Privacy Policy

Last Updated: April 11, 2026

Introduction

TheLoops ("we", "us", or "our") operates the website theloops.live and the TheLoops application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Please read this Privacy Policy carefully. By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

Data Controller

The data controller responsible for your personal data is:

  • Name: Illia Khorunzhyi, Sole Proprietor
  • Address: 6B Manastyrskoho St., Apt. 7, Lviv, 79066, Ukraine
  • Tax ID: 3602301533
  • Email: support@theloops.live

Definitions

  • Account: A unique account created for you to access our Service or parts of our Service.
  • Company: Means Illia Khorunzhyi, Sole Proprietor, doing business as TheLoops, located in Lviv, Ukraine.
  • Device: Any device that can access the Service such as a computer, mobile phone, or digital tablet.
  • Personal Data: Any information that relates to an identified or identifiable individual.
  • Service: Refers to the TheLoops website and application.
  • Usage Data: Data collected automatically, generated by the use of the Service or from the Service infrastructure itself.

Information We Collect

Personal Data

When you register for an account or use our Service, we may ask you to provide certain personally identifiable information, including but not limited to:

  • Email address
  • First and last name
  • Usage data and preferences

Payment Information: Payments are processed through Monobank (Plata by mono) for card payments, through Cryptomus for cryptocurrency, or by direct bank transfer to our Ukrainian sole proprietor (FOP) account. We do not store your card details — they are entered on the payment provider's own page and never reach our servers. Each provider processes your payment data in accordance with their own privacy policy.

Video Content Data

When you use our Service to create and stream video content, we may collect:

  • Video files you upload for streaming
  • Stream configuration settings (resolution, bitrate, etc.)
  • Streaming schedule and duration data
  • YouTube channel information connected to your account

Stream Keys and Platform Credentials

To enable streaming functionality, we collect and store:

  • YouTube stream keys provided by you
  • OAuth tokens for connected YouTube accounts
  • Platform-specific streaming credentials

Important: Stream keys are stored using encryption. However, by their nature, they must be decryptable to function. We implement strict access controls and security measures to protect these credentials.

Usage Data

We automatically collect certain information when you access and use the Service, including:

  • Your device's Internet Protocol (IP) address
  • Browser type and version
  • The pages of our Service that you visit
  • The time and date of your visit
  • The time spent on those pages
  • Unique device identifiers and other diagnostic data

Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: Processing necessary to provide you with the Service you have requested.
  • Legitimate Interests: Processing necessary for our legitimate business interests, such as improving our Service and preventing fraud.
  • Consent: Where you have given us specific consent to process your data for a particular purpose.
  • Legal Obligation: Processing necessary to comply with a legal obligation to which we are subject.

How We Use Your Information

We use the collected data for various purposes:

  • To provide and maintain our Service
  • To manage your account and provide customer support
  • To process your transactions and subscriptions
  • To send you updates, security alerts, and support messages
  • To monitor and analyze usage patterns and trends
  • To detect, prevent, and address technical issues
  • To improve our Service and develop new features
  • To comply with legal obligations

Video Content Processing

Your video content is processed for the following purposes:

  • Transcoding and preparing videos for streaming
  • Delivering video streams to configured platforms (YouTube)
  • Storing videos for scheduled and repeated streaming
  • Generating thumbnails and preview images
  • Monitoring stream health and quality
  • Providing analytics on stream performance

We do not use your video content for any purpose other than providing the Service. We do not analyze, sell, or share your video content with third parties.

Stream Key Usage

Your stream keys and platform credentials are used exclusively to:

  • Authenticate and initiate streams on your behalf to connected platforms
  • Manage stream settings and configurations

We never share your stream keys with third parties. Access to stream keys is restricted to automated systems necessary for stream delivery.

Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our Service. Cookies are used for:

  • Essential cookies for Service functionality and security
  • Authentication and session management
  • Remembering your preferences and settings
  • Analytics to understand how our Service is used

You can control cookies through your browser settings. For more details, please see our Cookie Policy.

