loopedBack to Looped

Looped Privacy Policy

Last Updated: September 22, 2026

This Privacy Policy explains what information Looped ("Looped", "we", "us") collects and processes, why we do it, and the choices you have.

Looped serves two sides of the creator economy:

This policy also covers people who do not have a Looped account: visitors to public kits, widgets, and free tools; creators whose publicly available information appears in our creator index; and campaign participants invited to a brand's campaign.

Some features described here are rolled out gradually and may not be available to every account or in every region. Where a feature is not available to you, the corresponding processing does not occur.

1. Summary

We collect and use information to:

We do not sell your personal data to data brokers and we do not run third-party targeted advertising based on your activity on Looped.

2. Information We Collect from Creators with Accounts

2.1 Account and Profile Information

When you create or update an account, we collect:

2.2 Third-Party Sign-In (Google)

If you sign in or register using Google, we receive information from your Google account, including:

We use this information to create or log you into your Looped account. Google sign-in gives us basic profile information only. It does not give us access to your Gmail, contacts, calendar, or any other Google service. (Brands may separately choose to connect a mailbox; see Section 4.7.) Your Google sign-in is governed by Google's own privacy policy in addition to this one.

2.3 Subscriptions, Payments, and Billing

Looped offers paid creator plans (currently Kit Pro and Looped Widget, billed monthly or annually). If you purchase a plan, we and our payment processor collect and process:

Stripe processes your payment information under its own privacy policy and acts as a payment processor on our behalf. We use subscription status to determine which features are available on your account and to send you billing-related communications (receipts, renewal notices, failed-payment alerts), which are transactional and sent regardless of marketing preferences.

2.4 Free Preview from Publicly Available Information

If you use Looped's free tier, you can generate a preview media kit by providing a single social account handle. To build this preview, we retrieve publicly available information associated with that handle, such as the public profile name, photo, follower count, and public posts and their publicly visible metrics, directly from the public web.

2.5 Device and Security Data

To protect your account and detect unauthorized access, we collect:

This data is used solely for account security purposes, including two-factor device verification when you log in from a new device.

2.6 Device Permissions and Media Access

Looped may request access to device capabilities to support specific features:

2.7 Content You Create and Share

Looped allows you to create a media kit and portfolio items, including Brand Work (paid or gifted collaborations) and Content Spotlight (self-selected posts). We collect:

Images and videos you upload or add are stored with our cloud storage and content-delivery provider (Cloudflare R2) so they can be displayed on your kit.

2.8 Networking Data

We collect information about your connections and interactions, including:

2.9 Contact Sync (Optional)

If you choose to enable contact syncing and grant device permission, Looped will read contact identifiers from your device (such as phone numbers and email addresses) for the purpose of:

Privacy-by-design note: Looped is designed to avoid storing your raw address book. We normalize contact identifiers and store cryptographic hashes (HMAC) for matching rather than storing full contact lists in plaintext. We also store sync state (e.g., whether sync is enabled, permission status, and last sync time).

2.10 Discovery, Ranking, and Analytics Signals

To improve discovery and recommendations and to measure product performance, we collect engagement and analytics signals such as:

These signals may be used to rank and diversify your discovery feed and to generate aggregated analytics.

2.11 Notifications and Device Information

If you enable notifications, we collect:

2.12 Safety and Moderation Data

To keep Looped safe, we collect:

2.13 Connected Social Accounts (Verified Metrics and Audience Insights)

When you connect a social account (Instagram, TikTok, or YouTube) to verify your metrics, you authorize Looped to access certain read-only information from that platform on your behalf. Depending on the platform, this connection is made through our data provider Phyllo (InsightIQ) or directly through the platform's official API (for example, TikTok's developer API or Meta's Instagram API). The information accessed includes:

We use this to display verified metrics and audience insights on your media kit and widget, to let you feature selected posts as portfolio work, and, if you take part in a brand campaign, to match your posts to that campaign (see Section 5). This access is read-only. Looped never posts, messages, or takes actions on your connected accounts, and you can disconnect an account at any time. Audience insights are provided to us in aggregate and do not identify your individual followers. Your connection and use of platform data is also governed by each platform's terms and, where applicable, by Phyllo's privacy practices.

When you connect an account, we also mark the matching entry in our creator index as claimed by you, or add one if none exists, and copy your verified stats, bio, and avatar into it so brands see accurate, creator-confirmed information (see Section 3.6).

Paid plans may allow multiple connected accounts; the same practices in this section apply to each account you connect.

