Privacy

Privacy

Last updated: 28 September 2026.

This page covers three things: what we do with your data if we emailed you about Backloop, if you use the Backloop platform, and when you visit trybackloop.com. The short version is that we only email people whose work involves APIs or MCP servers that AI agents use, we keep very little, and one reply stops everything.

Who we are

Backloop is run by Altria LLC, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, USA. Altria LLC is the controller of the data described here.

For privacy questions or requests, email guillaume@backloophq.com or reply to any email we sent you.

If we emailed you

What we have

• Your name, work email address, job title and employer.
• Your public professional profile, such as your LinkedIn URL and headline.
• Facts about your company: its website, size, industry and technology, and its public job postings, API docs, MCP servers and code repositories.
• Why we contacted you (for example "shipped an MCP server in August"), with the date and a link to the source.
• The emails we exchanged, and whether you replied, bounced or asked us to stop.

We don't collect sensitive data, and we only use work addresses.

Where we got it

• Public sources: your company's website and docs, public job postings, public code repositories and MCP registries, and professional profiles you made public.
• B2B contact-data providers we reach through RouterGrowth, such as Apollo, LeadMagic and Findymail. They supply and check work email addresses.

Why, and on what legal basis

We emailed you to tell you about Backloop, because your role looks like it involves the problem Backloop solves: understanding what AI agents fail to do with your API.

The legal basis is our legitimate interest in contacting professionals about products relevant to their work (GDPR Art. 6(1)(f)). We keep that interest narrow: work addresses only, only people whose role fits, at most three emails, and an easy way out in each one.

How we decide

Software, including AI models, researches companies, checks whether they fit and drafts the emails. A person approves who gets emailed and what they receive. None of this has a legal or similarly significant effect on you.

How to make it stop

Reply "no", "stop" or anything like it to any of our emails. We stop within two business days at the latest, and no Backloop address will email you again. We keep your email address on a do-not-contact list, only so that it stays that way.

How long we keep it

• If you never reply: we delete it 12 months after our last email.
• If you ask us to stop: we keep only your email address, on the do-not-contact list.
• If you reply and we talk: we keep it for as long as the conversation or business relationship lasts, then 12 months more.

If you use the Backloop platform

The platform at app.trybackloop.com turns feedback from AI agents into issues and pull requests.

Your account

When you sign in with GitHub, Google or an emailed link, we keep:

• your email address;
• your name and profile picture, when GitHub or Google share them;
• your GitHub username or Google account ID;
• when you signed in, and a cookie that keeps you signed in for up to 30 days.

We ask GitHub only for your profile and email addresses, and Google only for your name, email address and profile picture. We never see your password, and signing in gives us no access to your repositories, files or mail.

We use this data only to sign you in and to show who did what in a workspace, such as who approved a change. We don't use it for advertising, and we share it only with the providers listed below. Backloop's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Feedback and code

Services connected to Backloop send us feedback that their AI agents submitted: what the agent tried to do, what went wrong, the endpoint involved and a pseudonymous ID for the service's customer. The protocol forbids credentials and personal data in feedback, and our SDKs strip common secrets and email addresses before sending.

When a workspace connects a code repository, we process its code to investigate reported problems. Relevant parts are sent to Anthropic and TypeSafe for AI analysis and code search.

How long we keep it

Sign-in links expire after 15 minutes and sessions after 30 days. We keep your account until you ask us to delete it. Feedback and code are kept while the workspace uses Backloop.

If you visit this website

The site sets no cookies and runs no analytics. Our host, Vercel, keeps standard server logs, including IP addresses, for a short time to run and secure the site. Fonts load from Google Fonts, so your browser sends your IP address to Google.

Who else handles the data

These service providers process data for us, under their own agreements:

We don't sell personal data.

International transfers

Altria LLC and most of these providers are in the United States. When data comes from the EU or UK, we rely on the EU–US Data Privacy Framework where the provider is certified under it, and otherwise on the European Commission's Standard Contractual Clauses.

Your rights

If you're in the EU, the UK or a place with similar laws, you can ask us to:

• show you the data we hold about you;
• correct it or delete it;
• restrict how we use it;
• give you a copy of it.

You can also object at any time to being contacted, and we will stop.

Email guillaume@backloophq.com, and we answer within one month. You can also complain to your data protection authority, such as the CNPD in Portugal or the CNIL in France.

Changes

When this page changes, the date at the top changes too.