LOOPTREE AI SRL ("LoopTree", "we") is a company incorporated in the Dominican Republic, tax ID (RNC)
1-33-59048-4, located at Calle Héctor Inchaustegui No. 6, Piantini, Santo Domingo, Dominican Republic. We
build software and a conversation platform that lets businesses serve their customers on WhatsApp, Instagram
and other channels, with the help of artificial intelligence agents. This policy explains what data we
process, why, and what your rights are.
1. Two different roles
-
When a business uses our platform, the conversations
with its customers and the data in them belong to that business. LoopTree processes them on the business's
behalf and under its instructions, as a data processor. If you are a customer of a business that uses
LoopTree, that business is responsible for your data and its privacy policy applies. You can also contact
us and we will forward your request.
-
When you visit our website, contact us or manage a platform account, LoopTree is responsible for that data.
2. Data we process
-
Account data of platform users: name, email, phone
number, role and access logs.
-
Data the business connects from Meta, with its
authorization: the identifiers of its WhatsApp Business account, its phone numbers, its message templates
and its Instagram professional account.
-
Conversation content: the messages, images, audio
and documents that the business's customers exchange with it, and those customers' identifiers (phone
number, WhatsApp or Instagram user ID, profile name).
-
Technical and usage data: system logs, IP addresses,
browser type and platform usage metrics.
-
Billing data of client businesses. WhatsApp
messaging charges are billed by Meta directly to each business: LoopTree does not receive their card
details.
3. How we use it
-
To provide the service: receive and send messages,
show them in the inbox, run the AI agents each business configures, and generate reports and alerts.
-
To provide support and keep the platform secure.
-
To bill for our services and meet our legal and tax
obligations.
-
To improve the platform using aggregated metrics
that do not identify anyone.
We do not sell personal data. We do not use one business's data to provide the service to another.
4. Data obtained from Meta (WhatsApp, Instagram and Messenger)
-
We use it only to provide the service to the business that connected its account, in accordance with the
Meta Platform Terms and the WhatsApp Business terms.
-
We do not use it to build profiles, for advertising, or to train or improve artificial intelligence models
that are not for that business's exclusive use.
-
We delete it when the business disconnects its account, when it asks us to, or when it is no longer needed
(section 8).
5. Artificial intelligence
If a business turns on an AI agent, conversation content is sent to large language model providers to
generate replies. We work with providers that do not use this data to train their models and, where offered,
with zero data retention. Agents can make mistakes: each business decides when a conversation is handed to a
person.
6. Who we share data with
Only with the providers we need to deliver the service, under confidentiality and security obligations:
- Meta Platforms (WhatsApp Business Platform, Instagram and Messenger);
- cloud database and application hosting providers;
- artificial intelligence model providers;
- email and support tools.
We also share data when required by law or by a competent authority. An up-to-date list of providers is
available on request.
7. International transfers
Some providers process data outside the Dominican Republic, mainly in the United States. We require them to
apply security and confidentiality measures equivalent to those in this policy.
8. How long we keep it
-
Conversations: for the period each business sets,
usually 12 to 24 months.
- Technical logs: up to 30 days.
- Account data: while the account is active.
-
When the service ends: we delete the business's data
within 30 days, except what the law requires us to keep.
9. Security
-
Encryption: of data in transit and at rest, and of
Meta access credentials.
-
Isolation: each business's data is kept separate
from every other business's.
-
Access: controlled, with two-factor authentication.
- Backups and audit logs.
No system is infallible. If an incident affects your data, we will notify it as required by applicable law.
10. Your rights
Under Dominican Republic Law 172-13, you may request access to, correction, update or deletion of your data,
or object to its processing. Write to
grivas@looptree.ai. If LoopTree processes your data on behalf of a business, we will forward your request to that business
and help it respond. To delete data, see
Data Deletion.
11. Minors
The platform is not directed to anyone under 18.
12. Changes
If we change this policy, we will publish the new version on this page with its date.
13. Contact
LOOPTREE AI SRL · Calle Héctor Inchaustegui No. 6, Piantini, Santo Domingo, Dominican Republic ·
grivas@looptree.ai
· +1 (849) 205-0570
