Privacy
Who processes your data, which data, why and with which providers. We only describe what the site really does.
Last updated:
In short
- This website sets no cookies.
- There is no analytics, tracking pixel or advertising.
- Nothing is loaded from third parties while you browse: fonts, icons and scripts are served from Loopryx’s own domain.
- We only receive what you type or send: the demo form, your messages to Loopryx AI and, if you confirm, a booking or your WhatsApp number.
- Your messages to Loopryx AI are processed with an AI model provider (OpenAI) to generate the replies.
- Nothing is booked or sent over WhatsApp without your explicit confirmation.
- The language is part of the page address (/ or /en/) and is not stored in your browser.
Data controller
Raúl Carbonero Garcia, who runs Loopryx as an individual from Spain. Loopryx is not a company for now; if the activity is formally registered, we will update these details. For any privacy matter, write to us at support@loopryx.com.
What data we process, why and on what basis
Visiting the website
- Data
- The technical data of any web request: IP address, browser, requested page, date and time.
- Why
- Serving the website and protecting it against abuse.
- Legal basis
- Legitimate interest in offering an available and secure website (Art. 6(1)(f) GDPR).
- Who processes it
- Cloudflare, which hosts the website and delivers it through its network. Loopryx keeps no logs of its own about your visits.
- How long
- Loopryx keeps no logs of your visits. Cloudflare keeps its technical logs for the period set by its own policy.
Theme preference
- Data
- Your theme choice: dark, light or system. Only if you change it.
- Why
- Remembering how you prefer to see the website.
- Legal basis
- It is a feature you ask for; the value never leaves your browser.
- Who processes it
- Only your browser (local storage, key loopryx-theme). It is never sent to any server.
- How long
- Until you clear this site’s data in your browser.
Demo request
- Data
- Your business website and your email. Your IP address is only used to limit repeated submissions: it is turned into a code (hash) and kept in memory for a short time, never stored.
- Why
- Preparing your personalised demo from your website’s public information, sending you the link and preventing abuse.
- Legal basis
- Steps taken at your request before a contract (Art. 6(1)(b) GDPR); limiting repeated submissions, legitimate interest in preventing abuse (Art. 6(1)(f)).
- Who processes it
- Cloudflare, which receives the form, and Loopryx Demo Lab, Loopryx’s own service that prepares the demos, on a Hostinger server. To generate the demo, your website’s public content is processed with Anthropic (an AI model provider); your email is not sent to Anthropic.
- How long
- The request (website and email) is deleted automatically 90 days after you send it. The demo stops being available after 7 days at most and is deleted from the server 30 days later.
Conversation with Loopryx AI
- Data
- The messages you type, the page language and two random identifiers, one for the conversation and one for each message. If you share contact details in the conversation (name, company, email or phone), they are stored with it. Your IP address and cookies are not forwarded to the assistant.
- Why
- Replying to you, keeping the context of the conversation and assessing which automation fits your business to prepare the follow-up. This assessment produces no automated decisions with legal effects on you.
- Legal basis
- Steps taken at your request before a contract, to reply to you (Art. 6(1)(b) GDPR); legitimate interest in assessing the fit and organising the follow-up (Art. 6(1)(f)).
- Who processes it
- The Loopryx assistant server, at Hostinger. To generate each reply, the message and the conversation context are sent to OpenAI; the request does not ask OpenAI to store the reply, although OpenAI may keep the data for a limited time under its own policy.
- How long
- In your browser, the conversation only exists while the page is open. On the server, the conversation and any contact details you gave are deleted automatically 12 months after your last interaction. The server’s technical logs only keep metadata (request identifier, status and timings), never the text of your messages, and are rotated automatically.
Booking a meeting, only if you confirm
- Data
- The time slot you choose and the email you enter to receive the confirmation.
- Why
- Creating the meeting and sending you the invitation with the link.
- Legal basis
- Steps taken at your request before a contract (Art. 6(1)(b) GDPR). The booking is only created after your explicit confirmation.
- Who processes it
- The Loopryx assistant server and n8n, Loopryx’s automation tool on the same server, which creates the event in Google Calendar (Google).
- How long
- The booking status is deleted with the conversation, 12 months after your last interaction. The event stays in Loopryx’s calendar for as long as needed to manage the meeting and its follow-up, and at most 12 months after the meeting date.
Continuing on WhatsApp, only if you authorise it
- Data
- Your phone number and your authorisation for us to message you.
- Why
- Messaging you on WhatsApp to continue the conversation.
- Legal basis
- Your consent (Art. 6(1)(a) GDPR), which you give by ticking the box and confirming. You can withdraw it at any time by writing to us; withdrawing it does not affect what was already done.
- Who processes it
- The Loopryx assistant server and n8n, which sends the message through Meta’s WhatsApp platform.
- How long
- The number and the delivery status are deleted with the conversation, 12 months after your last interaction. The messages we exchange on WhatsApp are kept for as long as needed to help you, and WhatsApp also processes them under its own terms.
If you email us
- Data
- Your email address and whatever you tell us.
- Why
- Replying to you and handling your requests, including the exercise of your rights.
- Legal basis
- Legitimate interest in replying to whoever writes to us (Art. 6(1)(f) GDPR) or, if you exercise a right, compliance with a legal obligation (Art. 6(1)(c)).
- Who processes it
- Cloudflare, which receives mail sent to support@loopryx.com and forwards it to Loopryx’s mailbox.
- How long
- For as long as needed to handle your enquiry and its follow-up, and at most 12 months after our last exchange, unless a legal obligation requires keeping it longer.
Providers
These providers process data on Loopryx’s behalf, each only for the function shown:
- Cloudflare: hosting and delivering the website, receiving the demo form, forwarding mail sent to support@loopryx.com and storing backups.
- Hostinger: the server running the assistant, Demo Lab and n8n.
- OpenAI: generating Loopryx AI’s replies.
- Anthropic: generating demos from your website’s public content.
- Google (Google Calendar): meetings you book.
- Meta (WhatsApp): WhatsApp messages you authorise.
International transfers
Cloudflare, OpenAI, Anthropic, Google and Meta are headquartered in the United States and may process data outside the European Economic Area. You can ask us about the safeguards that apply to each transfer by writing to support@loopryx.com.
Backups
Loopryx’s servers make technical backups so they can recover from a failure. Deleted data also disappears from them as those backups are renewed, within 60 days at most.
Your rights
You can ask for access to your data, its rectification or erasure, object to its processing or request its restriction and portability. Where processing is based on your consent, you can withdraw it at any time. Write to us at support@loopryx.com.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD): aepd.es.
Security
All website traffic is encrypted (HTTPS), provider credentials only exist on the servers and never reach your browser, and access to the servers is restricted.
Changes
If what the website does with your data changes, we will update this page and its date.