Privacy Policy

1. Information We Collect

Account information

• Email address and password (handled securely via Supabase Auth; we never see or store your raw password).
• Subscription/trial status and billing history (once payment is enabled).

Client and report data

• Client names, logos, and brand colors you add to your agency account.
• Marketing data files you upload (e.g. GA4, Search Console, Google Ads, or Meta Ads exports), including any metrics, dates, channels, or campaign names contained in those files.
• AI-generated report content (summaries, charts, insight text) created from your uploaded data.

Automatically collected information

• Basic technical data needed to operate the Service (e.g. session cookies for authentication, IP address for security purposes).

We do not use tracking cookies for advertising, and we do not sell your data to third parties.

2. How We Use Your Information

We use the information above to:

• Operate your account and authenticate your login;
• Generate AI-powered marketing reports from data you upload;
• Apply your saved branding (logo, colors) to reports;
• Process billing and manage your subscription (once payment is enabled);
• Provide customer support and respond to your requests;
• Maintain the security and integrity of the Service.

3. How Your Data Is Processed and Shared

We share data with a limited number of third-party service providers, only as needed to operate the Service:

We do not sell, rent, or otherwise share your data with third parties for their own marketing purposes.

Note that OpenAI processes data on servers that may be located outside Indonesia. By using Reportloop's AI report generation, you consent to this transfer for the purpose of generating your reports.

4. Public Share Links

When you generate a public share link for a report, that report's content (including client name, branding, and data visualizations) becomes accessible to anyone who has the link, without requiring a login. We recommend only sharing these links with intended recipients.

5. Data Retention

• We retain your account data and generated reports for as long as your account is active.
• If you delete a client or your account, associated data is removed from our active database, subject to reasonable backup retention periods.
• Uploaded raw data files are stored as a snapshot alongside the generated report (limited to the first 500 rows) so reports remain reproducible; they are not otherwise separately archived.

6. Your Rights

Depending on your location, you may have rights to:

• Access the personal data we hold about you;
• Request correction or deletion of your data;
• Request a copy of your data in a portable format;
• Withdraw consent for data processing, where applicable (this may limit your ability to use the Service).

To exercise any of these rights, contact us at amaliasyt@gmail.com.

Under Indonesia's Personal Data Protection Law (UU No. 27/2022), you have corresponding rights as a data subject, and we handle personal data in line with its requirements as applicable to our scale of operation.

7. Security

We rely on Supabase's infrastructure, including Row Level Security policies, to ensure agencies can only access their own clients and reports. No method of storage or transmission is 100% secure, but we take reasonable steps to protect your data from unauthorized access.

8. Children's Privacy

Reportloop is intended for business use by marketing agencies and is not directed at, or knowingly used by, individuals under 18.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice before taking effect.

10. Contact Us

Questions about this Privacy Policy or how we handle your data? Contact us at amaliasyt@gmail.com.