Security
Report a vulnerability to security@[DOMAIN]. We acknowledge inside 24 hours and will not pursue good-faith research.
PGP fingerprint [FINGERPRINT] Legal
Legal
Every agreement in one place, each with the date it last changed. Your samples stay yours — the terms exist to say so plainly.
Draft
Structure and layout only. Every clause below is placeholder wording and must be written or reviewed by counsel before publication.
Documents
Terms of Service The agreement between you and Loopbox — accounts, plans, content and termination. Updated 12 Aug 2026 Read → Privacy Policy What personal data we collect, why, and the rights you have over it. Updated 12 Aug 2026 Read → Cookie Policy Every cookie the site sets, what it does, and how to turn the optional ones off. Updated 12 Aug 2026 Read →
Acceptable Use Policy What you may not upload or share, and what happens if you do. Updated 12 Aug 2026 Read →
Data Processing Addendum For customers who process personal data through a team account. Updated 4 Jun 2026 Read →
Subprocessors The third parties that touch customer data, with 30 days notice of changes. Updated 4 Jun 2026 Read →
Where your data lives
Plain answers, no schedule required
What Why we hold it Where Kept for
Your samples The service does not work without them. Never used to train anything. [REGION] object storage Until you delete them
Detected tags Derived from your audio so search works. [REGION] database With the sample
Account & email Sign-in, billing and answering support. [REGION] database Account lifetime
Payment details Held by the payment processor. We never see a card number. [PROCESSOR] Per processor terms
Server logs Debugging failed uploads and abuse investigation. [REGION] [N] days
Region and retention values are placeholders — confirm each against the actual R2 bucket configuration and worker retention before publishing.
Subprocessors
Third parties that touch customer data. We publish changes here 30 days before they take effect, so an enterprise customer can object in time.
[OBJECT STORAGE] Sample storage and delivery [REGION]
[PAYMENT PROVIDER] Subscriptions and invoicing [REGION]
[EMAIL PROVIDER] Transactional email [REGION]
[ANALYTICS] Aggregate product analytics [REGION]
Reporting a problem
Copyright & takedown
If a shared collection contains your work without permission, write to legal@[DOMAIN] with the link and proof of ownership.
Your data
Export or delete everything from Account → Data, without writing to anyone. A request by email is answered inside 30 days.