Privacy Policy

FanLoop page analytics

On FanLoop artist pages, optional first-party analytics record page loads, estimated browser sessions, outbound destination choices, offer views/actions, signup starts, coarse scroll milestones, page-section exposure, approximate visible and focused time, and playback milestones for artist-supplied backstage audio. These estimates do not prove attention, identify unique people, or measure external streams. FanLoop does not collect typed form contents, keystrokes, cursor movement, or cross-site browsing for these reports.

A visitor can allow or decline analytics on an artist page and can change that choice at any time using Privacy choices. FanLoop honors Do Not Track and Global Privacy Control by keeping analytics off. Declining does not prevent a visitor from viewing the page or submitting a requested artist-list signup; information submitted for that signup and its consent record are processed separately for the artist’s workspace.

After the updated public notice and retention indexes are deployed, event-level page-load, outbound-link, and offer telemetry is scheduled for deletion after 400 days; detailed engagement records after 180 days; daily analytics and source/campaign summaries after 800 days; hashed deduplication and rate-limit records after 48 hours; and active-time caps after 400 days. Source-summary expiry moves forward when an event updates the aggregate. Firestore cleanup is asynchronous. Pre-existing records without an expiry timestamp may remain until reconciled. See the FanLoop visitor privacy notice for visitor-facing definitions.

1. Information we collect

We collect account and workspace information such as name, email, password-related identifiers, artist or business details, content, release links, billing status, support messages, and settings. FanLoop customers may submit fan names, email addresses, phone numbers, consent records, tags, source links, and engagement events. We receive payment status and customer identifiers from Stripe; we do not store full card numbers.

We also receive technical information such as device and browser details, approximate location derived from an IP address, page views, referral and campaign parameters, timestamps, and error logs. We use cookies or local storage needed for sign-in, security, and session continuity.

2. How we use information

We use information to create and secure accounts, provide workspaces and public pages, process billing, deliver requested campaigns and content, record consent, provide analytics and support, prevent abuse, troubleshoot failures, improve the service, and meet legal obligations. We use consent records to determine whether a contact is eligible for the channel selected by the business or artist.

3. When we share information

We share information with providers that help us operate the service, such as Firebase for authentication and storage, Stripe for billing, hosting and analytics providers, and communication providers when a customer has approved that channel. We may share information when required by law, to protect rights and safety, or as part of a merger, financing, or sale of assets. We do not sell personal information.

A business or artist controls the customer data submitted to its workspace. That customer may access, export, correct, or delete workspace data through the available tools or by contacting the workspace owner. GreenLoop uses that data to provide the workspace and does not use it to build unrelated contact lists.

4. Retention and security

We retain information while an account or customer relationship is active and as needed for billing records, security, dispute handling, backups, and legal obligations. We use access controls, authenticated server operations, signed webhooks, audit records, and provider security controls appropriate to the information. No online system is completely secure, so please report suspected unauthorized access promptly.

5. Choices and requests

You can update account information, manage billing through Stripe's customer portal, and use the available export or deletion paths for workspace data. Email and SMS permissions are separate; a person can withdraw either permission without withdrawing the other. Contact us to request access, correction, deletion, or clarification. We may need to verify identity and coordinate with the business or artist that controls a workspace.

6. Children and third-party services

The services are intended for businesses, artists, managers, labels, and their authorized users, not children under 13. Third-party sites, music services, payment pages, and links have their own policies. Review those policies before submitting information to them.

7. Contact and updates

For privacy questions or requests, email hello@greenloop.dev. We may update this policy when our services or legal obligations change and will post the new effective date here.