Privacy

What we use and why

• Account information: your email, display name, password verification data, verification and recovery records. We use these to provide and secure your account, on the basis of performing our agreement with you and our legitimate interest in preventing misuse.
• Saved work: loops, word sets, settings and imported images you choose to save to your account. We store these to provide the saving and recovery features you request. Browser-only saves stay in your browser until you copy them to your account or submit them for an export.
• Exports: the settings and artwork needed to render your video, job progress and the resulting file. These are processed to provide your requested export and restrict downloads to your account.
• Purchases: your account email, selected plan, payment amount and currency, purchase and subscription status, Stripe customer and transaction references, credit use, cancellation and refund records, and your acceptance of the purchase terms. We use these to provide paid access and administer our agreement with you. Accounting records are also kept for legal obligations, and payment-security and dispute records for our legitimate interests in preventing fraud and resolving claims. Stripe collects payment and billing information at checkout; GTLoops does not receive or store your full card number or card security code.
• Support: your email, message and any files you choose to attach. We use these to answer you, resolve faults and handle privacy requests. Attachments are sent with your request to our support inbox.
• Security and technical records: network addresses in server access logs, account security identifiers, device/browser information and service errors. We use these for our legitimate interests in protecting accounts, preventing abuse and maintaining a reliable service.

Account details are needed for account features. You can use the guest Studio without registering. Please avoid putting sensitive personal information in word lists, imported artwork or support messages.

Browser storage

We use a necessary sign-in session cookie and browser storage for drafts, saved work and settings. Clearing site data removes browser-only work. Studio and the homepage do not load advertising trackers or third-party analytics. If you choose to buy or manage payment details, Stripe uses necessary payment and fraud-prevention technologies; see Stripe’s cookie policy.

Who receives information

Our hosting provider, OVHcloud, runs the server. Stackmail handles transactional email. Support messages and operational alerts are delivered to our Gmail inbox, provided by Google. These providers process information needed for those services.

Stripe processes payments, recurring billing, receipts, refunds and fraud checks. We send Stripe your account email, selected purchase and an account reference, and receive payment and subscription status so we can provide access. Stripe also processes information for its own payment-security and regulatory purposes, as explained in Stripe’s privacy notice.

Providers may process information outside the UK, including in the United States. Applicable provider agreements use recognised transfer safeguards, such as adequacy decisions or approved contractual safeguards where required. Stripe describes its arrangements in its privacy notice. Contact us for details or a copy of the safeguards relevant to your information.

We do not sell your personal information. Saved loops are not a public gallery. We may disclose information where legally required or necessary to investigate misuse and protect rights. GTLoops does not make automated decisions with legal or similarly significant effects about you; Stripe’s payment and fraud checks are described in its notice.

How long information stays

Account information and saved work are kept while needed to provide your account. Items moved to Bin remain recoverable until you permanently delete them. You can request account deletion through support. Browser-only work remains until you delete it or clear site storage.

Completed export downloads and job records expire after two hours. Interrupted work is kept so the service can resume it. Support and security records are kept while needed to resolve the issue, prevent repeated abuse or meet legal obligations; retention depends on those purposes and any open dispute. Backup copies may retain earlier versions after deletion until those backups are replaced. Deletion requests also apply to restored backups.

Private upload copies of support attachments are kept for delivery retries. Regular cleanup removes them after 24 hours following successful delivery, or after 30 days if delivery fails or is cancelled. Unsent partial uploads are removed after one hour. Copies received in our support inbox follow the support-record retention described above.

Payment records

We keep payment, refund, subscription and contract-confirmation records for six years after the end of the relevant financial year, where needed for accounting, tax and the establishment or defence of legal claims. An unresolved legal dispute may require longer retention. Deleting an account does not remove records we must retain for these purposes. Stripe keeps payment records under its own legal duties and retention rules.

Your choices and rights

You can ask to access, correct, erase or restrict use of your information or request a portable copy where applicable. You can object to processing based on our legitimate interests. These rights depend on the circumstances. Send a privacy request; we may need to verify your identity. You can also complain to the Information Commissioner’s Office.

We update this notice when the way we use information changes. Material changes will be brought to your attention through the service or account email as appropriate.