Privacy Policy

Last updated: 22 December 2025

Introduction

LoomAPI ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard information when you use our API client generation service.

This policy applies to all users of LoomAPI, including developers who use our service to generate API clients.

What Data We Process

LoomAPI processes minimal data necessary to provide our service. We collect:

  • Account information: Email address, name, and account preferences
  • Usage data: API client generation requests, language preferences, and usage metrics
  • Technical data: IP addresses, user agents, request headers (for rate limiting and security)
  • Billing data: Usage metrics, subscription information (processed via payment processors)

We do NOT store: Your API specifications or generated client code beyond what is necessary for service delivery. API schemas are processed but not permanently stored.

How We Use Your Data

  • Providing API client generation services
  • Processing your API specifications to generate clients
  • Enforcing rate limits and quotas
  • Processing billing and subscription management
  • Maintaining service security and preventing abuse
  • Improving our service and providing support

Data Sharing

We share data only with:

  • Payment processors: For payment processing and subscription management
  • Service providers: Hosting, analytics, and infrastructure providers necessary to operate our service
  • Legal authorities: When required by law or court order

Data Retention

Account information is retained for as long as your account is active. Usage data is retained for billing and service improvement purposes. API specifications are processed but not permanently stored. We delete account data upon request or account closure, subject to legal retention requirements.

Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Request deletion of your data
  • Object to processing
  • Data portability

To exercise these rights, contact us at privacy@loomapi.com.

We will respond to your request within 30 days, or as required by applicable law.

International Data Transfers

LoomAPI operates globally and may transfer data to countries outside your jurisdiction. We ensure appropriate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) for EU data transfers
  • Adequacy decisions where applicable
  • Compliance with applicable data protection laws

Children's Privacy

LoomAPI is not intended for use by children under 13 (or the applicable age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Security Measures

We implement industry-standard security measures to protect your data:

  • Encryption in transit (TLS/SSL) and at rest
  • Regular security audits and vulnerability assessments
  • Access controls and authentication mechanisms
  • Monitoring and logging of access to sensitive data
  • Incident response procedures

Cookies and Tracking

LoomAPI's website may use cookies and similar technologies for analytics and functionality. We do not use cookies for advertising or cross-site tracking. You can control cookies through your browser settings.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or through our website. The "Last updated" date at the top indicates when this policy was last revised.

Contact

For privacy-related questions, concerns, or to exercise your rights, please contact us: