Privacy Policy

1. Who we are

Loopin is an AI personal assistant that helps you triage email and chat, generate briefings, draft replies, and surface alerts across connected tools. The service is operated by Mamutech Online and is available at https://omnisync.mamutech-online.workers.dev.

For privacy questions or data requests, contact us at loopin@spendify.com.ng. See also our Contact page.

2. Scope of this policy

This policy applies to:

• Visitors to our marketing site and account pages
• Registered users of the Loopin dashboard
• Users who connect third-party accounts (including Gmail via Google OAuth)
• Recipients of transactional emails we send when you enable email notifications

By creating an account or connecting an integration, you agree to this Privacy Policy and our Terms of Service.

3. Information we collect

3.1 Account information

When you sign up or sign in, we may collect:

• Name and email address
• Authentication identifiers from our auth provider
• Plan, billing-related redemption codes, and usage quotas
• Assistant preferences (timezone, display name, notification channels, tone settings, briefing cadence)

3.2 Google / Gmail information (OAuth)

If you choose to connect Gmail, Loopin requests access through Google’s OAuth consent screen. We currently request the Google scope:

• https://www.googleapis.com/auth/gmail.modify — read, compose, and modify Gmail messages and labels (used to triage mail, apply Loopin labels, and create draft replies in your Gmail Drafts folder)

Depending on your use of the product, Gmail data we process may include:

• Message metadata (sender, recipients, subject, timestamps, labels, thread IDs)
• Message content (body/snippet) needed to classify urgency, generate summaries, and draft replies
• Drafts we create on your behalf (never sent unless you send them yourself in Gmail or explicitly confirm a send action)
• OAuth tokens (access and refresh tokens) stored securely to keep your connection working

We do not sell Gmail content. We do not use Gmail data for advertising. We do not use Gmail data to train generalized public AI models.

3.3 Other integrations

If you connect WhatsApp, Slack, Outlook, Discord, LinkedIn, Calendly, or similar channels, we collect only the credentials and content needed to provide the features you enable (briefs, alerts, drafts, schedules). Each connection is optional and revocable.

3.4 Product usage and device data

• Feature usage events needed for quotas, reliability, and abuse prevention
• Basic technical logs (IP address, user agent, error traces) for security and debugging
• Optional browser push subscription endpoints if you enable push notifications

3.5 Communications

If you email us or enable email/WhatsApp/push alert delivery, we process the content of those communications and delivery metadata.

4. How we use information

We use personal data to:

• Provide, operate, and improve Loopin (triage, labeling, briefings, alerts, drafts)
• Authenticate you and secure your account and connected integrations
• Apply your settings (tone, notification channels, briefing schedules, auto-draft preferences)
• Send service emails you enable (alerts, digests, delivery checks)
• Enforce plan limits, prevent fraud/abuse, and comply with law
• Respond to support requests

AI processing is used to classify messages, summarize activity, and draft suggested replies. Outputs are assistive; you remain responsible for reviewing content before sending.

5. Google API Services User Data Policy (Limited Use)

Loopin’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• Gmail data is used only to provide and improve user-facing features that are prominent in Loopin (inbox triage, labels, drafts, alerts, and briefings).
• We do not transfer Gmail data to third parties except as necessary to provide the service (e.g., infrastructure and AI model providers acting as processors) or as required by law.
• We do not use Gmail data for serving advertisements.
• We do not allow humans to read Gmail content unless you give us explicit permission for support, it is needed for security/abuse investigation, or we are required by law — and then only under appropriate controls.
• We do not use Gmail data to train foundation models that are unrelated to providing your Loopin experience.

6. How we share information

We may share data with:

• Service providers / processors that host our app, database, auth, email delivery, background jobs, and AI inference — under contractual obligations to protect data and use it only to serve Loopin
• Integration providers (e.g., Google) when you authorize a connection — according to their terms
• Legal and safety recipients when required to comply with law, enforce our Terms, or protect users

We do not sell personal information.

7. Storage, retention, and security

• Account and preference data are stored in our application database.
• OAuth tokens are stored server-side and used only to call APIs on your behalf.
• We retain account data while your account is active. You may request deletion (see Section 9).
• Operational logs are retained for a limited period for security and reliability, then deleted or aggregated.
• We use industry-standard safeguards (encryption in transit, access controls, least-privilege keys). No method of transmission or storage is 100% secure.

8. Your choices and controls

• Disconnect Gmail: Remove the Gmail connection in Loopin Integrations, and/or revoke Loopin access in your Google Account permissions.
• Notification channels: Turn email, push, or WhatsApp delivery on/off in Settings.
• Drafts: Loopin creates drafts for review; sending remains under your control unless you explicitly confirm a send action in the product.
• Export / preferences: You can update profile and assistant settings in the dashboard.

9. Access, correction, and deletion

To access, correct, or delete your personal data, email loopin@spendify.com.ng from the address on your account. We will respond within a reasonable period. Deleting your account may not immediately remove all backups or legally retained records.

If you revoke Google access, we will stop using new Gmail data via that connection. You may also ask us to delete stored Gmail-related tokens and associated Loopin records tied to that connection.

10. International transfers

We may process data in regions where our infrastructure providers operate. Where required, we use appropriate safeguards for cross-border transfers.

11. Children’s privacy

Loopin is not directed to children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided data, contact us and we will take appropriate steps.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the “Last updated” date. Material changes may also be communicated in-product or by email when appropriate.

13. Contact

Privacy requests: loopin@spendify.com.ng
Website: https://omnisync.mamutech-online.workers.dev
More ways to reach us: Contact