Privacy Policy

TenthLoop ("TenthLoop," "we," "us," or "our") is a web accessibility platform operated by Leovoid Technologies, Inc., a Delaware corporation located at 8 The Green Ste 25740, Dover, DE 19901. This Privacy Policy explains what information we collect across tenthloop.com, app.tenthloop.com, and ops.tenthloop.com (together, the "Service"), how we use it, and the choices you have.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

We collect the following categories of information.

• Account information: your name, email address, password (stored as a salted hash, never in plain text), avatar, timezone, and language preference.
• Website and scan data: the URLs you submit for scanning, the pages you select, and the automated and expert findings generated from those scans.
• Billing information: your subscription plan, invoices, and payment history. Full card numbers are never stored on our servers; payment processing is handled by our payment processing partners' own hosted, PCI-compliant checkout.
• Support and service requests: information you provide when requesting an Expert Audit, Remediation, or Monitoring service, or when contacting support, including any files or notes you choose to share with us.
• Login and security history: IP address, browser and device information, and timestamps for each login, used to secure your account and, if you enable it, to power your own login history view.
• Cookies: a session cookie that keeps you signed in. See Section 8 for more on cookies.

If you choose to create or sign in to your account using Sign in with Google, we receive only the following basic profile information from your Google Account, provided directly by Google after you approve the request: your name, your email address, and your profile picture.

We do not request, and Sign in with Google does not grant us, access to your Gmail, Google Drive, Google Calendar, Google Contacts, or any other Google product or data beyond this basic profile information. We request only the minimum OAuth scopes required to verify your identity and create or sign in to your TenthLoop account (specifically the openid, email, and profile scopes).

This information is used solely to create your account, verify your identity at each sign-in, and populate your name and avatar within the Service. TenthLoop's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke TenthLoop's access to your Google Account at any time from your Google Account's security settings, in addition to deleting your TenthLoop account directly (see Section 7).

• To create and maintain your account, and to authenticate you at each sign-in.
• To provide the Service itself, running scans, generating reports, and delivering Expert Services you request.
• To process payments and manage your subscription.
• To send you service-related communications, such as scan completion notices, billing receipts, and responses to support requests.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with our legal obligations.

We do not use your information to serve you third-party advertising, and we do not sell your personal information.

We share information only with service providers who help us operate TenthLoop, under agreements that limit their use of your information to providing services to us. These currently include:

• Payment and billing processors, to process subscription payments and Expert Service invoices.
• Zoho CRM, to maintain a customer record for accounts that have engaged with an Expert Service, so our team can support you.
• Zoho Booking, if you choose to schedule a discovery call.
• Our infrastructure and hosting provider, to run the Service itself.
• Email delivery providers, to send transactional email such as password resets and quote notifications.

If a member of our team performs an Expert Audit, Remediation, or Monitoring service you have requested, they will access the relevant website content and scan results necessary to complete that service.

We may also disclose information if required by law, or in connection with a merger, acquisition, or sale of assets, subject to standard confidentiality protections.

We retain your account information for as long as your account remains active. If you delete your account, your personal identifying information (name, email, avatar, and authentication credentials) is removed or anonymized, while records tied to your account that we are required to keep for billing, tax, or legal purposes are retained as required by law.

• Access and export: from your account settings, you can download a copy of your account information, workspaces, websites, scan history, and service requests as a JSON file at any time.
• Correction: you can update your name, email, avatar, and other profile details directly from your account settings.
• Deletion: you can delete your account from your account settings. Deleting your account removes or anonymizes your personal identifying information; it does not delete records other members of your workspace legitimately need to keep (see Section 6).
• Revoking Google access: see Section 3.

We use a session cookie to keep you signed in to the Client Portal and Admin Dash. We do not currently use advertising or third-party tracking cookies.

The Service is not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will remove it.

We use reasonable technical and organizational measures to protect your information, including password hashing, optional two-factor authentication, and encrypted connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. If we make material changes, we will update the date below and, where appropriate, notify you directly.

If you have questions about this Privacy Policy, contact us at support@tenthloop.com or by mail at 8 The Green Ste 25740, Dover, DE 19901.