2.14 Your Public Media Kit (Shareable Link)

Looped lets you publish a media kit and share it via a public link (for example, loopedsocial.com/yourhandle). Anyone with the link can view your kit without a Looped account. Your published kit may include your name, handle, photo, location, category, bio, verified metrics, audience insights, selected portfolio/brand work, and a way to contact you.

You choose what to publish, can keep items in draft, and can deactivate or let your share link expire. Information you publish to your kit is, by design, publicly viewable by anyone who has the link.

2.15 The Looped Widget (Embeds on Third-Party Sites)

The Looped Widget lets you embed a live element displaying your stats (and other kit information you choose) on websites and pages you control, for example a personal site, a Notion page, a Canva site, or a Wix site. When you create and place a widget:

The third-party site hosting your widget has its own privacy practices, which we do not control. You can remove or deactivate a widget at any time, after which it will stop rendering your information.

2.16 Media Kit and Widget Analytics

When someone views your public media kit, we collect limited analytics to show you how your kit is performing, such as the number of views, unique viewers (counted using a randomly generated session identifier), and the date and time of views. We use this to provide dashboard insights (for example, "who's looking"). We similarly measure widget renders so you can see where and how often your widget is being displayed.

Viewers of a public kit or widget are typically brands or prospective partners and may not have Looped accounts. We process only limited technical data about them, such as a session identifier and, for security and anti-abuse purposes, network metadata.

2.17 Product Analytics

We use a product-analytics provider (PostHog) to understand how people use Looped, for example which onboarding steps are completed and which features are used, so we can improve the product. These are product-usage events tied to a user or session identifier. We do not use them for third-party advertising, and we do not sell this data.

3. The Creator Index (Publicly Available Creator Information)

To help brands find creators to work with, Looped maintains a creator index: a database of creator profiles built from information that creators have made publicly available on social platforms. You may appear in the creator index even if you have never created a Looped account. This section explains what the index contains, where it comes from, how it is used, and how to be removed from it.

3.1 Where the Information Comes From

We collect creator index information from publicly accessible sources only:

We do not access private accounts, log in to any platform on a creator's behalf, or collect non-public information for the index.

3.2 What the Index Contains

For each creator in the index we may hold:

The full public profile payload as retrieved from the platform is also retained so we can re-derive these fields as the product evolves.

3.3 AI-Generated Summaries and Inferred Attributes

We use AI models (currently Anthropic's Claude models) to make the index searchable in plain language. For each creator, the model receives the public profile fields listed above and up to about fifteen recent public posts (captions, counts, paid-partnership labels, tagged locations and accounts) and produces:

We also infer a creator's gender from pronouns the creator has written in their own bio (for example "she/her") and from the AI summary. Where no pronouns are stated, gender is left unknown. We do not infer race, ethnicity, sexual orientation, religion, health, or political views, and our AI assistant is instructed not to filter creators on those characteristics.

We run automated age screening on public bio and caption text (for example school-year or stated-age references) to exclude accounts that appear to belong to people under 18. This screening is used only to remove accounts from the index; we do not store an inferred age.

AI-generated summaries and inferred attributes are estimates. They may be wrong. Brands are told that these fields are model-generated, and claimed creators can correct their profile information by connecting their account.

3.4 How the Index Is Used

We use creator index information to:

3.5 Contact Details and Brands

A creator's public business email or phone number is not shown on the public creator profile page. A signed-in brand with a verified email address may request to reveal a creator's business email or phone number one at a time. Each reveal is logged (which brand user requested it, for which creator, and when), brands are limited in how many contacts they may reveal per day, and revealed contact details are labelled as either creator-confirmed or drawn from the public profile. Creators who have claimed their profile can see how many times their contact details have been revealed.

Brands may only use revealed contact details to contact creators about genuine collaboration opportunities and must comply with applicable anti-spam and marketing laws.

3.6 Claiming Your Profile

If you create a Looped account and connect the matching social account, your index entry is marked as claimed. From then on, brands see your creator-confirmed stats, bio, and avatar rather than only the scraped values, your entry is never automatically purged, and you can see contact-reveal counts. Deleting your Looped account does not by itself remove your index entry; use the removal process in Section 3.7 if you also want to leave the index.

3.7 Removal from the Index

If you do not want to appear in the creator index, you can ask to be removed at any time at loopedsocial.com/creator-data or by emailing [email protected] with the handle(s) concerned. Because a removal also blocks future collection, we first confirm the request comes from the account holder: by a one-time link sent to the business email published on the profile, by a short code you place in the profile bio for a moment, or by your being signed in to the Looped account that claimed the entry. Pending requests expire after 48 hours, and we keep a record of each request (handle, method, time, and network address) as the audit trail. Removal then deletes your profile, posts, and history from the active index, marks the handle so it is not re-added by our automated collection, and prevents invitation emails. Hosted copies of media and backups are removed on their normal cycle. Records that document the removal itself, and contact-reveal audit logs held for brand accountability, may be retained.

