Security

We know LoopAI handles sensitive conversations. Here is how we protect your data. No system is perfectly secure, but we use industry-standard measures and work to limit access to your information.

Encryption

All connections to LoopAI are encrypted in transit using TLS/HTTPS. Data is stored on infrastructure that encrypts data at rest.

Authentication & access

• Passwords are stored only as salted hashes (pbkdf2) - never in plain text.
• Multi-factor authentication is enabled on the administrative systems that run LoopAI.
• Session cookies are hardened (HttpOnly, SameSite, Secure over HTTPS).
• Access to production data is limited on a least-privilege basis; application secrets are stored as environment variables, never in code.

Infrastructure & vendors

LoopAI runs on Render, and each user’s data is scoped to their own account. Service providers that process data on our behalf (Render, Anthropic, Stripe, Resend) are bound by data-protection terms, and our AI provider is contractually bound not to train on your content.

Monitoring & incident response

We log application and access activity to detect and investigate anomalies, and we maintain a documented incident-response plan covering detection, containment, and breach notification. If a breach affects your data, we will notify you without undue delay and in line with applicable law.

Responsible disclosure

Found a vulnerability? Please report it to info@gelentra.com so we can address it promptly. We appreciate responsible disclosure and will not pursue good-faith security research.

Data deletion

You can disconnect a source at any time or delete your account, which removes your loops, connected-account data, and stored messages from our active systems. Backups and legally required records may persist for a limited period.