Privacy Policy
1. What we collect
Voice Loop collects only the data needed to operate the service:
- Account data — your slug (username), display name, password hash, and optionally an email address you provide for password recovery.
- Call and transcript data — the transcripts you upload or import via Fathom, the voice profile generated from them, and the social posts our extraction engine produces.
- Meta-platform data — when you connect Threads, Instagram, or Facebook, we store the OAuth access token and your Meta user ID for the connected platform, plus post-performance metrics, comments, and aggregate audience demographics returned by Meta APIs after you publish.
- Operational data — rate-limit counters, signed session cookies (7-day TTL), and time-bounded audit logs of administrative actions.
2. Why we collect it
Account data lets you sign in. Transcript data drives the extraction engine that turns calls into authored posts in your voice. Meta-platform data lets Voice Loop publish posts to your accounts and read performance back into the iteration loop that improves your voice profile over time. Operational data keeps the service safe and within rate limits.
3. Who we share it with
We share data only with the third parties that make Voice Loop work:
- Anthropic — our extraction engine sends transcripts to the Anthropic API for processing. Anthropic's API terms commit to not training on customer data sent through the API.
- Meta — we send the posts you approve to Meta's Threads, Instagram, and Facebook Graph APIs to publish them on your behalf, and we receive performance data back. Meta processes this data per their own terms.
- Cloudflare — Voice Loop runs on Cloudflare Workers and D1 for hosting and storage.
We do not sell user data, ever. We do not share data with advertisers, brokers, or analytics resellers.
4. How long we retain it
- Transcripts: 90 days after extraction by default. You can delete sooner from the dashboard.
- Extracted posts: indefinitely until you delete them or your account.
- OAuth tokens: until you disconnect the platform inside Voice Loop, or revoke access from Meta's settings.
- Sessions: 7 days; deleted on logout.
- Audit logs: 30 days, then auto-pruned.
5. User rights
You can sign in and delete your entire Voice Loop account from Settings → Danger Zone in the app. The deletion is immediate and irreversible. You can also disconnect any individual Meta platform from Settings → Connections without deleting the rest of your account. See data deletion for the full list of what gets removed.
6. Meta-platform-specific data handling
Voice Loop integrates with three Meta platforms. For each, we describe exactly what data flows where.
Threads
When you connect Threads, Voice Loop stores your Threads access token and Threads user ID. We use the threads_basic permission to identify the connected account, threads_content_publish to publish posts you approve, and threads_manage_insights to read back performance metrics (impressions, replies, reposts, follows-from-post). Performance data feeds the iteration loop that learns which posts work for your audience. We do not read posts authored outside Voice Loop, and we do not access your Threads followers list.
When you connect Instagram (Business or Creator account), Voice Loop stores your Instagram access token and Instagram user ID. We use instagram_business_basic to identify the account, instagram_business_content_publish to publish approved posts to feed and Stories, and instagram_business_manage_insights to read post performance. Performance data feeds the same iteration loop as Threads. We do not access your DM inbox, your followers list, or content you did not publish through Voice Loop.
If you connect a Facebook Business Page, Voice Loop stores your Page access token and Page ID. We use pages_show_list during connection so you can pick which Page to link, pages_manage_posts to publish approved posts, and pages_read_engagement + pages_read_user_content to read post-level performance and comments. We do not access your personal Facebook profile beyond email + public_profile (used only if you sign in with Facebook).
When you delete your Voice Loop account, all Meta-derived data above is permanently deleted within 24 hours. When you revoke Voice Loop's access from inside Meta's settings, Meta sends a signed deletion callback to Voice Loop and we delete the same data within 24 hours.
7. Children's privacy
Voice Loop is not intended for users under 18. Account creation requires confirming you are at least 18 years old. We do not knowingly collect data from minors; if we learn we have, we delete it.
8. Changes to this policy
If we make material changes to this policy, we will display a banner inside the Voice Loop dashboard and, where we have an email address on file, send a notification. The "Last updated" date at the top of this page always reflects the latest revision.
9. Governing law and operator
Voice Loop is operated by Mountain Cur Brands LLC, a Pennsylvania limited liability company. This policy and any disputes arising from it are governed by the laws of Pennsylvania, USA, with venue in Philadelphia County.
10. Operator + contact
Operator: Mountain Cur Brands LLC (Pennsylvania, USA). For privacy questions, deletion requests outside the in-app flow, or anything else, contact steven@entrepreneurshiphacks.com. Voice Loop does not yet have a dedicated mailbox; the entrepreneurshiphacks address is the canonical support and privacy contact for V1.