Privacy information

Current product data

The product uses session identity to authenticate a user and scope account access. The separate marketing waitlist collects an email address when someone submits its form. Loops processes that waitlist email. This page does not set a retention term for it.

Standard accounts are not end-to-end encrypted: the operator can read Standard-account Drive content. Private accounts encrypt Drive content on the Mac before upload; keys are unlocked by OPAQUE sign-in. You hold the keys on Private accounts and in the open core.

Account deletion is suspended. Crypto-shred of an account is designed, not live. A request does not revoke devices, shred keys, or delete rows.

Nothing here claims encryption at rest or encryption in transit. The status ledger is on the security page.

Current product controls

Signed-in users can review account controls at settings and request the currently available account export at account export.

Account deletion is suspended. The product reports that suspension instead of claiming deletion completed.

Legal status

This page records implemented product behavior. It does not set retention terms, create legal rights, or replace the privacy policy that counsel must review. The website waitlist note is not that policy.