Cookie and Tracking Technologies Policy

Loopion is a trading name of Shahforge Ltd. This policy should be read alongside our Privacy Policy.

1. What are cookies and similar technologies?

Cookies are small files stored on your device when you visit a website.

We may also use related technologies, including:

• Tracking pixels;
• Tags and scripts;
• Local storage;
• Link tracking;
• Device and browser identifiers; and
• Similar technologies that store or access information on your device.

These technologies can help operate and secure the service, remember choices, understand website use, measure advertising performance and assess engagement with marketing emails.

2. Categories of technologies we use

Essential technologies

Essential technologies are required to operate and protect our website, platform and checkout.

They may be used to:

• Sign users in and maintain secure sessions;
• Authenticate accounts;
• Protect against unauthorised requests;
• Remember privacy and cookie choices;
• Detect and prevent fraud or abuse;
• Maintain website and platform functionality; and
• Process secure payments.

These technologies cannot be disabled through our consent controls because the service may not function correctly without them.

You may still block them through your browser settings, but doing so may prevent you from signing in, completing payment or using parts of Loopion.

Functional technologies

Functional technologies may remember choices such as language, region, display preferences or other settings.

Where these technologies are not essential to provide a feature you have requested, we will use them only in accordance with your privacy choices.

Analytics technologies

With your permission, we use analytics technologies, including Google Analytics and Microsoft Clarity, to understand how visitors use the Loopion website.

This may include information such as:

• Pages viewed;
• Buttons and links selected;
• Time spent on pages;
• Navigation through the website;
• Referral source;
• Search campaign information;
• General device, browser and operating-system information;
• Approximate location derived from an IP address;
• Pricing-page visits;
• Plans selected;
• Checkout starts; and
• Completed purchases.

We use this information to understand website performance, identify problems and improve our content, design and customer journey.

First-party marketing attribution

With your permission, we also operate our own first-party analytics system to understand which marketing source (for example a search campaign, referral link or one of our own outreach emails) led to a visit, and, where you go on to purchase, which subscription and plan resulted from it. Unlike the third-party tools above, this data is stored in our own systems, not shared with an external analytics provider.

This may include:

• An anonymous, randomly generated visitor and session identifier;
• Campaign, referral and search-term parameters present in the link you followed;
• The page you landed on and pages viewed before checkout;
• Pricing-page visits, plan selections and billing-period selections;
• Checkout starts and Stripe-confirmed successful purchases; and
• Where you followed a tracked link from one of our own outreach emails, which campaign and message it came from.

These identifiers are opaque and random — never your email address or another directly identifying value — but if you go on to create an account, they are linked to that account and workspace so we can attribute a subscription back to the marketing activity that led to it. They are handled under the same privacy, retention and erasure rights described in our Privacy Policy and our GDPR page.

Session replay and heatmaps

With your permission, we use Microsoft Clarity to record how visitors interact with pages on the public Loopion website. This may include:

• Mouse movement, scrolling and tapping;
• Clicks and the elements selected;
• The pages viewed and the order in which they were viewed;
• Aggregated heatmaps showing where visitors click and how far they scroll; and
• A replay of the page as it appeared during your visit.

Content you type into form fields and drop-down menus is masked by our provider in all configurations and is not captured in replays. We use this information to identify navigation problems, broken layouts and content that visitors find confusing.

Session replay and heatmaps operate only on our public marketing pages. They are not used in the signed-in Loopion application, so meeting recordings, transcripts, extracted actions, participant information and Ask Loopion conversations are never captured by them.

Advertising and conversion-measurement technologies

With your permission, we use Google Ads and the LinkedIn Insight Tag and related technologies to understand whether our advertising results in visits, enquiries, account registrations, checkout activity or purchases.

These technologies may help us:

• Attribute a website visit to an advertisement;
• Measure advertising clicks and conversions;
• Understand which campaigns generate paying customers;
• Record the subscription selected and purchase value;
• Measure return on advertising spend;
• Limit or improve advertising;
• Build advertising audiences where permitted; and
• Help advertising platforms optimise campaigns towards people more likely to purchase.

This may involve connecting information about your visit or purchase with an earlier interaction with an advertisement.

Enhanced conversion measurement

Where enabled and where you have given the required permission, we may use Google Ads enhanced conversions and LinkedIn enhanced matching.

