CoreLoop privacy & data

We are the controller of the personal data we hold for our own purposes

Identity, from our authentication provider: email address, first and last name, and profile image.

Either way we receive your name and message, and — if you provide them — your email address, phone number and a subject line.

We measure which pages are visited and which features are opened.

a value derived from the network address and browser details your browser already sends

Anything you write into your profile, upload as a document or image, or type into a cancellation survey.

Run your account, publish your profile, serve your page and agent endpoints, and support you

Take payment, manage your subscription, and handle cancellations

Consent is reserved for the one thing that is genuinely optional: the newsletter.

Raw records are deleted after 90 days, leaving only daily counts.

The data is kept for seven days .

Every backup copy is deleted thirty days after it was taken

Resolved or spam support tickets, their messages and their attachments 180 days

Our database, our file storage and the application servers that run CoreLoop are all located in Ireland.

Email is sent and received through our provider's EU region.

Error monitoring runs in Germany.

Who else processes data for us

Delete your account. Delete your company, if you own it.

Access — a copy of the personal data we hold about you, and an explanation of what we do with it.

Rectification — correction of anything inaccurate, and completion of anything incomplete.

Erasure — deletion, where we have no overriding reason to keep it.

Restriction — a pause on our use of it while a dispute about it is resolved.

Portability — the data you gave us, in a structured, machine-readable form, where we process it by consent or under our contract with you.

Objection — to any processing we base on legitimate interests, including our security and telemetry processing.

We do not sell personal data.