Privacy Policy

1. Who we are

Nearloop is an AI growth assistant for local businesses, based in Aurora, Illinois. It helps a business capture leads, keep a customer list, and send follow-up messages the owner approves.

In this policy, "Nearloop", "we" and "us" mean the Nearloop service and its operator. "Business" means a company that uses Nearloop. "You" means anyone whose information we handle, including business owners, their staff, their customers, and visitors to our website.

2. Two roles we play

For our own website and accounts, we decide how information is used. This covers nearloop.ai, demo requests, and the logins we create for business owners.

For a business's customer data, the business is in charge and we act on its behalf. This covers the contacts a business uploads, the leads that come in through its lead page or referral links, and the messages it sends. If you are a customer of a business that uses Nearloop, that business's own privacy policy applies to you, and you should contact the business first with questions or requests. We will help them respond.

3. Information we collect

From business owners

• Account details: name, email address, and a password (stored only as a secure hash, never in plain text).
• Business details: name, type, city, service ZIP codes, services, hours, offers, booking link and brand tone.
• Activity in the app, such as campaigns created, messages approved, and outcomes recorded.

Customer data a business adds or collects

• Contact details such as name, email, phone and ZIP code.
• Interests, status, notes, purchase or visit history, and contact permissions (email, text, calls).
• Lead requests submitted through a business's lead page or a referral link, including what the person asked for and whether they agreed to be contacted.
• Who referred a new lead, when a referral link is used.
• Call details and transcripts, if the business uses the voice agent.

From website visitors

• Information you choose to send us, such as a demo request or an email.
• Basic technical data our hosting provider records to run and protect the site, such as IP address, browser type and the pages requested. We use IP addresses on public forms to limit spam.

4. How we use information

• To run the service: show each business its own leads and customers, check leads against service areas, and draft messages for the owner to review.
• To use AI on the business's behalf. Nearloop sends only the facts needed for a task (for example, a customer's first name, declared interests and last visit) to our AI provider to draft a message or summarize a call. The owner reviews drafts before anything is sent.
• To keep accounts secure, prevent spam and abuse, and fix problems.
• To reply to demo requests and support questions.
• To send service notices, such as security or policy updates.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We do not use a business's customer data to market to those customers ourselves, and we do not use it to train AI models.

5. Messages and consent

Nearloop is built so that businesses only contact people who gave permission. It tracks consent for each channel, excludes anyone who opted out, and includes a way to opt out in marketing messages. Replying STOP, or using the unsubscribe link, stops future marketing from that business.

The business sending a message is responsible for having a valid reason and consent to contact each person, as described in our Terms of Service.

6. Service providers

We use a small number of trusted providers to run Nearloop. They may process information only to provide their service to us:

• Vercel for website and app hosting (United States).
• Supabase for the database (United States, us-east-1).
• Anthropic for AI drafting and summaries. Data sent through its commercial API is not used to train its models.
• An email delivery provider for sending approved emails and account emails.
• Google Workspace for our own email and calendar.

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business, in which case this policy will continue to apply.

7. Cookies

Nearloop uses one essential cookie to keep you signed in to your account. It is signed so it cannot be forged, and it expires after 30 days. We do not use advertising cookies or cross-site tracking. Public lead pages and referral pages do not set tracking cookies.

8. How long we keep information

• Account and business data: while the business has an active account. After an account closes, we delete or anonymize it within 90 days, unless the law requires us to keep it longer.
• Customer data: as long as the business keeps it in Nearloop. A business can delete contacts and leads at any time, and can ask us to delete all of its data.
• Opt-out records: we keep a record that someone opted out, so they are not contacted again.
• Server and security logs: kept for a limited period by our hosting providers.

9. Security

We protect information with encryption in transit (HTTPS), hashed passwords, signed sessions, account lockout after repeated failed sign-ins, and strict separation so each business can only see its own data. The database is not reachable from the public internet without credentials, and only the Nearloop server can read it. No system is perfectly secure. If a breach affects your personal information, we will notify the affected business and people as the law requires.

10. Your choices and rights

You can ask to see, correct, or delete your personal information, or to get a copy of it. Depending on where you live, you may have other rights under state privacy laws, including the right to opt out of certain uses. We will not treat you differently for using these rights.

Business owners: email info@nearloop.ai. Customers of a business: contact that business directly, or email us and we will pass your request to them. To stop marketing messages, reply STOP or use the unsubscribe link in the message.

We will confirm your identity before acting on a request, and we aim to respond within 30 days.

11. Children

Nearloop is meant for businesses and adults. It is not directed to children under 13, and we do not knowingly collect their information. Businesses that serve families, such as tutoring centers, should collect contact details from parents or guardians, not from children. If you believe a child's information was added, contact us and we will delete it.

12. Changes to this policy

If we make meaningful changes, we will update the date at the top and tell business owners by email or in the app before the change takes effect.

13. Contact us

Questions or requests: info@nearloop.ai
Nearloop · Aurora, Illinois, United States