Privacy Policy

Last updated: October 23, 2026

Loopse is a streaming platform run by Media Leap Inc. ("Loopse", "we", "us"). Businesses ("Clients") use Loopse to run their own streaming websites and apps for their viewers.

This policy explains what personal information we handle, why, and the choices you have. It covers two groups of people in different ways:

Client staff and contacts: people who use Studio or the Loopse admin, billing contacts, and people who sign up a business for Loopse. For this information, Loopse decides how it is used.
Viewers of a Client's service: people who visit a Client's website or use its apps. For this information, the Client is in charge, and Loopse handles it only on the Client's behalf and on its instructions. The Client's own privacy policy explains how it uses your information. Questions or requests about a Client's service should go to that Client first; we will help them answer.

1. Information about Client staff and contacts

What we collect

Account details: name, email address, role, password (stored only as a one-way hash), two-step sign-in settings.
Business details: company name, address, province or state, country, phone number, tax numbers, billing contact.
Billing: invoices, payments and card details. Card numbers are held by our payment processor (Stripe); we only keep the card brand, last four digits and expiry date.
Sign-in and activity records: when you sign in, the internet address (IP) and browser or device used, and a log of important changes made in Studio or the admin (for security and to resolve disputes).
Messages: emails and support requests you send us.

Why we use it

To create and run your account and provide Loopse (performing our contract with you).
To bill you, collect payment and keep tax records (contract and legal duty).
To keep Loopse secure: detecting suspicious sign-ins, preventing abuse and investigating problems (legitimate interest).
To send you service messages, such as invoices, security alerts, setup warnings and important changes. You cannot opt out of these while you have an account.
To send you news about Loopse, only where the law allows; every such email has an unsubscribe link.

2. Information about viewers (handled for Clients)

When a Client uses Loopse, Loopse stores and processes, for that Client:

account details the viewer gives (such as name, email, password hash, profile settings), and the terms they accepted and when;
subscriptions, purchases, rentals and refunds (card details stay with the Client's payment provider or app store; we never hold viewers' money);
what was played, read or viewed, for how long, on which kind of device and from which country (to run features like "continue watching", rentals and analytics). Viewers who are not signed in are counted with a random device id, not their name;
comments, chat messages, course progress and certificates;
devices registered for push notifications and email delivery results (bounces and complaints);
the internet address (IP) of requests, used for security, rate limits and to work out the viewer's country for content rules. Country lookups use the free DB-IP Lite database (IP geolocation by DB-IP).

We use viewer information only to provide the Client's service, keep it secure and meet legal duties. We do not sell it, we do not build advertising profiles of viewers, and we do not use one Client's viewer data for another Client. If a Client shows ads, the Client chooses its ad partners and what they receive.

3. Cookies and similar technology

Studio, the Loopse admin and Client websites use essential cookies to keep you signed in and to protect forms. They are needed for the service to work. Client websites may add their own analytics or ad tags; those are the Client's choice and are covered by the Client's privacy policy. Apps store a sign-in token and a random device id on the device.

We share information only as needed to run Loopse, with service providers that are bound to protect it:

hosting and server providers that run Loopse;
Backblaze (storage of uploaded content and backups);
Stripe (Loopse's own billing of Clients);
Google Workspace (Loopse's own email to Clients);
Expo, Apple and Google (building and delivering push notifications and apps);
the payment providers, app stores, mail servers, ad servers and partners a Client connects, which receive what the Client's service sends them.

We may also disclose information when the law requires it, to protect people's safety, to respond to valid legal requests or rights complaints, or as part of a sale or reorganisation of our business (the buyer must keep protecting it).

5. Where information is stored

Information is stored on servers in Canada, the United States, or other countries where our providers operate. When it is stored outside your country, it may be accessible to authorities there under local law. We use contracts and security measures to protect it wherever it is.

6. How long we keep it

Sign-in records: the address and browser are cleared 30 days after the session ends, and the record is removed after 400 days.
Addresses in activity logs and business sign-up records: cleared after 13 months.
Server request logs: kept for up to 30 days.
One-time codes and password reset links: removed shortly after they expire.
Invoices and tax records: kept as long as tax law requires (in Canada, generally 6 years).
When a Client deletes its company, its content, viewers and settings are deleted after a 7-day waiting period. When a viewer deletes their account, it is removed from the Client's service; the record of which terms they accepted, and anonymous play counts, may be kept.
Backups: daily backups are kept for 14 days and monthly backups for 6 months. Deleted information stays in backups until they expire, and we do not restore deleted information into the live service.

7. Security

We use encryption in transit (HTTPS) everywhere, encrypted video streams, encryption of stored content keys, payment keys and mail passwords, one-way hashing of passwords, two-step sign-in for staff, limits on sign-in attempts, separation between Clients, and logged staff access. No system is perfectly secure; if a breach affects your information, we will notify you and the authorities as the law requires (for viewers, we notify the Client so it can notify them).

8. Your rights

Depending on where you live (for example under Canada's PIPEDA and Quebec's Law 25, the EU and UK GDPR, or US state laws such as California's), you may have the right to: access your information; correct it; delete it; get a copy in a portable format; withdraw consent; object to or limit some uses; and complain to a privacy regulator.

Client staff and contacts: write to us at the address below. Some of this you can do yourself in Studio (account details, two-step sign-in, sign-in history).
Viewers: contact the Client whose service you use; some requests (such as deleting your account) can be done in your account settings there. If you write to us, we will pass your request to the Client.

We will answer within 30 days. We may need to confirm your identity first. We do not treat you differently for using your rights.

9. Children

Loopse is a service for businesses and is not aimed at children. A Client's service may have viewers who are children (for example through kids profiles); in that case the Client is responsible for getting any parental consent the law requires, and Loopse limits ads on content marked as made for kids.

10. Changes to this policy

We may update this policy. The version date is at the top. If the changes are significant, we will tell Client account owners in Studio or by email before they take effect.

11. Contact

Media Leap Inc. Privacy officer: support@loopse.io. Terms of service questions: support@loopse.io.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or the privacy regulator where you live.