Privacy policy

What we collect

• When you book a demo. Your work email, and — if you fill them in — your company name and a description of what you are sourcing. Email is the only required field.
• When we set up your account. Your name, email and a password, which is stored only as a bcrypt hash. We never see or store the password itself.
• When you use the platform. The sourcing briefs, tech packs, calculations, saved runs and messages you create, plus the records needed to operate your account.
• Technical records. Standard server logs kept by our hosting provider, and rate-limiting counters keyed to your IP address and kept only for the length of the limit window.

Cookies, and what we do not do

loomlink AI sets one cookie: a signed, httpOnly session token that keeps you logged in. It is not used for tracking or advertising. Your light or dark theme preference is kept in your browser’s local storage and never leaves your device. To keep the workspace quick, the platform also keeps working copies of your recent analyses, drafts and comparison lists in your browser’s storage; they stay on that device and are cleared whenever anyone signs in on that browser.

There are no analytics scripts, advertising pixels, session recorders or third-party trackers on this site. We do not sell personal information, and we do not share it with data brokers, advertisers or other brands on the platform. Your briefs are yours.

What we use it for

To set up and operate your account, to run the analyses you ask for, to reply to you about access and support, to keep the platform secure and within its rate limits, and to meet our legal and accounting obligations. We do not use your briefs to market to you about anything you did not ask about, and we do not use one brand’s data to advise another.

Who processes it with us

We use a small number of service providers, each bound to use the data only to provide their service to us:

• Anthropic — when you run a brief, an AI analysis or the design assistant, the relevant text is sent to Anthropic’s API to produce the result. Anthropic does not train its models on business API traffic.
• Railway — application hosting and the managed PostgreSQL database.
• Airtable — the supplier records behind our onboarding pipeline.
• Resend — delivers our email: the notice to our team when you book a demo (your email, company and message) and sample-request confirmations.

These providers operate in Canada and the United States, so your information may be stored or processed outside your province or country and may be subject to the laws there.

How long we keep it

Account and platform data is kept for as long as your account is open, and for up to twelve months afterwards so an account can be restored if it was closed in error or if we need the record for a dispute. Demo requests we do not proceed with are deleted within twelve months. Ask us to delete any of it sooner and we will, except where we are required to keep it.

Your rights

Under Canadian privacy law (PIPEDA) and comparable laws elsewhere, you can ask us for a copy of the personal information we hold about you, ask us to correct it, ask us to delete it, or withdraw the consent you gave — including by replying to any email from us. Write to our privacy officer at info@loomlink.ca and we will answer within 30 days. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada.

If you are in Quebec, the Act respecting the protection of personal information in the private sector (Law 25) also applies. It gives you the same rights, plus the right to receive the computerized personal information you gave us in a structured, commonly used technological format, and the right to complain to the Commission d’accès à l’information du Québec. Because our service providers operate outside Quebec, your information may be processed outside the province, as described above.

Privacy officer

loomlink Intelligence Inc.’s Privacy Officer is responsible for protecting the personal information loomlink holds and for answering requests and complaints about it: info@loomlink.ca.

Security

Traffic to the platform is encrypted in transit. Passwords are hashed, session tokens are signed and httpOnly, factory identities stay masked until an NCNDA is signed, and access to production data is limited to the people who need it to run the service. No system is perfectly secure; if a breach ever affects your information, we will tell you and the relevant regulator promptly.

Changes, and how to reach us

If we change this policy, we will update the date at the top, and we will email account holders before any change that materially affects them. Questions, requests or complaints, including for our privacy officer: info@loomlink.ca. loomlink Intelligence Inc., Ontario, Canada.

See also our terms of service.