Privacy Policy

1. Who we are

This Privacy Policy describes how AR Loop LLC ("AR Loop", "we", "us") collects, uses, stores, shares and protects information when you visit arloop.ai, contact us, or connect a Google account to AR Loop. AR Loop is a marketing services company based at 1700 Pacific Ave, Suite 2100, Dallas, TX 75201, USA. Questions: connect@arloop.io.

2. Information we collect

Information you give us. When you submit a form, book a call or email us, we collect your name, work email, website, company and the message you send.

Information collected automatically. Our site collects standard technical data such as IP address, browser type, device, pages viewed and referring URL, using cookies and similar technologies described in Section 8.

Google user data. If you choose to connect a Google account, we receive the data described in Section 3 through Google's APIs, only after you grant permission on Google's consent screen.

3. Google user data: what we access and why

AR Loop uses Google APIs so that we can manage Google Business Profile listings on behalf of clients who have hired us and who authorize that access. The only Google scope we request is Manage your Google Business Profile (https://www.googleapis.com/auth/business.manage), together with basic profile information (name, email address and profile picture) used to identify the connected account.

With this permission we access and use the following data solely to provide the services you have engaged us for:

• Business Profile listing information (business name, address, phone, hours, categories, attributes, description, website) to review and update your listing at your direction.
• Posts, photos and offers to publish content you have approved and to remove content you ask us to remove.
• Reviews and Q&A to report on them and, where you have agreed, to post responses you have approved.
• Performance insights (views, searches, calls, direction requests, website clicks) to prepare the reporting included in your service.

We do not request or use any other Google scope. If our use of Google user data ever changes, we will update this Policy and ask for your consent again before the new use begins.

4. Limited Use disclosure

AR Loop's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We only use Google user data to provide or improve the user-facing Business Profile management and reporting features you have engaged us for. We do not use it for any other purpose.
• We do not sell Google user data. We do not use it for advertising, retargeting, credit-worthiness or lending decisions, or to build user profiles.
• We do not transfer Google user data to third parties except (a) as necessary to provide or improve the service with your consent, (b) to comply with applicable law or legal process, (c) as part of a merger, acquisition or sale of assets after giving you notice and, where required, obtaining your consent, or (d) for security purposes such as investigating abuse.
• We do not use Google user data to develop, improve or train generalized or non-personalized artificial intelligence or machine learning models. Google user data is never used as training data.
• Humans at AR Loop read Google user data only when you have asked us to perform work on your Business Profile, for security or abuse investigation, to comply with law, or when the data is aggregated and anonymized for internal operations.

5. How we use other information

We use contact and technical information to respond to enquiries, deliver and improve our services, secure our site, comply with law and, if you have opted in, send occasional service updates you can unsubscribe from at any time.

6. Storage, security and retention

Google user data is processed in transit through secure (TLS-encrypted) connections and, where we retain it, stored encrypted at rest on infrastructure located in the United States and hosted by reputable cloud providers. OAuth access and refresh tokens are stored encrypted, are never exposed in client-side code, and are used only by the automation and reporting tools we operate for your account.

Access to Google user data is restricted to AR Loop staff who need it to deliver your service, is protected by unique credentials and multi-factor authentication, and is logged. We review access at least annually.

We keep Google user data only as long as needed to deliver your service. When your engagement ends, or when you revoke access, we delete stored Google user data and tokens within 30 days, except for aggregated reports that no longer identify the Google account and records we must keep by law.

7. Revoking access and deleting your data

You can revoke AR Loop's access to your Google account at any time at https://myaccount.google.com/permissions. You can also email connect@arloop.io to request that we disconnect your account and delete any Google user data we hold. We will confirm completion within 30 days.

8. Cookies and analytics

Our site uses strictly necessary cookies and, with your consent where required, analytics cookies (such as Google Analytics) to understand how the site is used. Analytics data is not combined with Google user data obtained through OAuth. You can control cookies through your browser settings.

9. Sharing with service providers

We use a small number of service providers (hosting, email, scheduling, analytics and workflow automation) that process data on our behalf under contracts that restrict their use of the data to providing services to us. These providers do not receive Google user data unless it is strictly required to operate the tools we use to deliver your service, and never for their own purposes.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, email connect@arloop.io. We will not discriminate against you for exercising them.

11. Children

Our services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children.

12. International transfers

We are based in the United States and process data there. If you access our services from elsewhere, you understand your information will be transferred to and processed in the United States.

13. Changes to this Policy

We may update this Policy. We will post the new version here with an updated effective date and, for material changes affecting Google user data, notify you and obtain consent before the changes take effect.

14. Contact

AR Loop LLC, 1700 Pacific Ave, Suite 2100, Dallas, TX 75201, USA. Email: connect@arloop.io.