Last updated: October 1, 2026
Privacy policy
This policy explains what human/loop collects when you request or take part in a feedback cycle, why we collect it, and how it is handled.
What we collect
Pilot requests: your name, work email, company or project, what you are building, its intended users, the workflow to test, next release, the tools you build with, invoice location, your answer about price, and anything else you choose to write.
Attribution: the referring page, the landing path, UTM parameters, the language, and the exact price shown when you submitted. This tells us which channel a request came from.
Participant sessions: screen recordings, audio, transcripts, task outcomes, and screening answers. Customer-facing packages use participant IDs, not personal contact details.
Basic server logs kept by our hosting provider, such as IP address and request time.
How we use it
To reply to requests, scope and schedule pilots, deliver and quality-check feedback packages, understand which channels work, and meet legal or accounting obligations.
Analytics
We use a privacy-friendly analytics tool to count visits and clicks. It does not use advertising cookies, does not build advertising profiles, and is not used to track you across other sites. If analytics is not configured, none is collected.
Sharing
For a pilot, the customer receives the recorded sessions and findings produced for their product. Service providers process data on our behalf for hosting, analytics, transcription, and payments, under contract and only as needed.
We do not sell personal data.
Recordings and consent
Participants consent before recording. A participant may pause or stop, and may ask us to delete a session before it is delivered. See the recording and consent page for detail.
Retention
Pilot requests are kept while we evaluate and follow up, then archived or deleted. Session evidence is kept only as long as needed for the pilot, the agreed retest, and any legal obligation, unless a longer period is agreed in writing.
Security
Access is limited to the people who need it. We remove or redact sensitive information where we can, and we never ask for production credentials or real customer data.
International transfers
Our providers and team may process data in countries other than yours. Where required, we use appropriate safeguards for those transfers.
Your choices
You can ask to access, correct, or delete your information, or object to how it is used. Contact us through the form on the home page and we will respond within a reasonable time.
Changes
If this policy changes, we update the date above.