Privacy policy

Last updated October 11, 2026

Who this covers

LeLoop is a Shopify app, which also works on other websites, run by LeLoop LLC and currently in a beta. It shows email and SMS signup popups on online stores, tests different versions, and reports results to the store. This policy covers two groups: stores that use LeLoop (merchants) and shoppers who visit those stores.

For what shoppers share through a popup, the store decides what to collect and why, and is responsible for it. LeLoop handles it for the store, only to provide the service. For merchants' own account information, LeLoop is responsible. Our data processing agreement sets out these roles for stores.

What we collect from shoppers

• What you type into a popup: your email address and, if the store asks, your phone number. If you agree to text messages, we record that you agreed, when, and the exact wording you agreed to.
• A random visitor ID kept in your browser's storage, plus a count of your visits, so the store knows whether you're new or returning. It isn't linked to your name.
• About each popup you see: whether you're on a phone or computer, the kind of site that sent you (for example "search" or "social", not the full address), and the offer you were shown. The page you're on (its path only, without anything after a "?") and the value of your cart are used at that moment to choose which popup to show, and aren't kept.
• Discount codes issued to you, and whether they were used.
• Orders: when you place an order, Shopify sends the store's apps its details. We keep only the order number, total, currency, and any LeLoop code or visitor ID on it, to credit the popup that helped. We don't keep names, addresses, or contact details from orders.
• A hidden note on your Shopify cart holding your random visitor ID, for the same reason.

We don't store your IP address in our database. We use it briefly, in memory, to stop abuse (for example, too many discount codes requested from one address). Our hosting provider's logs record IP addresses and browser details for each request, and keep them for about 7 days for security and troubleshooting.

We don't use advertising cookies, don't follow you to other websites, and don't sell or share personal information for advertising.

Your cookie choices

LeLoop follows the choice you make in the store's cookie banner (Shopify's privacy settings). Where the store asks for your consent, LeLoop does nothing until you allow analytics: it doesn't store a visitor ID, doesn't contact our servers, and shows no popup. The hidden note on your cart, which credits an order to a popup, is only added if you also allow marketing. If you change your mind and withdraw consent, LeLoop deletes the visitor ID and visit count from your browser and clears the note from your cart. On a website that isn't on Shopify, LeLoop follows the site's cookie banner only when the site passes your choice on to LeLoop; if you're unsure, ask the site.

What we collect from stores

• Your store's Shopify address (or, for a website that isn't on Shopify, its address) and your account email.
• The access Shopify grants LeLoop for your store, and API keys you connect (such as Klaviyo or Postscript), all stored encrypted.
• Your popups, their settings and results, and a log of changes made by you or by LeLoop's auto-pilot.

How we use it

Only to run LeLoop for the store: showing popups, testing versions, creating discount codes in the store's Shopify, saving signups to the store's Shopify customer list, crediting sales, reporting results, sending signups to the email and SMS tools the store connects, and emailing the store owner about their account (such as a shopper's data request). We don't use it for anything else.

Who we share it with

• Shopify, the platform LeLoop runs on. Each signup is saved to the store's own Shopify customer list, with the consent the shopper gave: email marketing, and text messages only if they agreed to them. Discount codes are created in the store's Shopify, images a store uploads go to its Shopify Files, and Shopify bills LeLoop's plans on the store's Shopify invoice (we never see payment details).
• Render runs our servers (in the USA), with traffic passing through its network provider, Cloudflare.
• Supabase hosts our database (in the USA).
• Google delivers our account emails through Gmail. Our website and dashboard (not stores' pages) also load fonts from Google.
• GitHub stores our daily database backups (in the USA). Each is encrypted before it leaves our systems, with a key only we hold.
• Tools a store connects, such as Klaviyo, Mailchimp, Postscript, or the store's own system, receive that store's signups, and only when the store turns them on.

We may also disclose information when the law requires it.

How long we keep it

• A store's signups (each with the device, new-or-returning visitor and traffic source of the visit it came from), popups and results are kept while the store uses LeLoop. So is, for each popup, which visitor IDs later placed an order, which keeps its order counts exact. When a store uninstalls LeLoop, Shopify tells us 48 hours later, and we delete all of that store's data.
• Everything else is deleted on a schedule, as soon as LeLoop has no use for it: the short-term note that keeps a visitor on the same version of a popup during a visit, after 1 day; popup closes and clicks, and the pause after a close, after 30 days; day-by-day counts, after 90 days; discount codes, 90 days after they expire (and a used code no sooner than 30 days after its use); which popups and versions each visitor ID was shown, after 13 months; orders, after 13 months, except those the store's current measurement of what its popups earned counts (orders carrying a visitor ID, placed during its 13 weeks), which stay until the store starts a new measurement; which group a visitor ID was in for an earlier measurement, 13 months and 13 weeks after that measurement began; activity and delivery logs, after 13 months (the newest 100 per store stay listed in the dashboard).
• When a shopper asks a store to delete their information, Shopify passes the request to us. We erase that shopper's email address and phone number from the store's signups, cancel anything not yet sent to the store's tools, and detach their orders from our records. A signup already saved to the store's Shopify customer list is part of the store's Shopify data, which Shopify handles under the same request.
• Websites that aren't on Shopify sign up with their address and an email address. We email a link that works for 24 hours and, before creating the account, check the site's home page for LeLoop's line; the request (the website and email address) is deleted a day after its link expires. Their owner signs in with a one-time link emailed to them: the link is deleted a day after it expires (it works for 20 minutes), and the sign-in it starts ends after 30 days or at sign-out. Such a store's data is deleted at once when its owner deletes the store in the dashboard (Settings), or when it asks us.
• Server logs are kept for about 7 days, and our encrypted backups for 21 days, so deleted data is gone from every copy within 21 days.

How we protect it

Every connection is encrypted, including the one to our database. Store access and connected API keys are encrypted at rest. You sign in through Shopify, or on a website that isn't on Shopify with a one-time link we email you, so LeLoop keeps no password for you.

Your choices and rights

• Shoppers: to unsubscribe, use the link in the store's emails or reply STOP to its texts. To see, correct, or delete your information, contact the store; you can also email us and we'll help. Depending on where you live (for example under GDPR or California law), you may have further rights, which you can exercise the same way.
• Stores: you can export your signups from the dashboard at any time, and uninstalling LeLoop deletes your data (a website that isn't on Shopify can delete itself in Settings, or ask us). Email us for anything else. Emails between you and us stay in our inbox.

Children

LeLoop isn't meant for children, and we don't knowingly collect information from children under 13 (or under 16 where that is the law).

Where data is stored

Our servers and database are in the United States.

Changes

If we change this policy, we'll update this page and the date above, and email stores about important changes.

Contact

LeLoop LLC. Questions or requests: leloop.team@gmail.com