Privacy Policy
Last updated: June 20, 2026
This Privacy Policy explains how Elfa Labs LLC (LoopDrop) ("we", "us") collects, uses, shares and protects information when you use LoopDrop (the "Service").
1. Information we collect
- Account & profile: name, email, password (hashed), producer profile, and onboarding details (contact handles, social links).
- Your content: beats, audio, images, store and license settings, beat packs, leads and CRM notes, calendar events.
- Connected-platform data: when you connect Facebook/Instagram (Meta), TikTok, YouTube (Google) or an email mailbox, we receive access tokens and basic account information (e.g. profile name/handle, channel id) to provide the features you enable.
- Payments: processed by Stripe. We receive limited transaction metadata (amounts, status, payout/connect status) but never full card numbers.
- Usage & device: log data, approximate location, and analytics about how the Service and your public pages are used.
- Communications: messages you send us and emails sent/received through connected mailboxes for artist outreach.
2. How we use information
- Provide, operate, secure and improve the Service;
- Process subscriptions and beat sales, and route payouts via Stripe;
- Publish your bio page and store, deliver purchases and license agreements;
- Send beat packs and transactional emails, and surface replies and engagement;
- Provide analytics, and prevent fraud and abuse;
- Comply with legal obligations.
3. Third-party platforms & limited use
We integrate with third parties only to provide features you turn on, and our use of their data is limited to those purposes:
- Meta (Facebook & Instagram): when you connect Facebook or Instagram, LoopDrop uses the Meta APIs to publish videos you create to your own Facebook Page or as Instagram Reels, and to read basic account/Page information (id, name) so you can confirm where you are publishing. We only publish content you created and explicitly chose to post. Our access to and use of information received from Meta APIs adheres to the Meta Platform Terms and Developer Policies. You can disconnect at any time in Settings, or request deletion of your data via our data deletion page.
- TikTok: when you connect TikTok, LoopDrop uses the TikTok Content Posting API to publish videos you create to your own TikTok account, and reads your basic profile (name/handle, account id) to identify the connected account. We only publish content you created and explicitly chose to post. Our use of information obtained through the TikTok APIs adheres to the TikTok Developer Terms. We do not use this data for advertising and do not sell it.
- Google / YouTube: when you connect YouTube, LoopDrop uses the YouTube API Services to upload videos you create to your own channel and to read basic channel information (channel id, name). By using these features you agree to the YouTube Terms of Service and the YouTube API Services Terms of Service. LoopDrop's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google's own handling of your data is described in the Google Privacy Policy. We do not use this data for advertising and do not sell it. You can revoke LoopDrop's access to your Google/YouTube data at any time via your Google account security settings.
- Google / Gmail: when you connect your Gmail mailbox (via our email provider EmailEngine), LoopDrop uses the Gmail account (restricted scope
https://mail.google.com/) solely to send the beat-pack emails you compose from your own inbox (SMTP) and to read replies and message metadata for those conversations (IMAP) so we can show them back to you in your dashboard. We request full mailbox access because sending and receiving replies over IMAP/SMTP is what powers these two-way conversations. LoopDrop's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements: we use this data only to provide these user-facing features, we do not use it for advertising, we do not sell it, we do not use it to train generalized/AI models, and humans do not read your email except as strictly necessary for security, to comply with the law, or with your explicit consent. You can revoke LoopDrop's access at any time via your Google account permissions or by disconnecting the mailbox in Settings. - Stripe (payments & payouts) and Cloudflare (hosting & storage) process data as our service providers.
Access tokens for connected accounts are stored securely and used solely to operate the features you enabled. We do not sell your personal information or connected-platform data.
4. How we share information
We share information with the service providers above to run the Service, with buyers/recipients as needed to complete a sale or deliver a beat pack, and when required by law or to protect rights and safety. We may share data in connection with a merger or acquisition, subject to this Policy.
5. Data retention & deletion
We retain information for as long as your account is active or as needed to provide the Service and meet legal obligations. You can:
- Disconnect a platform at any time in Settings — this revokes our ongoing access and removes its stored tokens.
- Request deletion of your account and associated personal data by emailing privacy@loopdrop.io or via our data deletion page. We will delete or anonymize your data within 30 days, except records we must keep for legal, tax or fraud-prevention reasons.
6. Cookies
We use strictly necessary cookies for authentication and security, and limited analytics to understand usage. You can control cookies through your browser settings.
7. Security
We use industry-standard measures to protect your data, including encryption in transit and access controls. No method of transmission or storage is 100% secure, but we work to protect your information.
8. International transfers
Your information may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.
9. Your rights
Depending on your location (e.g. EEA/UK under GDPR, California under CCPA/CPRA), you may have rights to access, correct, delete, port, or restrict processing of your personal data, and to object to certain processing. To exercise these rights, contact privacy@loopdrop.io.
10. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal data.
11. Changes & contact
We may update this Policy from time to time; material changes will be communicated through the Service or by email. For any privacy question or request, contact privacy@loopdrop.io.