Legal

Closedloop.ai Privacy Policy

Last updated: September 2026

This policy explains how Closedloop.ai, Inc. ("Closedloop," "we," or "us") handles personal information through the Closedloop.ai website, desktop application, and software development platform (the "Service"). It does not cover Healthy or other products with separate policies. If an organization provides your workspace, it may control the content and settings in that workspace.

Information we collect

Account and workspace information

We collect information you or your organization provide, such as your name, email address, authentication identifiers, workspace name, membership, roles, permissions, and settings.

Content and integrations

The Service may process PRDs, implementation plans, code references, repository information, prompts, sessions, branches, transcripts, comments, outputs, and other material you or your team submit or generate ("Workspace Content"). What we process depends on the features you use. If you connect GitHub, we receive information authorized through that integration, such as account and repository identifiers and content needed for connected features.

Usage and technical information

We collect information about use of the Service, such as feature interactions, timestamps, device and browser information, IP addresses, diagnostic data, and error logs. Cookies or similar technologies may support authentication, preferences, security, and usage measurement.

How we use information

  • Provide the Service, including accounts, collaboration, integrations, AI features, and support.
  • Maintain security, troubleshoot problems, prevent misuse, and enforce our terms.
  • Understand and improve performance and features using usage information and feedback.
  • Communicate about the Service and meet legal obligations.

Where a legal basis is required, we process information to provide the Service or perform a contract, for legitimate interests in operating and securing it, to comply with law, or with consent when required. Where an organization controls Workspace Content, we generally process it on that organization’s instructions.

AI processing and model training

AI features may send relevant Workspace Content to model providers to perform requested tasks.

[TO CONFIRM BEFORE PUBLICATION: State whether Closedloop or its model providers use Workspace Content for model training, and describe any applicable settings and provider retention.]

When we share information

We share information with providers that help operate the Service, including Clerk for authentication, AWS for hosting, and AI model or other technical providers used for features you choose. We share information with GitHub when you authorize its integration. Providers receive information as needed for their services and subject to applicable agreements.

We may disclose information to comply with law or valid legal process, protect rights or safety, investigate abuse, or in connection with a merger, financing, acquisition, or sale of assets. We do not sell personal information.

[TO CONFIRM BEFORE PUBLICATION: Verify whether analytics or advertising activity constitutes “sharing” under California law.]

Retention

We keep information as reasonably needed to provide the Service, meet legal obligations, resolve disputes, and protect the Service. Deletion from active systems and backups may follow different schedules. Confirm these periods against the actual product and infrastructure before publication:

  • Account and workspace data after account or workspace deletion: [CONFIRM RETENTION PERIOD AND DELETION TRIGGER].
  • Transcripts or conversation content, if stored: [CONFIRM DEFAULT RETENTION, WHETHER STORAGE IS ON BY DEFAULT, AND USER CONTROLS].
  • Activity logs and telemetry: [CONFIRM RETENTION PERIOD].
  • Backup copies after deletion: [CONFIRM RECOVERY WINDOW].

Security

We use reasonable technical and organizational measures designed to protect information, including access controls and safeguards appropriate to the Service. No system is completely secure. We will give notice of a security incident as required by applicable law.

Your choices and rights

You may be able to manage account details, workspace settings, integrations, and cookies through the Service or your browser. To request access to, correction of, or deletion of personal information, email privacy@closedloop.ai. Depending on where you live, additional rights may include portability, objection, restriction, or appeal. We will respond as required by law and may verify your identity. For organization-controlled Workspace Content, we may direct your request to the organization.

California residents may have rights under applicable California law, including to know, correct, and delete certain information and to opt out of covered sale or sharing if applicable. Residents of the EEA or UK may have rights under applicable law and may complain to their data protection authority. Exceptions may apply.

International use

Closedloop is based in the United States. Information may be processed in the United States and other places where we or our providers operate. Where required, we use appropriate mechanisms for international transfers.

Children

The Service is intended for adults and professional use, not children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us.

Changes to this policy

We may update this policy as the Service changes. We will post the updated version with a revised date and provide additional notice when required by law or when changes materially affect how we handle information.

Contact

For privacy questions or requests, email privacy@closedloop.ai. Closedloop.ai, Inc.

[CONFIRM BUSINESS MAILING ADDRESS BEFORE PUBLICATION].