Draft pending counsel review. This policy is published in good faith as a working baseline. If you need a signed copy or a redlined version for your procurement team, email hello@doloop.io.
This policy applies to doloop.io and all subdomains, including code.doloop.io, documents.doloop.io, writing.doloop.io, and answers.doloop.io, and any future doloop product surface. Where a product has additional product-specific terms (for example, a separate enterprise data-processing agreement), those terms take precedence.
The command-line tool (pip install doloopio) reads and checks your code locally. Your source, the conventions it infers, and the tenant memory it builds up stay on your machine and are never uploaded to us. Bring your own model: doloop never proxies your model calls.
If you upload a PDF to the document surface (documents.doloop.io) for extraction, the file is temporarily stored on the API server (Fly.io, San Jose region) for the duration of your session. We retain uploaded PDFs for at most 24 hours, after which a background process unlinks the file from disk. Files are not backed up, archived, or copied to any other system.
We do not use your uploaded PDFs to train, fine-tune, or evaluate any model. We do not share them with third parties. Our extraction pipeline is fully deterministic and runs entirely on our own infrastructure; no third-party AI services are invoked for the standard extraction flow.
We count the number of pages each IP address has scanned in the current month, in a small usage database, to enforce the free tier (10 pages per IP per month). This counter rolls over on the first day of each month. We do not log the contents of your scans, your filenames, or anything else identifying.
Our static pages do not set tracking cookies, do not run any analytics scripts, and do not load third-party tags. The only outbound requests from these pages are: (1) Google Fonts for typography, (2) federalreserve.gov for the SR 26-2 source link, (3) the extraction API on wysiwyd-api.fly.dev when you use the live document upload widget, and (4) the doloop machine on api.doloop.io when you run a demo check or use the on-page answer widget.
Because the free tier does not collect PII, there is no identifiable record of your activity to access, modify, or delete. If you have used the Pro or Enterprise tier and want to request data access or deletion, email hello@doloop.io and we will respond within 30 days.
If we materially change this policy we will update the "Last updated" date above. We will not retroactively reduce your privacy protections for data already collected.
Privacy questions: hello@doloop.io.
Routes you to a real doloop page, asks when your question is ambiguous, or tells you when there is no answer. No model runs on the answer path, so it cannot invent one.