Last updated: November 1, 2026
AdLoop, also called Loop, is a service of Claura, LLC, a Delaware limited liability company, United States, located at 1644 Washington Street, San Francisco, CA 94109, United States ("Claura" or "we"). We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose and protect your personal information when you use our service.
By using our service, you agree to the collection and use of information in accordance with this policy.
We automatically collect information about you, your device and your interaction with our service:
We may combine personal information we receive from you with information we obtain from other sources, such as:
When a business connects its Facebook or Instagram account to AdLoop, and only with the permissions that person accepts in the Facebook or Instagram window, we access the following. On Facebook the app is shown as "Loop", and on Instagram, for direct messages, as "Claura CRM".
Businesses use AdLoop to serve their customers and the people interested in what they sell (their "contacts"). To do that, we store, on behalf of each business, what those contacts leave with it: name, email, phone number, Instagram username, what they filled in on a Facebook, Instagram or website form of the business, and the messages they exchanged with it through Instagram, Messenger, WhatsApp or its website chat, including those answered by the business's bot.
Each business decides what it uses its contacts' data for and is legally responsible for it. We use that data only to provide the service the business turned on: show it in AdLoop, deliver it to the business's CRM, reply the way the business defined, send the emails the business prepares to its lists and, if a person at the business authorizes it, pass it to their artificial intelligence assistant (section 2.6).
A person at a business can connect AdLoop to their artificial intelligence assistant: currently Claude (by Anthropic) or ChatGPT (by OpenAI). Before connecting it, on an AdLoop screen, they choose which brands and which permissions to give it. Brand context lookup (what AdLoop knows about each brand to help prepare its content) is always included; everything else is checked separately. One of those permissions is "Personas y conversaciones" (people and conversations), which passes the business's contacts' data (section 2.5) to the assistant just as the business's team sees it: name, email, phone number, Instagram username and the text of their messages.
Once connected, each time that person asks the assistant for something, AdLoop sends it the data from those brands needed to answer that request, within the permissions granted. What the assistant receives also stays in that person's account with the assistant, and its provider handles it under its terms, its privacy policy (Anthropic's: anthropic.com/legal/privacy; OpenAI's: openai.com/policies/privacy-policy) and the plan that person has with it. Depending on the plan, the provider may use that information to train its models. We do not control what the provider does with what it receives.
We keep a log of each request from the assistant (what it asked for, for which brand, with what input and how it ended), for security and troubleshooting.
The connection can be ended from "Tus conexiones" (your connections) in AdLoop (adloop.app/mcp/connections) or by disconnecting AdLoop in the assistant, and it expires on its own after 30 days. Disconnecting stops new requests, but does not delete what the assistant already received: that is deleted in the assistant.
For each authorization, and each refusal, we keep a receipt: who decided and when, with which assistant, which brands and permissions the assistant asked for and which were granted, the exact text of the screen that was shown, and the version of this policy and of the terms in force that day.
We use the information we collect to:
We use the data in section 2.4 only to provide the service the business turned on:
The team of the business that connected the account and the people on our team who work on that account can see this data. We do not sell it, we do not share it with advertising partners, we do not use it for our own or third party advertising, and we do not build profiles of people. We do not train artificial intelligence models with this data; the assistant a person at the business connects belongs to another company and, depending on the plan that person has with it, may do so (section 2.6). It is processed on our behalf by the providers that run the service (hosting and database) and by artificial intelligence providers (such as OpenAI, Google and Anthropic) that read the text of a comment or message only to prepare the reply.
We do not sell your personal information. We may share your information in the following circumstances:
We use cookies and similar technologies to:
You can control the use of cookies through your browser settings. For more information about cookies, including how to see which cookies have been set on your device and how to manage and delete them, visit www.allaboutcookies.org.
You can opt out of marketing communications by following the opt out or unsubscribe instructions included in the marketing communications we send you.
There are several ways to limit online tracking:
Note: Because these opt out mechanisms are specific to the device or browser where you use them, you will need to opt out on every browser and device you use.
Some Internet browsers can be set to send "Do Not Track" signals to the online services you visit. We currently do not respond to "Do Not Track" or similar signals. To learn more about "Do Not Track", visit www.allaboutdnt.com.
Our service may contain links to websites and other online services operated by third parties. In addition, our content may be embedded in web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or a representation that we are affiliated with, any third party. We do not control websites or online services operated by third parties, and we are not responsible for their actions.
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure.
Depending on your location, you may have the following rights:
To exercise these rights, contact us through the channels listed in the contact section.
To delete the data we store from your Facebook and Instagram accounts, follow the instructions at www.adloop.app/data-deletion.
You can see the receipts of your assistant connections in "Tus conexiones" (your connections), and you can ask us for a copy of any of them: we will send it within 10 calendar days. They are the record of what you authorized, so if you ask us to delete your account, we delete your data but keep those receipts until the period in section 10 ends.
If you are a contact of a business that uses AdLoop (section 2.5), that business manages your data: to see, correct or delete it, write to the business. If you write to us, we will pass your request on to the business within 5 business days and let you know we did.
We keep your personal information for as long as necessary to fulfill the purposes described in this policy, unless the law requires or permits a longer retention period.
We keep Facebook and Instagram data while the account is connected. When it is disconnected in AdLoop we immediately delete its stored access tokens, and we delete the rest of that data within 30 days of your request.
We keep the receipts of assistant authorizations for 5 years from each decision and then delete them. A connection with an assistant lasts until you disconnect it or it expires, after 30 days.
Your information may be transferred to and processed in countries other than your own. We make sure such transfers comply with applicable data protection laws. Claura is located in the United States, as are several of the providers that run the service, so part of your information is processed in that country.
Our service is not directed to anyone under 18. We do not knowingly collect personal information from minors. If we learn that we have collected information from a minor, we will take steps to delete it.
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. We recommend that you review this policy periodically.
If you have questions about this Privacy Policy or about how we handle your personal information, you can contact us: