Privacy and Cookies Policy
Version 1.0 · Effective date: 16 September 2026 · Last updated: 16 September 2026
This Privacy and Cookies Policy explains how we collect, use, store, share and protect personal information when you visit or use https://www.looep.com and the digital tools and membership services offered there (together, the “Service”). It also explains the choices and rights you have.
1. Who We Are (Data Controller)
The data controller responsible for your personal information is:
- Operator: Wang Yongfei (also written as W. Yongfei), trading as “Looep Tech”, operating under the laws of China
- Website: https://www.looep.com
- Privacy contact: support@looep.com
- Data Protection Officer: not appointed — we are a small operator and do not carry out large-scale or sensitive processing. Privacy enquiries are handled by the operator directly at the address above.
By using the Service you acknowledge this Policy. If you do not agree with it, please do not use the Service.
2. Information We Collect
2.1 Information you give us
- Account information: username, email address, password (stored only in hashed form), and optionally a mobile number or other profile details you choose to add.
- Order information: the plan you bought, order and transaction identifiers, amount, currency, payment status and the email address used at checkout. We never receive or store your full card number, CVC or card expiry date — those are collected directly by our payment processor (see Section 5).
- Support communications: messages, emails and attachments you send to our support address, and the associated ticket history.
- Content you submit to the tools: files you upload for processing (for example a video or image you want to repair). See section 2.2.
2.2 Files you upload for processing
If you use a browser-based tool that requires an upload, the file is transmitted to our servers over an encrypted HTTPS connection and processed only to produce the result you asked for. Uploaded files and processing results are deleted from our servers within 24 hours, and are not used for any other purpose. Desktop software that runs locally on your own computer does not transmit your media files to us at all.
2.3 Information collected automatically
- Device and connection data: IP address, browser type and version, operating system, device type, language and time zone.
- Usage data: pages viewed, features used, downloads, timestamps and session length.
- Server logs: request records, error logs and security events (used for debugging, capacity and abuse prevention).
2.4 What we do not collect
We do not run advertising networks, we do not buy or sell personal data, we do not use third-party behavioural advertising or cross-site tracking pixels, and we do not use your content or results to train AI models.
3. How We Use Your Information
| Purpose | Legal basis |
|---|---|
| Creating and managing your account, and providing the tools and downloads you purchased | Performance of a contract |
| Processing payments, issuing receipts and handling refunds | Performance of a contract |
| Providing customer support and responding to your enquiries | Performance of a contract / legitimate interests |
| Service messages such as security alerts, billing confirmations and policy updates | Legitimate interests / legal obligation |
| Keeping the Service secure, preventing fraud, abuse and unauthorised account sharing | Legitimate interests |
| Understanding how the Service is used so we can fix and improve it (aggregated statistics) | Legitimate interests |
| Complying with tax, accounting and other legal obligations | Legal obligation |
| Sending you marketing about our products, where you have opted in | Consent (withdrawable at any time) |
Where we rely on legitimate interests, we balance those interests against your rights and expectations. You can object at any time using the contact details in Section 15.
4. Cookies and Similar Technologies
We use a small number of cookies. Cookies are small text files stored by your browser. We do not use advertising or cross-site tracking cookies.
| Type | Purpose | Can be turned off? |
|---|---|---|
| Strictly necessary | Keeping you logged in, protecting your session, remembering your cart and security settings, and load balancing. Our login system stores an encrypted session token in a cookie. | No — the Service cannot work without them |
| Functional | Remembering preferences such as language, display mode and dismissed notices. | Yes |
| Performance / caching | Our caching and content-delivery layers store technical cookies to serve pages quickly and to protect the Site from attack. | Yes — clearing them does not remove your account |
You can delete or block cookies in your browser settings. If you block strictly necessary cookies you will not be able to log in or to complete a purchase. We do not currently use third-party analytics or advertising cookies; if we introduce them, we will update this Policy and, where required, ask for your consent first.
5. Payments and the Merchant of Record
Payments on the Site are processed by Waffo Pancake, which acts as our payment processor and as the Merchant of Record for your transaction. When you pay:
- Your card details are entered directly on Waffo Pancake’s PCI-DSS compliant checkout page and are processed by them. They are never transmitted to, or stored on, our servers.
- We receive only the information needed to deliver your purchase and to support you afterwards, such as your email address, order identifier, plan, amount, currency and payment status.