3.8 Retention

Index entries that have not been refreshed from a public source for 12 months are automatically purged, unless the creator has claimed the entry. Daily performance history is kept while the entry exists so growth can be shown over time.

3.9 Legal Basis

Where data-protection law requires a legal basis, we process creator index information on the basis of our legitimate interest in operating a creator-discovery service for professional collaboration, using only information that creators have chosen to make public in a professional context, subject to the screening, contact-reveal limits, claim, and removal controls described above. You may object to this processing at any time using the removal process in Section 3.7.

4. Information We Collect from Brands

4.1 Brand Accounts and Access Requests

Brand access may be invitation-only. When you request access or sign up, we collect:

Access requests, new workspaces, and plan changes generate an internal notification to Looped staff (delivered to our team's Slack workspace) containing the brand name, email, and website so we can review and approve access.

4.2 Brand Sign-In

Brands sign in with a one-time link emailed to their address or with Google. Google sign-in for brands gives us your email address and Google account identifier only. Sessions last up to 14 days. Some actions (sending email, revealing creator contacts) require a verified email address.

4.3 Searches, Shortlists, and Lists

We store the searches you run, the filters you apply, the creators you save to lists and shortlists, the creators you hide, and creators you move into a campaign as prospects, together with the timestamps of those actions.

4.4 The Brand AI Assistant

The brand assistant lets you describe who you are looking for in plain language, refines search filters, explains why creators match, and highlights standout creators. When you use it:

Anthropic processes this information as our service provider under its commercial terms, which do not permit it to use our data to train its models. Assistant responses are generated automatically and may be inaccurate; they are suggestions to help you search, not advice or a guarantee about any creator. Do not enter sensitive personal information (yours or anyone else's) into the assistant. The assistant is instructed to decline requests to filter creators by protected characteristics such as appearance, ethnicity, age, sexuality, religion, or politics.

4.5 Campaigns

When you create a campaign we store the campaign details (name, brief, deliverables, platforms, hashtags, dates, usage terms, fee and payment terms) and, for each creator you add, their handle, display name, avatar, contact email, fee, deliverable, due date, payment status, and the status of your outreach (prospect, confirmed, invited, connected, awaiting post, post live). We also store the invitations you send (as a one-way hash of the invite token, the recipient address, and timestamps), the email templates you write, and the posts matched to the campaign (see Section 5.3).

4.6 Agreements

You may upload your own agreement documents (PDF) for creators to accept. We store the file, its version history, and a cryptographic fingerprint of each version. When a creator accepts or declines, we record their typed name, the decision, the date and time, the IP address and browser used, and the exact document version, and we make those records available to you as an audit trail. Looped does not draft or generate agreements, and click-acceptance on Looped is an acceptance record, not an electronic-signature service.

4.7 Connected Mailbox (Gmail or Microsoft 365)

To let you email creators from inside Looped, you may connect your own Google or Microsoft mailbox. Connecting is optional and you can disconnect at any time from your settings or from your Google or Microsoft account permissions.

4.8 Instagram Messaging

Where offered, you may connect your brand's own Instagram professional account so that replies from creators who message you on Instagram appear in your Looped inbox and you can reply within the window Meta permits. Looped does not send unsolicited Instagram messages and does not message creators who have not messaged you first. Meta's platform terms apply to this connection.

4.9 Invoices and Accounting Handoff

You may log invoices you receive from creators (amount, currency, dates, project code, and the invoice file). If you use the accounting handoff feature, Looped emails the accounting contacts you set in your settings a summary of selected invoices, a spreadsheet of the invoice details, and the invoice files (or time-limited download links when files are large). No payment moves through Looped: the invoice tracker records what you owe and what you have paid, and you pay creators directly.

4.10 Deleting Brand Data

You can delete your workspace's data from your settings. This removes your conversations with the AI assistant, lists, campaigns, campaign creators and invitations, agreement documents, briefs, settings, and user records. Contact-reveal audit logs are retained for creator accountability. If you have connected a mailbox or Instagram account, disconnect it before or after deletion to ensure stored tokens and synced messages are also removed, or ask us at [email protected].

