Privacy Policy
How we collect, use, and protect your information.
Effective Date: 2026-04-20
Last Updated: 2026-04-20
Privacy highlights
- We do not train AI models on your data.
- We do not sell your information to third parties.
- We do not share your information with advertisers.
1. Introduction
LoopyTool, LLC ("we," "our," or "us") operates the tnuki.com website and related services (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this policy, please do not use our Service.
2. Information we collect
2.1 Information you provide
- Service inputs: Data and instructions you provide for processing.
- Uploaded files: Files you upload to our Service.
- Account information: Email address (optional) for service delivery and enhanced features.
- Communications: Information you provide when contacting us.
- Voice data: Audio recordings submitted for transcription.
- Image prompts: Text prompts and reference images used to generate images.
- Memories: Preferences and information you choose to save across sessions.
- Third-party account data: Information from connected services like Gmail (with your authorization).
- Logged outbound emails: When you BCC or forward emails to our outbound logging address, we receive and store a copy, including recipients, subject line, and body content.
2.2 Information automatically collected
- Usage data: Service usage patterns, features accessed, and performance metrics.
- Technical data: Browser type, device information, IP address, and session identifiers.
- Approximate location: Country, region, city, and network information derived from your IP address via a third-party geolocation service, used to tailor search results and for fraud prevention.
- Service data: Processing logs, error reports, and operational data.
- Collaboration data: Tab identifiers and session data for real-time collaboration features.
2.3 Cookies and analytics
We use essential cookies to maintain your session and analytics cookies to track usage patterns. We do not use advertising cookies.
3. How we use your information
3.1 Service provision
- Processing your requests and delivering results.
- Maintaining and improving Service functionality.
- Providing customer support.
- Sending service-related communications (when email provided).
3.2 Service improvement and development
- Analyzing usage patterns to enhance user experience.
- Developing new features and capabilities.
- Creating benchmarks and best practices.
- Conducting research and analytics.
- Understanding user needs and use cases.
- Improving service performance and reliability.
We may use both anonymized and non-anonymized service data for these purposes, subject to our retention policies.
3.3 Business operations
- Ensuring security and preventing fraud.
- Complying with legal obligations.
- Enforcing our terms and policies.
3.4 Voice and media processing
- Transcribing audio to text using third-party AI services.
- Generating images based on your prompts.
- Audio files are processed in real-time and not permanently stored.
- Generated images are stored temporarily to deliver results.
3.5 Third-party service integrations
- Accessing your Gmail to read messages (when connected).
- OAuth tokens are stored securely and can be revoked at any time.
- We only access data necessary for the features you use.
3.6 Outbound email logging
- Where you have elected to BCC our logging address or forward past emails to it, we receive and store copies of those messages.
- Logged emails are processed using AI to extract metadata (sender, recipients, subject, date) and to generate short summaries.
- Stored emails and their summaries are used to inform your conversation context and Plays.
- You may remove the BCC address before sending any individual email, and you can request deletion of logged emails at any time.
3.7 Memory and personalization
- Storing your saved preferences and memories.
- Using memories to personalize your experience across sessions.
- You can view and delete memories at any time.
3.8 Aggregated and anonymized data
We may create and use aggregated, anonymized data for any purpose, including:
- Publishing usage statistics and insights.
- Improving our algorithms and models.
- Business development and marketing.
- Research and analysis.
Such data cannot be used to identify you or your specific information.
4. Information sharing and disclosure
4.1 Service providers
We share information with third-party service providers that help us operate our Service. These providers are contractually bound to protect your information and use it only for providing services to us.
Our current subprocessors include:
| Subprocessor |
Purpose |
Location |
| OpenAI | AI language models, web search, voice transcription | USA |
| Anthropic | AI language models, web search | USA |
| Perplexity AI | AI language models, web search | USA |
| Google LLC | AI language models, web search | USA, European Union |
| xAI | AI language models, web search | USA |
| Groq | AI language models | USA |
| Cloudflare | Content distribution, security, abuse prevention and DNS services | Global |
| Hetzner | Hosting provider | USA |
| Crustdata | B2B data enrichment | USA |
| Exa | B2B data enrichment | USA |
| Pipe0 | B2B data enrichment | Germany |
| SerpAPI | Web search | USA |
| IPLocate | IP-based geolocation | Australia |
| Postmark | Email processing | USA |
| PostHog | Product and AI/LLM analytics | USA |
We may update this list as our Service evolves. All subprocessors are required to maintain appropriate data protection standards.