Data Sharing and Disclosure

We may share your information in the following situations:

  • Service Providers: We share data with the following third-party providers who assist us in operating the Service: Monobank / JSC Universal Bank (card payment processing), Cryptomus (cryptocurrency payment processing), Google LLC (Google Analytics, Google Ads), Hetzner Online GmbH (cloud hosting and storage, Germany), Cloudflare, Inc. (content delivery, DDoS protection, and web application firewall), and Resend (transactional email delivery). Each provider processes data strictly for the purposes described in this policy.
  • Payment Processing: Card payments are processed by Monobank (JSC Universal Bank, Ukraine) and cryptocurrency payments by Cryptomus. Your payment data is governed by the privacy policy of whichever provider you choose to pay through.
  • Analytics: We use Google Analytics to understand how the Service is used. Google may collect and process data about your usage.
  • YouTube/Google: When you connect your YouTube account, certain data is shared with Google as necessary for streaming functionality. YouTube's Terms of Service and Google's Privacy Policy apply.
  • Business Transfers: In the event of a merger, acquisition, or asset sale, your personal data may be transferred.
  • Legal Requirements: We may disclose your data if required to do so by law or in response to valid legal requests.
  • With Your Consent: We may share your data for any other purpose with your explicit consent.

We do not sell your personal data to third parties.

Data Security

The security of your personal data is important to us. We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

Our security measures include:

  • Encryption of data in transit (TLS/SSL) and at rest
  • Periodic review of our security practices and configurations
  • Access controls and authentication mechanisms
  • Monitoring and logging of system access

Infrastructure Security

Our Service runs on cloud infrastructure with enterprise-grade security. Primary hosting is provided by Hetzner Online GmbH (Germany), a European cloud infrastructure provider, with data stored on servers located within the European Union. Incoming traffic is routed through Cloudflare, Inc., which provides content delivery, DDoS protection, and a web application firewall through geographically distributed edge nodes.

Stream keys are encrypted using industry-standard encryption algorithms. Access to decrypted keys is limited to automated streaming systems and is logged for audit purposes.

Despite our efforts, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

Data Retention

We retain your personal data only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to:

  • Fulfill our contractual obligations (providing the Service)
  • Comply with legal obligations (e.g., tax and accounting requirements)
  • Resolve disputes and enforce our agreements
  • Maintain security and prevent fraud

Video Content Retention

Video files you upload are retained for as long as your account is active and you choose to keep them. Upon account deletion or your request, video content will be permanently deleted within 30 days.

Stream Key Retention

Stream keys and platform credentials are retained for as long as your account is active and the platform connection is maintained. They are deleted within 24 hours after you disconnect a platform or delete your account.

Usage data is typically retained for a shorter period, unless it is needed to strengthen security or improve the functionality of the Service.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, where feasible. If the breach is likely to result in a high risk to your rights and freedoms, we will also notify affected users without undue delay via the contact email associated with your account.

Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Right of Access: You have the right to request copies of your personal data.
  • Right of Rectification: You have the right to request correction of inaccurate or incomplete personal data.
  • Right of Erasure: You have the right to request deletion of your personal data under certain conditions.
  • Right to Restrict Processing: You have the right to request that we restrict the processing of your personal data.
  • Right to Data Portability: You have the right to request transfer of your data to another organization or directly to you.
  • Right to Object: You have the right to object to the processing of your personal data.
  • Right to Withdraw Consent: Where processing is based on consent, you have the right to withdraw your consent at any time.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a data protection authority.

To exercise any of these rights, please contact us at support@theloops.live and we will respond within 30 days.

Account and Data Deletion

To request deletion of your account and all associated data, please contact us at support@theloops.live with the subject line "Account Deletion Request". Upon receiving your request:

  • Your account will be deactivated promptly
  • All personal data will be deleted within 30 days
  • Video content and stream keys will be permanently removed

You will receive a confirmation email once the deletion process is complete.

Restricting Processing

To request restriction of processing of your personal data, please contact us at support@theloops.live specifying which processing activities you wish to restrict.

Data Portability

To request a copy of your data in a portable format, please contact us at support@theloops.live and we will provide your data in a commonly used, machine-readable format within 30 days.

International Data Transfers

Your data is processed on servers located within the European Union. If you access the Service from outside the EU, your data will be transferred to and processed in the EU, where it is protected in accordance with this Privacy Policy and applicable EU data protection laws.

If you have questions about international data transfers, please contact us at support@theloops.live.

Children's Privacy

Our Service is not intended for use by children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16, we will take steps to delete that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, please contact us: