Privacy Policy

Your Privacy Matters

At LoopVoyage, we are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and protect your information when you use our platform.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: Name, email, phone number, business details
• Profile Data: Company name, address, preferences, profile photo
• Payment Information: Credit card details (processed securely via Stripe)
• Communications: Messages, support tickets, feedback
• Customer Data: Information about your clients (with their consent)

1.2 Information Collected Automatically

• Usage Data: Features used, actions taken, session duration
• Device Information: IP address, browser type, device ID, operating system
• Cookies: Authentication tokens, preferences, analytics data
• Location Data: General location based on IP address

1.3 Information from Third Parties

• OAuth Providers: Google, Facebook, Microsoft (with your consent)
• Social Media: Meta Business API for advertising integrations
• Payment Processors: Stripe for transaction data

2. How We Use Your Information

We use your data to:

• Provide Services: Operate and maintain the platform
• Process Payments: Handle subscriptions and transactions
• Customer Support: Respond to inquiries and resolve issues
• Improve Platform: Analyze usage patterns and optimize features
• Marketing: Send newsletters, updates, promotional content (with consent)
• Security: Detect fraud, prevent abuse, ensure platform security
• Compliance: Meet legal obligations and enforce our Terms of Service

3. Legal Basis for Processing (GDPR)

We process your data based on:

• Consent: You explicitly agreed to data processing
• Contract: Necessary to provide services you requested
• Legal Obligation: Required by law (e.g., tax, fraud prevention)
• Legitimate Interest: Business operations, security, improvement

4. Data Sharing and Disclosure

4.1 We Share Data With:

• Service Providers: AWS (hosting), Stripe (payments), Twilio (communications)
• Analytics Tools: Google Analytics (anonymized)
• Social Platforms: Meta, Google (for advertising integrations)
• Legal Authorities: When required by law or to protect rights

4.2 We Do NOT:

• Sell your personal data to third parties
• Share data for unrelated marketing purposes
• Transfer data outside approved regions without safeguards

5. Data Retention

We retain your data for:

• Active Accounts: Duration of subscription + 90 days
• Inactive Accounts: Up to 2 years, then anonymized or deleted
• Financial Records: 7 years (legal requirement)
• Communications: 3 years for support history

You can request earlier deletion by contacting support@loopvoyage.ca

6. Your Rights (GDPR & CCPA)

You have the right to:

• Access: Request a copy of your data
• Rectification: Correct inaccurate information
• Erasure: Delete your data ("right to be forgotten")
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Objection: Opt-out of marketing or profiling
• Withdraw Consent: Revoke previously granted permissions

To exercise your rights, contact: support@loopvoyage.ca

7. Data Security

We protect your data using:

• Encryption: TLS/SSL for data in transit, AES-256 at rest
• Access Controls: Role-based permissions, multi-factor authentication
• Infrastructure: AWS secure cloud with SOC 2 compliance
• Monitoring: 24/7 threat detection and incident response
• Backups: Daily encrypted backups with 30-day retention

8. Cookies and Tracking

We use the following types of cookies:

• Essential: Required for platform functionality (cannot be disabled)
• Performance: Analytics to improve user experience (can opt-out)
• Functional: Remember preferences and settings
• Marketing: Track advertising effectiveness (requires consent)

Manage cookies in your browser settings or our Cookie Consent banner.

9. International Data Transfers

Your data may be processed in:

• Canada: Primary data center (AWS ca-central-1)
• European Union: For EU customers (GDPR compliance)
• United States: Service providers (with Standard Contractual Clauses)

All transfers comply with GDPR Article 46 safeguards.

10. Third-Party Services

Meta Business Integration:

When you connect your Meta Business account, we access:

• Ad accounts and campaign data
• Page information and insights
• Business profile details

This data is used solely to provide advertising management features. You can revoke access anytime via Meta Business Settings or our platform.

11. Children's Privacy

Our Service is not directed at individuals under 18. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us immediately at support@loopvoyage.ca

12. Changes to Privacy Policy

We may update this policy to reflect changes in:

• Legal requirements
• Platform features
• Data processing practices

Material changes will be notified via email 30 days before taking effect.

13. Data Protection Officer (DPO)

14. Contact Information

Supervisory Authority

If you have concerns about our data practices, you can file a complaint with:

Office of the Privacy Commissioner of Canada
Website: www.priv.gc.ca
Phone: 1-800-282-1376