Loopy Studio Privacy Policy (United States)
Version 1, October 13, 2026
This policy explains what personal information Loopy Studio collects, why, who receives it, how long we keep it, and how you can see it, correct it or delete it. It covers:
- Loopy Studio accounts in the United States, at studio.withloopy.com;
- the public pages of those accounts at imoveis.withloopy.com, and the people who visit them; and
- the Loopy Studio pages for the United States at withloopy.com/en-us/.
It doesn’t cover the Loopy partner program, which exists only in Brazil, or the social networks and Google, whose own policies apply to what you publish there.
1. Who we are
Loopy Studio is a product of DFMENDES TECNOLOGIA LTDA, a company based in Brazil, CNPJ 66.624.968/0001-05, Av. Sete de Setembro, 2775, Rebouças, Curitiba, PR 80230-010, Brazil. We decide how the information described here is used.
Questions and requests about your information: privacidade@withloopy.com.
2. The short version
- We collect what you type, the photos you send and how you use Studio. We don’t buy information about anyone.
- We don’t sell personal information for money. Some state laws call letting ad companies collect data on our pages a “sale” or “sharing”; you can turn that off at any time (section 5).
- Measurement and advertising tools run only after you accept them, in Studio and on withloopy.com. A Global Privacy Control signal from your browser counts as a rejection on both, even if you accepted before.
- When a buyer texts or emails a real estate professional from their Studio page, the message goes straight to the professional. Studio doesn’t receive it.
- We don’t send text messages or WhatsApp messages to accounts in the United States.
- You can delete your Studio account inside the app, or ask us by email.
3. What we collect and why
| Why | What |
|---|---|
| Create your account and run Studio: treat photos, build posts, write captions, publish where you choose | Name, mobile number, email, password (stored only as a hash), time zone, brand details (name, brokerage, state, license number, color, Instagram, logo and the contact details you show on your page), listing details and photos |
| Run your public page and count the contacts it brings | Your listings and brand. For each tap on the button to text or email you: the date, the listing, which button was tapped, where the visitor came from (for example, Instagram) and a code calculated from the visitor’s network address and browser, which changes every day and is deleted after 2 days. The network address itself is not stored |
| Publish and measure posts | The posts, captions and publication codes. Reach, likes, comments and views of each post in its first 7 days |
| Charge the subscription and apply the plan limit | Plan, billing period, subscription status, codes returned by Paddle, and the record of your agreement to automatic renewal (which text and when). Your card stays with Paddle |
| Measure visits and learn which of our ads bring customers (Google Analytics, Meta, Google Ads) | Cookie identifiers, pages viewed, ad click identifiers and campaign tags, and events such as account created, preview viewed, checkout started and subscription paid, with its value. In Studio, only after you accept advertising, also your email, mobile number and first name in hashed form, sent to Meta; and only after you accept measurement, your account code, sent to Google. Details in section 5 |
| Record your cookie choice in Studio | A random code, the version and text of the notice you saw, your choice, the language, and whether your browser sent Global Privacy Control. No network address |
| Protect Studio against abuse and fraud (Cloudflare and Turnstile) | Network address, browser and technical signals of the request |
| Service email: renewal notice, Sunday summary of Loopy Promotion, password reset, invitations | Name, email and account status |
| Improve Studio’s choices of format and style for all customers | Post performance, aggregated and without identifying you |
| Waitlist, for people in countries where Studio has not opened yet | Email, country, screen language and sign-up date, used only to tell you when Studio opens there |
| Answer you | What you write to us |
We don’t ask for Social Security numbers, bank or card numbers, or other sensitive information. We don’t make decisions about you based only on automated processing that have legal or similarly significant effects. If we send you news or offers by email, every one of them has a link to stop them.
4. Who receives it, and where
We share information only with providers that make Studio work, each receiving only what its part needs, to provide that part to us.
| Provider | What for | What it receives | Where |
|---|---|---|---|
| Hostinger | Servers where Studio, the pages and the databases run | All the information in this policy, stored by us | Brazil |
| Cloudflare | Network, security and Turnstile checks for Studio and the professionals’ pages | Network address, browser and request signals | United States |
| Paddle | Payment, as our reseller and merchant of record | Account email, country, the codes of your account and subscription, and the payment details you enter on its checkout. Paddle uses the payment details under its own privacy notice | United Kingdom and United States |
| Upload-Post | Connecting to Instagram, Facebook, TikTok and Google Business Profile, and publishing | Posts, captions and publication codes. Upload-Post holds the access to your social accounts | Outside Brazil |
| OpenAI | Writing captions | Listing details and up to 8 reduced photos. Not your name, phone, license number or logo | United States |
| Modal | Enlarging photos that are too small | Only the photos that need it | United States |
| Resend | Sending service email | Name, email and the content of the email | United States |
| Meta (Facebook and Instagram) | Our ads for Studio, according to your cookie choice | Cookie identifiers, network address, browser, pages viewed and events. In Studio, also email, mobile number and first name in hashed form, only after you accept advertising | United States |
| Google (Analytics, Ads and Fonts) | Measuring visits and our ads, according to your cookie choice; fonts in Studio’s cover preview | Cookie identifier, pages viewed and events, and in Studio your account code. For fonts, your network address and browser | United States |
| Fontshare | Fonts on withloopy.com | Your network address and browser | Outside Brazil |
When you publish, the post goes to your Instagram, Facebook, TikTok or Google Business Profile account, and each one’s own privacy rules apply there. We also disclose information when a law, a court or an authority requires it. If Loopy is sold or merges with another company, the information goes with the business and stays under this policy.
