This policy explains how Loopr ("Loopr", "we", "us") handles personal data when you install the Loopr app on your Shopify store, when your customers receive WhatsApp messages sent through Loopr, and when you visit loopr.chat.
1. Two kinds of data, two roles
Merchant data. Information about you as a Loopr customer: your store, your contact details, your WhatsApp Business account and how you use Loopr. For this data, Loopr is the controller.
Shopper data. Information about the customers of your store that Loopr handles to send WhatsApp messages on your behalf. For this data, you, the merchant, are the controller and Loopr is your processor. We only use it to provide Loopr to you, following your instructions and this policy.
2. What we collect
From you, the merchant
- Your Shopify store domain and store name, and the dates you install or uninstall Loopr.
- An access token from Shopify that lets Loopr read and update your store data within the permissions you approve at install.
- Your WhatsApp Business account details from Meta: the business and account identifiers, the number you send from, the name customers see, sending status, message quality and an access token Meta issues to Loopr.
- The templates, text and images you create in Loopr, and your notification settings.
- Messages you send to our support team.
About your customers, through Shopify
- Name, phone number, email address, country, city and customer tags.
- Whether the customer agreed to receive marketing by email or WhatsApp.
- Order activity needed to send order updates and show results: order count, first and last order dates, currency, and order events such as created, paid, shipped or delivered. We do not keep a copy of your order history.
- Checkout activity needed to send abandoned cart reminders.
From your storefront
- Back in stock sign ups: the phone number and name a shopper enters, the product they want, and whether they agreed to marketing messages.
From WhatsApp
- For each message: the recipient's number, the template used, and whether it was sent, delivered, read or failed, with any error Meta reports.
- When a customer asks WhatsApp to stop or resume marketing messages from your business.
From this website
loopr.chat uses no cookies, no analytics and no advertising trackers. Our hosting provider keeps standard server logs (such as IP address, browser type and the page requested) for security and to keep the site running.
3. How we use data
- To send the WhatsApp messages you turn on, to the customers you choose, at the time you set.
- To keep your customer details in Loopr matched with Shopify.
- To respect consent: we do not send marketing to a customer who has not agreed to it or has asked to stop.
- To show you which messages were sent, delivered, read or failed.
- To provide support, keep Loopr secure, prevent abuse and fix problems.
- To meet our legal obligations, including Shopify's and Meta's platform rules.
We do not sell personal data, we do not use shopper data to market our own products, and we do not combine one merchant's shopper data with another's.
Legal bases (EU, UK and similar laws)
For merchant data we rely on performing our contract with you, our legitimate interest in running and securing Loopr, and legal obligations. For shopper data, the merchant decides the legal basis, usually the customer's consent for marketing messages and the performance of the order contract for order updates.
4. Who we share data with
We share data only with the service providers below, who process it for us under written terms, and with authorities when the law requires it.
| Provider | What they do for Loopr | Where |
|---|---|---|
| Shopify | Runs your store. Loopr reads your customers and orders from Shopify | Canada, United States and other regions Shopify uses |
| Meta Platforms (WhatsApp Business Platform) | Delivers your WhatsApp messages, checks templates and reports delivery, read and reply status | United States and other regions Meta uses |
| Amazon Web Services | Hosts the Loopr servers and database, and stores encrypted backups | Region chosen for the Loopr server |
| Cloudflare | Stores the images you add to templates and serves this website | Global network |
Shopify and Meta also act under their own terms and privacy policies when you use their services. Meta bills you directly for WhatsApp messages; Shopify bills you for Loopr. We never see your card details.
If Loopr is involved in a merger, acquisition or sale of assets, data may transfer as part of that deal, and this policy will continue to apply to it.
5. International transfers
Our providers may process data outside the country where you or your customers live. Where the law requires it, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
6. How long we keep data
- While Loopr is installed, we keep your store's data so the app can work.
- After you uninstall, Shopify sends us an erasure request 48 hours later. We then delete your store's data, including customer records, messages, templates and your WhatsApp connection, within 30 days.
- When a shopper asks your store to erase their data, Shopify passes the request to us and we delete that customer's data within 30 days.
- Opt outs. If a customer asked to stop receiving messages, we may keep their phone number on a do not message list for your store, only so we never message them again by mistake.
- Backups and server logs are kept for a short period for recovery and security, then deleted on a rolling schedule.
- Billing and legal records are kept as long as the law requires.
7. Security
Data travels over encrypted connections. Our database runs on a private server that is not reachable from the internet, access is limited to the people who need it, and secrets such as access tokens are never written to logs. No system is perfectly secure. If a breach affects your data, we will tell you without undue delay and as the law requires.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the use of your personal data, to receive a copy of it, and to withdraw consent at any time. This includes rights under the EU and UK GDPR, California and other US state privacy laws, and India's Digital Personal Data Protection Act, 2023. We do not discriminate against anyone for using these rights.
Merchants can use these rights by emailing [email protected]. We reply within 30 days. You can also complain to your local data protection authority.
9. If you got a WhatsApp message from a shop using Loopr
The shop that messaged you decides what data is used and why, so please contact the shop first. You can also:
- Use the option in WhatsApp to stop marketing messages from that business, or block it.
- Ask the shop to delete your data. Shopify passes that request on to us.
- Write to [email protected] with the shop's name and your number, and we will pass your request to the shop and help them act on it.
See how to delete your data for step by step instructions.
10. Children
Loopr is a business tool and is not meant for anyone under 18. We do not knowingly collect data from children. If you believe we have, contact us and we will delete it.
11. Changes to this policy
We will update this page when our practices change and change the date at the top. If a change is significant, we will tell merchants inside Loopr or by email before it takes effect.
12. Contact us
Loopr
[email protected]
For users in India, our Grievance Officer under the Digital Personal Data Protection Act, 2023 can be reached at [email protected].