This may involve selected first-party information you provide to us, such as an email address entered at checkout, on a demo request or when downloading a resource, being securely hashed in your browser before it is sent and used by Google or LinkedIn to help determine whether a purchase or enquiry resulted from an advertisement. We only send this where you have actively accepted advertising cookies, and only at the point you submit the address to us — never while you are typing and never from a page you have simply viewed.

We do not provide Google or LinkedIn with meeting recordings, transcripts, extracted actions, meeting participants, Ask Loopion questions or other customer meeting content for advertising purposes.

Marketing-email engagement tracking

Where permitted, marketing emails from Loopion may contain tracking pixels and tracked links.

These technologies may tell us:

• Whether an email appears to have been opened;
• When it was opened;
• Whether a link was selected;
• Which link was selected;
• General device, browser or operating-system information;
• Approximate location;
• The campaign or message involved; and
• Whether engagement resulted in a website visit, registration or purchase.

We use this information to understand whether our communications are useful, improve future messages, measure campaign performance and avoid repeatedly sending irrelevant content.

Some email applications automatically block, download or pre-load images. As a result, email-open information may not always be accurate.

You can withdraw permission for marketing-email tracking or unsubscribe from marketing communications at any time using the link provided in the email or by contacting us.

We may still process basic delivery information, such as whether an operational email was delivered, rejected or could not be sent, to maintain the reliability and security of our service.

We do not use marketing open-and-click tracking in essential service communications unless you have separately permitted that tracking.

3. Payments and fraud prevention

Payments are processed using Stripe.

Stripe may use cookies, device information, IP addresses and similar technologies to:

• Process payments;
• Authenticate transactions;
• Prevent fraud;
• Identify suspicious activity;
• Secure its payment services; and
• Meet legal and regulatory obligations.

Some of these technologies may be necessary to complete and protect the transaction.

Stripe's processing is also governed by its own privacy and cookie documentation.

4. Where tracking is used

Marketing and advertising technologies are intended to operate on:

• The public Loopion website;
• Landing pages;
• Pricing pages;
• Registration pages;
• Checkout pages; and
• Purchase-confirmation pages.

We do not use advertising technologies to analyse the contents of customer meetings.

Advertising platforms must not receive meeting recordings, transcripts, extracted actions, participant information or Ask Loopion conversations.

5. Your choices

When you first visit the Loopion website, you may be offered the following choices:

• Accept all
• Reject non-essential
• Manage preferences

Where consent is required, analytics and advertising technologies will remain disabled unless you choose to enable them.

You can manage separate categories, including:

• Essential technologies;
• Functional technologies;
• Analytics technologies; and
• Advertising technologies.

Essential technologies remain active where they are necessary to provide or secure the service.

You can change or withdraw your choices at any time using the Cookie Settings link in the website footer.

Withdrawing permission will not affect processing that occurred before your settings were changed.

6. California and other U.S. visitors

If you are visiting from the United States, we do not show the cookie banner described in Section 5. Instead, functional, analytics and advertising technologies are enabled by default from your first visit, consistent with an opt-out model.

You can opt out of the sale/sharing of your personal information (as those terms are defined under U.S. state privacy laws such as the CCPA/CPRA) at any time using the Do Not Sell or Share My Personal Information link in the website footer. Opting out disables analytics and advertising technologies going forward; essential and functional technologies remain active.

We also honour the Global Privacy Control (GPC) browser/extension signal — if your browser sends it, we treat it the same as clicking the opt-out link above, automatically, without any further action from you.

7. Third-party providers

Some technologies are operated by service providers acting on our behalf or providing services directly to us. These may include:

Further information about providers that process personal data is available in our Privacy Policy and Subprocessors page.

8. Cookie and technology details

Our Cookie Settings panel provides details of the technologies currently detected on our website, including where available:

• Name;
• Provider;
• Category;
• Purpose;
• Whether it is first-party or third-party; and
• How long it remains active.

Because technologies and providers may change, this list may be updated periodically.

9. Browser controls

Most browsers allow you to block or delete cookies through their settings.

Browser settings may not control every type of tracking technology, and blocking essential technologies may prevent parts of Loopion from functioning correctly.

Our Cookie Settings control is the easiest way to manage technologies used directly through the Loopion website.

10. Changes to this policy

We may update this policy when our technology, providers, business practices or legal obligations change.

The date at the top shows when this policy was most recently updated.

Where a material change requires new permission, we will ask for it before using the relevant technology for the new purpose.

11. Contact us

Questions about this policy or your privacy choices can be sent to privacy@loopion.ai.

Registered office: Suite RA01, 195–197 Wood Street, London, E17 3NU.