5. Campaign Participants (Creators Invited by Brands)

If a brand invites you to a campaign, some of your information is processed on the brand's behalf so the brand can run its campaign. This applies whether or not you already have a Looped account.

5.1 Invitations and Outreach

The brand adds your handle, name, avatar, and email address (from the creator index, from information you gave them, or from their own records) to its campaign. Invitation and follow-up emails are sent either from the brand's own connected mailbox or by Looped on the brand's behalf. Invitation links are unique to you and expire after 30 days.

5.2 Connecting to a Campaign

To confirm you are the owner of the account the brand wants to work with, you connect a social account through the campaign link. You can do this by signing in to an existing Looped account with a connected account, by creating a Looped account, or, where offered, through a social sign-in that grants read-only access. Looped never sees your platform password and can never post as you. Connected-account tokens are stored encrypted.

5.3 Post Matching

Once connected, we periodically retrieve your recent public posts (typically the most recent 50) and match them to the campaign using the brand's handles and hashtags. Matched posts, and other posts published during the campaign window that may need review, are stored with their caption, link, thumbnail, and public performance counts and shown to the brand. The brand sees posts matched to its campaign, not your whole feed.

5.4 Agreements and Invoices

If the brand asks you to accept an agreement, we record your typed name, decision, the date and time, IP address, browser, and the document version, and share that record with the brand. If you send the brand an invoice, the brand may log the invoice details and file in Looped and forward them to its accounting contacts.

5.5 Your Choices

You can decline an invitation, decline an agreement, disconnect your account from a campaign, and ask the brand or Looped to delete your campaign records. Contact [email protected] if you need help.

6. Free Tools and Visitors

Our free tools (for example the Engagement Rate Calculator and the Fake Follower Checker) let anyone enter a public Instagram or TikTok handle. We retrieve that handle's public profile and recent public posts, calculate the result, and show it to you. Tool results are not stored and do not feed the creator index; a copy of the profile photo may be cached briefly so the result page renders. Requests are rate-limited to prevent abuse, and we log network metadata for security.

Visitors to public kits, widgets, creator profile pages, and packs are covered by Section 2.16.

7. AI Processing Across Looped

Beyond the features above, we use AI models to classify and screen creator index entries, to summarize public creator profiles, and to interpret brand briefs. Our current provider is Anthropic. We send only the information needed for the task, our provider does not use our data to train its models, and we do not use AI to make decisions that produce legal or similarly significant effects about you without human review. Where AI output is shown to users, we label it as model-generated where practical. You can contest an AI-generated summary or attribute about you by contacting [email protected] or by claiming your profile.

8. How We Use Your Information

We use your information to:

9. Visibility Controls (Draft vs Public)

We design discovery, profile, kit, widget, and brand surfaces to respect these controls.

10. How We Share Information

We share information only as needed to operate Looped:

We do not sell your personal data to third-party data brokers. Making creator index information available to brands is part of providing the Service, not a sale to data brokers; residents of California and other states with similar laws can find their rights in Section 12.

11. Data Retention

We retain information as long as needed to provide the service and comply with legal obligations.

12. Your Choices and Rights

Depending on your location, you may have rights such as access, deletion, correction, portability, restriction, and objection, and the right not to be discriminated against for exercising them. Regardless of where you live, Looped aims to provide:

To exercise a right that is not available in-product, email [email protected]. We may need to verify your identity, for example by confirming control of the email address or social account concerned. Residents of the European Economic Area, the United Kingdom, and Switzerland may also lodge a complaint with their local data-protection authority. California residents may designate an authorized agent to make requests on their behalf.

13. Security

We use industry-standard safeguards designed to protect your information, including:

No system is perfectly secure; please use a strong password and keep your device secure.

14. Age Requirement

Looped is intended only for people who are at least 18 years old. We do not knowingly collect personal information from anyone under 18, and we screen the creator index to exclude accounts that appear to belong to minors. If you believe someone under 18 has provided us with personal information or appears in the creator index, please contact us at [email protected] and we will take steps to delete it. If we become aware that we have collected personal information from someone under 18, we will delete that information promptly.

15. International Users

If you access Looped from outside the United States, your information may be processed in the United States or other locations where Looped or its service providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses for those transfers.

If you are located in the European Economic Area, the United Kingdom, or another region with data-protection laws, additional rights and protections may apply. See "Your Choices and Rights," and contact us to exercise them.

16. Changes to This Policy

We may update this policy from time to time. We will update the "Last Updated" date above. If changes are material, we will provide additional notice in the app or by email where appropriate.

17. Contact Us

Questions about privacy, or requests relating to the creator index: [email protected].