Privacy notice

Who we are

VisitorLoop is run by Jeric Guillermo, trading as VisitorLoop. For our customers' account data and the visitors of visitorloop.app, we're the data controller. For privacy questions or requests, write to [email protected].

Websites that use VisitorLoop: when you see a VisitorLoop popup, chat or form on someone's website, that website's owner is the controller of your data and we process it for them. Questions about it are best sent to them; we'll pass on anything that reaches us.

What we collect, and why

• Account details: your name, email, password (stored only as a hash), your workspace and team. To give you an account and run VisitorLoop: our contract with you.
• Your content: widgets, email templates, automations, and what you write in the inbox. To provide the service: our contract.
• Your contacts and visitors, for you: what visitors type into your forms, their chats with you, the emails you send them and whether they unsubscribed, and a random visitor id with the pages and widgets they saw (impressions, clicks). We use it only to provide VisitorLoop to you.
• Logs: IP addresses and technical details of requests, kept briefly, to keep VisitorLoop secure and working (for example to stop abuse): our legitimate interest.

On websites that use VisitorLoop

The script stores a random visitor id and session id in the browser's local storage (utd_vid, utd_sid), and notes which widgets were shown or closed, so a popup doesn't keep coming back. It doesn't use third-party cookies or track people across websites.

Who helps us run it

• Hetzner (Germany): the servers and database VisitorLoop runs on.
• Cloudflare: secure connections, protection from attacks, DNS and email forwarding; also encrypted backups and file storage in the EU.
• Resend (EU region): sending emails.
• Anthropic: writing copy with AI, only when you use the AI buttons, and only the text you give it.

Some of these companies are based outside the EU; where data leaves the EU, it's protected by the European Commission's standard contractual clauses or an adequacy decision. We don't sell personal data or use it for advertising.

How long we keep it

Account data and your content: while your account exists, and deleted within 30 days after you close it. Contacts and chats: until you delete them or your account. Backups: 30 days. Logs: up to 30 days.

Your rights

You can ask to see, correct, export or delete your personal data, to restrict or object to how we use it, and complain to your data protection authority. Write to [email protected]; we answer within a month. If you were a visitor of a website that uses VisitorLoop, the website's owner handles your request, and every email sent through VisitorLoop has an unsubscribe link.

Changes

When this notice changes in a way that matters, we tell account holders by email before it applies.