We store your information on our servers in Brazil. The providers above handle their part in the countries listed.
5. Advertising, “sale” and “sharing”
When advertising is on, the Meta pixel and the Google Ads tag on our pages send events to Meta and Google, so they can show our ads to people who visited and tell us which ads bring customers. This way, Meta and Google can collect information about your activity over time and across websites. Some state laws treat this as a “sale” or “sharing” of personal information for targeted advertising. We treat it that way, and it happens only with your permission:
- In Studio and on withloopy.com, nothing from them loads until you accept, and you can withdraw at any time. In Studio, use Cookie settings at the bottom of any page; on withloopy.com, the link at the bottom of the page.
- Global Privacy Control. If your browser sends the Global Privacy Control signal, Studio and withloopy.com treat it as a rejection of measurement and advertising, even if you accepted before.
- We don’t respond to the older “Do Not Track” signal, which has no common standard. Global Privacy Control works as described above.
Your email, mobile number and first name go to Meta, in hashed form, only if you accept advertising in Studio. More in the Cookie Policy.
6. Your privacy rights
Wherever you live in the United States, you can ask us to:
- tell you what personal information we have about you, and give you a copy;
- correct it;
- delete it;
- stop the “sale” or “sharing” described in section 5. The cookie choice does this right away.
Some state laws give these rights only to their own residents, or only above a certain size of business. We honor them for everyone in the United States, and we won’t treat you differently for using them.
How to ask. To delete your Studio account, use the option in Account. For anything else, email privacidade@withloopy.com, preferably from your account email, and say what you want. We may ask you to confirm that the request is yours before we hand over or delete anything. Someone you authorize can ask for you; we may ask for proof of that authorization. We answer within 45 days. If we refuse a request, we tell you why, and you can reply asking us to review that decision.
Some information we must keep even after a deletion request, such as payment records (section 7).
7. How long we keep it
| Information | How long |
|---|---|
| Studio session | 2 hours without use |
| Code of a tap on a professional’s page | Deleted after 2 days |
| Network address, browser and ad identifiers tied to events | 30 days |
| Ad and measurement identifiers saved on your Studio account (the Meta browser and click codes and the Google Analytics client code) | While the account exists. Withdrawing the permission, or deleting the account, erases them |
| Record of your cookie choice in Studio | 3 years |
| Waitlist email | Up to 12 months after sign-up, or sooner if you ask |
| Listing sent by someone who never subscribed | 90 days after it was sent |
| Name, mobile number and email given at sign-up by someone who never subscribed | Until you ask us to delete them at privacidade@withloopy.com |
| Payment records, including your agreement to automatic renewal | At least 5 years, as Brazilian tax and accounting law requires |
| Studio account, listings, photos, posts and the taps on your page | While the account exists. When you delete it, we erase them from Studio right away. Copies in our backups are deleted as those backups are replaced in their regular cycle |
Posts you published stay on your networks until you delete them there. Instagram and TikTok don’t let us delete them for you; on Facebook, write to us and we can delete them.
8. Visitors to professionals’ pages
Each Studio customer has a public page at imoveis.withloopy.com. If you visit one and tap the button to text or email the professional, your own messaging or email app opens, addressed to the professional, and what you send goes straight to them. Studio doesn’t receive your message, your number or your email. The professional decides how to use your contact; ask them about their own privacy practices.
Studio records only the tap, as section 3 describes, so the professional can see how many contacts the page brought and from which channel. These pages load no measurement or advertising tools from other companies.
9. Our technology and your photos
Our technology writes captions from the listing details the professional enters and up to 8 reduced photos. It doesn’t receive the professional’s name, phone, license number or logo. Studio treats photos (light, color, white balance, straight lines, sharpness, and enlarging photos that are too small); it doesn’t replace the sky, add or remove objects or hide defects. We keep the original photos, which only the account can see. Publishing is the professional’s decision.
10. Children
Studio is for real estate professionals aged 18 or older and isn’t directed to children. We don’t knowingly collect information from anyone under 18. If you believe we have, write to privacidade@withloopy.com and we will delete it.
11. Security
Original photos are in private storage that only the account can open. Passwords are stored as a hash, the card stays with Paddle, and every connection to Studio, to the professionals’ pages and to withloopy.com is encrypted. No measure is perfect. If an incident puts your information at risk, we will tell you as the law requires.
12. Changes
When something relevant changes, we update the version and date at the top and email the people who have a Studio account.
13. Contact
DFMENDES TECNOLOGIA LTDA, CNPJ 66.624.968/0001-05, Av. Sete de Setembro, 2775, Rebouças, Curitiba, PR 80230-010, Brazil.