4.2 Legal requirements
We may disclose information when required by law or in response to valid legal requests.
4.3 Business transfers
Your information may be transferred in connection with a merger, acquisition, or sale of our business.
4.4 No sale of personal data
We do not sell your personal information to third parties.
4.5 Our role in data processing
When you upload data for processing:
- We act as a data processor on your behalf.
- You remain the data controller for any third-party data you submit.
- You are responsible for having the legal right to process the data you submit.
- We process your data to provide the requested services.
- We may use anonymized patterns and aggregated insights from all service usage to improve our Service, as described in Section 3.
5. Data retention
- Transient data: Voice recordings and temporary files are processed in real-time and not permanently stored.
- Generated images: AI-generated images are retained while your account is active to allow continued access; images are deleted upon account termination.
- Service data: Your conversation history, tables, and other content are retained while your account is active and for a reasonable period thereafter as necessary for legal compliance, dispute resolution, and service improvement.
- Memories: Retained until you delete them or your account is terminated.
- Third-party tokens: OAuth tokens (such as Gmail) are deleted when you disconnect the service.
- Outbound email logs: Emails you BCC or forward to our logging address are retained while your account is active and for a reasonable period thereafter to support continued access and to inform your Plays.
- Anonymized data: Aggregated, non-identifiable data may be retained indefinitely for service improvement.
We may retain information longer when required for legal compliance, dispute resolution, security, fraud prevention, or to protect our legitimate business interests.
You can request deletion of your data by contacting support@tnuki.com.
6. Your rights and choices
6.1 For users who provide email
You have the right to:
- Access your personal information.
- Correct inaccurate information.
- Request deletion of your information.
- Export your data in a portable format.
- Object to certain processing activities.
To exercise these rights, contact support@tnuki.com from your registered email address.
6.2 For anonymous users
If you use our Service without providing an email:
- We cannot identify your specific data for individual requests.
- Your data is automatically deleted per our retention schedule.
- You maintain anonymity but cannot exercise individual data rights.
6.3 Third-party service connections
For connected services like Gmail:
- You can disconnect at any time through the Service interface.
- Upon disconnection, we delete stored OAuth tokens.
- You can also revoke access through the third party's account settings.
- Previously accessed data may remain in your conversation history.
6.4 Memories
You have full control over your saved memories:
- View all saved memories at any time.
- Delete individual memories or all memories.
7. Data security
We implement appropriate technical and organizational measures to protect your information, including encryption, access controls, and secure data handling procedures. However, no method of transmission or storage is 100% secure.
8. International data transfers
Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers.
9. Children's privacy
Our Service is not intended for children under 13. We do not knowingly collect information from children under 13. If we become aware of such collection, we will promptly delete the information.
10. Privacy rights by region
10.1 California residents (CCPA)
You have the right to:
- Know what personal information we collect, use, and disclose.
- Request deletion of your personal information.
- Opt-out of the sale of personal information (we do not sell personal information).
- Non-discrimination for exercising your rights.
10.2 European Economic Area (GDPR)
We process your data based on:
- Consent: When you use our Service.
- Contract: To provide requested services.
- Legitimate interests: For service improvement and business operations.
You have additional rights including data portability, objection to processing, and the right to lodge complaints with supervisory authorities.
11. AI-generated content
Our Service uses artificial intelligence for multiple purposes:
11.1 Data enrichment
- AI researches and enriches your data tables.
- Results may contain inaccuracies or outdated information.
- We implement validation but cannot guarantee accuracy.
11.2 Voice transcription
- Audio is transcribed using third-party AI services.
- Transcriptions may contain errors, especially for accents, jargon, or poor audio quality.
- Audio is not stored after transcription.
11.3 Image generation
- Images are generated using third-party AI services.
- Generated images may not accurately represent real subjects.
- You are responsible for appropriate use of generated images.
For all AI features:
- You are responsible for verifying any generated content.
- We do not guarantee accuracy or completeness of results.
- You assume all risks associated with using AI-generated outputs.
12. Limitation of liability
To the maximum extent permitted by law:
- Our liability is limited to the amount you paid for the Service.
- We are not liable for indirect, consequential, or punitive damages.
- We are not responsible for decisions you make based on Service outputs.
13. Changes to this policy
We may update this Privacy Policy periodically. We will notify you of material changes by posting the updated policy and changing the "Last Updated" date. Continued use of our Service after changes constitutes acceptance.