Last updated: October 1, 2026

Privacy policy

This policy explains what human/loop collects when you request or take part in a feedback cycle, why we collect it, and how it is handled.

What we collect

Pilot requests: your name, work email, company or project, what you are building, its intended users, the workflow to test, next release, the tools you build with, invoice location, your answer about price, and anything else you choose to write.

Attribution: the referring page, the landing path, UTM parameters, the language, and the exact price shown when you submitted. This tells us which channel a request came from.

Participant sessions: screen recordings, audio, transcripts, task outcomes, and screening answers. Customer-facing packages use participant IDs, not personal contact details.

Basic server logs kept by our hosting provider, such as IP address and request time.

How we use it

To reply to requests, scope and schedule pilots, deliver and quality-check feedback packages, understand which channels work, and meet legal or accounting obligations.

Analytics

We use a privacy-friendly analytics tool to count visits and clicks. It does not use advertising cookies, does not build advertising profiles, and is not used to track you across other sites. If analytics is not configured, none is collected.

Sharing

For a pilot, the customer receives the recorded sessions and findings produced for their product. Service providers process data on our behalf for hosting, analytics, transcription, and payments, under contract and only as needed.

We do not sell personal data.

Recordings and consent

Participants consent before recording. A participant may pause or stop, and may ask us to delete a session before it is delivered. See the recording and consent page for detail.

Retention

Pilot requests are kept while we evaluate and follow up, then archived or deleted. Session evidence is kept only as long as needed for the pilot, the agreed retest, and any legal obligation, unless a longer period is agreed in writing.

Security

Access is limited to the people who need it. We remove or redact sensitive information where we can, and we never ask for production credentials or real customer data.

International transfers

Our providers and team may process data in countries other than yours. Where required, we use appropriate safeguards for those transfers.

Your choices

You can ask to access, correct, or delete your information, or object to how it is used. Contact us through the form on the home page and we will respond within a reasonable time.

Changes

If this policy changes, we update the date above.

← Back to the site