Privacy notice
Your data, explained plainly.
Updated 5 August 2026
What this notice covers
This notice explains how heedloop.com handles free-pilot and paid-product enquiries. It also describes the high-level controls for selected WhatsApp group conversations in an activated pilot or service. Exact service retention, deletion, participant-notice, and processor terms are agreed in writing before any group is connected. Client conversations must not be submitted through the website form.
Website enquiry data
We collect the name, work email, company, role, client-group range, preferred way to start, workflow problem, referral source, campaign tags, landing path, and consent submitted through the form, together with the submission time and basic anti-spam information. Your browser stores only a generic submitted marker; it does not store your email in that marker.
How we use enquiry data
We use the information to assess fit for a free pilot or paid plan, respond to people who asked to hear from us, understand common workflow problems, prevent duplicate submissions, and protect the form from abuse. Heedloop does not sell this enquiry data or use it to train an AI model.
Where enquiry data is processed
The site and form are hosted by Cloudflare, which processes and stores submissions for heedloop. Review Cloudflare's privacy policy for information about its own practices. We do not enable form submission email notifications or forward enquiry data to an outreach system by default.
How long we keep enquiry data
We normally delete unsuccessful or inactive enquiries within 12 months. If you enter an active relationship with heedloop, relevant contact records may be retained for that relationship and any applicable legal obligations. You can ask for earlier deletion.
Optional website measurement
Google Analytics and Meta Pixel
“Allow all” enables both optional categories. Under “Allow selection”, you can enable Analytics and Marketing independently. Analytics loads Google Analytics 4 to measure visits, referral and campaign sources, pages viewed, engagement time, approximate region, device and browser type, and actions such as viewing pricing or completing an enquiry. Google Analytics can use cookies and pseudonymous identifiers for this measurement.
We do not send names, email addresses, company names, roles, free-text answers, or client conversations to Google Analytics. On a successful enquiry, Analytics receives only the selected way to start and the broad client-group range so we can compare conversion quality. Advertising storage, Google Signals, and ad-personalisation signals are disabled. You can change your choice at any time using “Privacy settings”. See Google's privacy policy for information about Google's processing.
Marketing loads Meta Pixel to measure page visits and successful enquiries so we can understand and improve ads shown through Meta services. Heedloop sends only the standard PageView and Lead event names. It does not include form fields or client conversations in those events. Meta can use cookies and pseudonymous identifiers to attribute activity to an ad. See Meta's privacy policy for information about Meta's processing.
If you choose “Essential only”, or leave both optional categories off, neither tag is loaded. You can change either choice at any time using “Privacy settings”. Turning an enabled category off removes the related first-party measurement cookies that are accessible to the site and reloads the page without that tag.
Heedloop service data
Selected WhatsApp group conversations
The business activating Heedloop explicitly authorises which groups are included. Heedloop processes messages only from those configured groups. Conversation data can include message or caption text, sender display names, timestamps, and reply or reaction references needed to understand what happened.
How conversation data is used
Heedloop reads selected conversations to identify unanswered questions, commitments, decisions, and next steps, then generates a concise daily summary. It does not post or reply inside client groups. The summary recipient does not receive the full conversation, although the summary can include names and business details needed to explain what happened.
Storage, logs, and external AI
Conversation data and the work items derived from it are kept in a separate per-customer data store. Message content and WhatsApp identifiers are excluded from application logs. If an external AI provider is part of a pilot or service, the provider and purpose are identified in the written data plan before activation.
Retention, deletion, and participant notice
Before activation, the written data plan documents how long source messages, open work items, summaries, and supporting copies are retained; how deletion is handled across the customer data store, message mirror, exports, and backups; and how group participants will be informed. No client group is connected until these choices are agreed.
Your choices
You can ask to access, correct, or delete your enquiry, or withdraw permission to be contacted, by emailing [email protected]. Conversation-data requests are handled with the business that authorised the relevant groups and under the written service data plan. We will handle requests consistently with applicable law.
Contact
Heedloop is currently founder-operated. Privacy questions can be sent to [email protected]. We may update this notice when the product, processors, or legal requirements change.