- Waffo Pancake processes your information as an independent controller for payment, tax, fraud-prevention, chargeback and regulatory purposes, in accordance with its own privacy policy.
6. When We Share Information
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share it only as follows:
- Service providers (processors): our payment processor (Waffo Pancake); our hosting provider, on whose servers the Site runs; our content delivery and security provider (Cloudflare), which filters malicious traffic; our email delivery service, used to send account and order notifications; and our caching infrastructure. These providers act on our instructions and are bound by confidentiality obligations.
- Professional advisers and authorities: where we are required to do so by law, by a valid court order or by a lawful request from a competent authority, or where necessary to establish or defend legal claims.
- Business transfers: if our business is transferred, merged or sold, information may be transferred as part of that transaction; we will notify you and ensure the receiving party is bound by this Policy.
- With your consent: for any other purpose, only where you have asked us to or agreed to it.
7. International Transfers
Our servers and our service providers may be located outside your country of residence, including in the United States, Europe and Asia. Where personal information is transferred internationally, we take steps to ensure it remains protected — for example by relying on providers that offer appropriate safeguards such as the European Commission’s Standard Contractual Clauses, and by transferring only what is necessary.
8. How Long We Keep Information
| Data | Retention period |
|---|---|
| Account information | While your account is active, and up to 90 days after you ask us to delete it (to allow for backup rotation and dispute handling) |
| Order, payment and tax records | As long as required by applicable tax and accounting law (typically up to 7 years). Payment records themselves are held by Waffo Pancake under its own retention rules. |
| Support correspondence | Up to 24 months from the last exchange |
| Uploaded files and processing results | Deleted within 24 hours |
| Server and security logs | Up to 12 months |
9. How We Protect Information
- All traffic to the Site is encrypted in transit using TLS/HTTPS.
- Passwords are stored only as one-way hashes, never in plain text.
- Access to our systems is limited to the minimum necessary, protected by strong credentials and, where available, two-factor authentication.
- Payment card data is handled exclusively by a PCI-DSS compliant processor and never touches our servers.
- We keep software and plugins up to date and monitor the Site for security events.
No method of transmission or storage is completely secure. If a security incident affects your rights, we will notify you and any relevant authority as required by applicable law (within 72 hours where GDPR applies). Please keep your credentials confidential and use a unique password.
10. Your Rights
Depending on where you live, you may have some or all of the following rights. To exercise any of them, contact us at support@looep.com. We will respond within 30 days (or sooner where the law requires) and will ask you to verify your identity first.
| Right | What it means |
|---|---|
| Access | Obtain a copy of the personal information we hold about you |
| Correction | Have inaccurate or incomplete information corrected |
| Deletion | Ask us to delete your information, subject to legal retention obligations |
| Restriction | Ask us to pause processing in certain circumstances |
| Portability | Receive your information in a structured, machine-readable format |
| Objection | Object to processing based on legitimate interests, including profiling |
| Withdraw consent | Withdraw consent at any time for anything you previously consented to |
| Non-discrimination | You will not be treated unfairly for exercising your rights (CCPA/CPRA) |
We do not sell or “share” personal information as those terms are defined by the CCPA/CPRA. If you are not satisfied with our response, you may complain to your local data protection authority.
11. Marketing and How to Opt Out
If you opt in, we may email you about product updates, new tools and offers. You can opt out at any time by clicking the unsubscribe link in any marketing email, or by emailing us. Service and transactional messages (order confirmations, receipts, security alerts and material policy changes) are not marketing and will still be sent.
12. Children
The Service is intended for adults. It is not directed at children, and we do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, contact us and we will delete it promptly.
13. Third-Party Links and Services
The Site may contain links to third-party sites and may integrate third-party services (for example, our payment checkout). This Policy covers only the information we collect ourselves. We are not responsible for the privacy practices of other organisations, and we encourage you to read their policies before using their services.
14. Changes to This Policy
We may update this Policy to reflect changes in our practices or in the law. The revised version will be published on this page with a new version number and effective date. If the changes are material, we will notify registered users by email at least 15 days before they take effect. Continued use of the Service after the effective date means you accept the updated Policy.
15. Contact Us
- Privacy and data protection enquiries: support@looep.com
- Support and billing: support@looep.com
- Website: https://www.looep.com
- Operator: Wang Yongfei,
We aim to answer every request within 2 business days, and to fulfil verified data requests within 30 days.
Document information
Operator: Wang Yongfei · Website: https://www.looep.com · Version: 1.0 · Effective: 16 September 2026
