Legal

Privacy Policy

Last updated: April 28, 2026

Draft. This document is a working template intended to be reviewed by qualified legal counsel before going public. It does not constitute legal advice.

1.Who we are

Loopen is a productized Shopify development subscription operated by Rhafael Corpuz, based in Manila, Philippines. For the purposes of GDPR, Loopen is the data controller for the limited personal data described below.

2.What we collect

We collect the minimum personal data needed to operate the service:

  • Contact details: name, email address, company, role. Provided by you when you book a call, sign up, or email us.
  • Billing details: collected and stored by Lemon Squeezy (our Merchant of Record). Loopen never stores your full card number or banking details.
  • Project credentials: Shopify staff invites, third-party app logins, brand assets. Stored in 1Password and shared only as required to deliver your work.
  • Communication records: Trello board activity, Slack messages, Loom recordings, and email threads related to your account.
  • Site analytics: aggregated, anonymized usage data via Vercel Analytics and Vercel Speed Insights. No personally identifying tracking, no third-party advertising trackers, no cookies for advertising.

3.How we use it

We use your data only to:

  • Deliver development work and respond to your requests.
  • Process billing through Lemon Squeezy.
  • Send service-related emails (receipts, status updates).
  • Investigate site performance and improve the user experience on loopen.dev.
  • Comply with legal, tax, and accounting obligations in the Philippines.

We do not sell your personal data to anyone. We do not use your data for advertising profiling.

4.Who we share with

We share strictly on a need-to-know basis:

  • Lemon Squeezy (billing, Merchant of Record).
  • Cal.com (booking).
  • Trello (Atlassian) (project management).
  • Loom (video walkthroughs).
  • Slack (real-time communication, where applicable).
  • Vercel (site hosting, analytics, speed insights).
  • Google Workspace (email).
  • Auditors, accountants, and tax authorities where legally required.

5.International transfers

Most of the third-party services above are based in the United States or European Union. Where personal data is transferred internationally we rely on the third party's own GDPR compliance (Standard Contractual Clauses, Privacy Framework certification, or equivalent). A Data Processing Addendum aligned to GDPR and CCPA is available on request for clients with EU or California data subjects.

6.Your rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA, Philippine Data Privacy Act), you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Delete your data, subject to legal retention obligations.
  • Object to processing for direct marketing.
  • Receive your data in a portable format.
  • Withdraw consent at any time.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email hi@loopen.dev. We respond within 30 days.

7.Data retention

We retain your personal data for as long as you have an active subscription, plus a reasonable period afterwards for tax, accounting, and dispute-resolution purposes (typically 7 years under Philippine tax law). You may request earlier deletion of non-financial records.

8.Security

We use industry-standard safeguards: TLS in transit, encrypted storage (1Password) for all credentials, principle of least privilege for access, and two-factor authentication on all service accounts. No system is perfectly secure; we will notify affected clients without undue delay in the event of a breach involving personal data.

9.Children

The service is intended for businesses, not individuals. We do not knowingly collect personal data from anyone under 16.

10.Changes to this policy

We may update this policy from time to time. Material changes will be announced by email at least 30 days in advance. Continued use of the service after the effective date constitutes acceptance.

11.Contact

For privacy questions, data requests, or to invoke your rights, email hi@loopen.dev.