, together with your list of projects and their clients. The same providers power Ask Loopsii, pre-meeting briefs, search and the app's other AI features, which use the questions you ask and the relevant content from your workspace.

By default the app also uploads each meeting's audio so you can play it in the web app; you can turn this off in the Mac app's settings ("Sync recordings to the web app"). With "Record screen during meetings" on, which is the default, the app also records the call's window (or another part of your screen you choose) and uploads one video file per meeting, which includes the call's audio; you can turn this off in the Mac app's settings too, and you can delete a meeting's video at any time in the web app. Screen recordings you make with the app are uploaded so they can play at their watch link. These files are stored with our storage provider (Cloudflare R2). Voice signatures used to recognise recurring speakers ("voiceprints") are biometric-style data and never leave your Mac. Recordings and transcripts can contain the voices, faces and personal data of everyone on the call.

Your responsibility: recording laws differ by country and US state (some require all-party consent). You must inform participants and obtain any legally required consent before recording. AI summaries can be inaccurate or incomplete — review them before relying on them. We do not use your meeting content to train third-party AI models, and we use our AI providers under terms that do not permit training on content submitted through their APIs.

7. Loopsii Companion browser extension

Loopsii Companion is an optional browser extension that gives transcripts accurate speaker names for calls in Google Meet, Microsoft Teams and Zoom in your browser, and can record a browser tab for the Loopsii app. During such a call, the extension reads the participant display names, the speaking indicators and whether your own microphone is muted, as the call page already shows them on your screen. On Google Meet, when captions are on, it also reads the speaker name shown with each caption, but never the caption text. It delivers this — over a local connection on your computer — to the Loopsii app, which stores it only with a recording of that call.

When you ask for a recording of a browser tab — with "Record this tab" in the extension, or by picking that tab in the Loopsii app — the extension captures that tab's videoand sends it to the Loopsii app, which handles it like any other recording you make with the app (section 6).

Its call features run only on meet.google.com,teams.microsoft.com, teams.live.com, zoom.usand zoomgov.com.
It never captures audio, chat or caption text, and it captures a tab's video only when you ask for that recording.
So that you can pick a tab in the Loopsii app, it shows the app the titles, addresses and icons of your open tabs; that list goes only to the app on your computer.
Everything it reads or records goes only to the Loopsii app on your own computer; the extension itself uploads nothing. We receive speaker names when the recorded meeting syncs to the Service, and tab video as part of the recording it belongs to (section 6).
Its only network request downloads updated page selectors from app.loopsii.comwhenever the extension starts up and once a day; the request carries no account, meeting or browsing data.
On your computer it keeps only a diagnostic setting, the downloaded selectors and, until you close the browser, which of your tabs are in a call.
It is an optional enhancement — not installing it changes nothing else about Loopsii.

8. Who we share your data with

We do not sell your personal data. We share it with service providers ("sub-processors") who help us run the Service, under contracts that require them to protect it:

Supabase — authentication and database hosting.
Vercel — application and website hosting, and website analytics.
Anthropic — AI processing of meeting and screen-recording transcripts and notes (summaries, tasks, chapters, transcript clean-up) and of still frames from screen recordings, and the automatic fallback when another AI provider fails.
Z.ai (Zhipu AI, People's Republic of China) — AI processing of the same content.
OpenAI (United States) — AI processing of meeting and screen-recording transcripts and notes, through Vercel AI Gateway.
Vercel AI Gateway (Vercel Inc., United States) — a router through which our AI requests can go to the providers above and to xAI (United States), Google (Gemini, United States), TypeSafe (its Jev model) and GLM models hosted by Nebius.
Voyage AI — text embeddings that make your transcripts, notes and documents searchable in the app.
Cloudflare — storage of recordings, transcripts, and attachments (R2), and the proxy through which analytics events reach PostHog.
Resend — sending transactional and product emails.
Sentry — error monitoring and diagnostics.
PostHog — product analytics, hosted in PostHog's EU Cloud (Frankfurt, Germany).
Stripe — payments for Loopsii subscriptions. Stripe collects and holds your name, email address, billing country and address, payment method and transaction history (see Stripe's privacy policy); card numbers never reach us. We share your email address and account ID with Stripe and keep only your Stripe customer and subscription IDs, your plan, and your subscription's status and renewal or end date.
Google — calendar integration (only if you connect it).

We may also disclose data where required by law, to protect our rights or users' safety, or as part of a merger or acquisition (with notice where required).

9. International data transfers

Some of our providers are located in the United States, in the People's Republic of China, or otherwise process data outside your country. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards — the EU–US Data Privacy Framework where the recipient is a certified US organisation, and the European Commission's Standard Contractual Clauses with additional measures for every other destination, including transfers to our AI provider in China. You can ask us for a copy of the relevant safeguards. Product analytics data is stored in the EU, in PostHog's EU Cloud in Frankfurt, Germany.

10. How long we keep your data

We keep personal data only as long as needed for the purposes above. Account and content data is kept while your account is active and for a reasonable period afterwards; invoices and related records are kept for the period required by tax and accounting law (in Poland, five years from the end of the tax year in which the invoice was issued); meeting recordings and transcripts are kept for as long as your account is active or until you delete them; data from our waitlist, which closed on 8 October 2026, is kept until we send our beta announcement, or until you ask us to remove it if that comes first, and is then deleted; product-usage events are kept for up to 12 months. We then delete or anonymise it.

11. How we protect your data

We use technical and organisational measures including encryption in transit, encryption of sensitive tokens, database row-level security to isolate each account's data, access controls, and monitoring. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority of a personal-data breach where the law requires.

12. Your rights

Depending on where you live, you may have the right to access, correct,delete, restrict, or object to our processing of your personal data, to data portability, and to withdraw consentat any time. You can also unsubscribe from marketing emails using the link in each message. To exercise any right, email hey@loopsii.com.

If we process your client/meeting data as a processor, please direct those requests to the Loopsii user (the controller); we will help them respond.

If you are in the EEA/UK you have the right to complain to your local data protection authority; California and other US-state residents have additional rights, including the right not to be discriminated against for exercising them.

13. Cookies & similar technologies

Our website uses only strictly necessary cookies/local storage required for it to work (for example, remembering that you closed the cookie notice), and we do not use advertising or third-party tracking cookies, so it does not ask for consent. To see how the website is used, it runs Vercel Web Analytics, which sets no cookies and stores nothing on your device: it counts page views and clicks on the website's buttons and links, and recognises a visitor only by a hash that changes every day. When you follow a sign-up button to the app, the link carries the button's name, and the app records which button your account came from (see product analytics in section 5). The Loopsii app uses essential cookies to keep you signed in. Product analytics in the app runs in your browser only after you allow it in the app: it keeps a pseudonymous identifier in your browser's local storage (no analytics cookies), and you can switch it off at any time in Settings → Account → Privacy, which stops it and resets that identifier.

14. Children

Loopsii is a business tool not intended for children. We do not knowingly collect data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

15. Changes to this policy

We may update this policy from time to time. We will post the new version here with a revised "last updated" date and, for material changes, give you reasonable notice.

16. Contact us

Questions or requests: hey@loopsii.com, or write to STABONDAR STANISLAV BONDAR, aleja Wilanowska 67E, 02-765 Warsaw, Poland.