LoodTech Privacy Policy

Status: Draft for review and approval before publication
Draft prepared: November 3, 2026

Operator note: This draft is based on LoodTech's described services and AI CRM development reports. Verify actual deployed practices and complete all bracketed items before approving or publishing it, including privacy contact details, retention periods, service providers, and processing locations.

1. Introduction

LoodTech is a technology company based in Riyadh, Saudi Arabia, providing AI solutions, software development, applications, and business platforms. We respect privacy and seek to handle personal data responsibly and transparently in accordance with applicable laws, including the Saudi Personal Data Protection Law (PDPL).

This policy describes the information we may collect and process when you use loodtech.com and our services, including the LoodTech AI CRM platform and related integrations.

2. Scope and Processing Roles

This policy covers our website, contact forms, platform accounts, CRM and conversation services, WhatsApp Business integrations, and AI features when enabled.

When a business customer uses LoodTech AI CRM to manage its customers' data, that business generally determines the purposes and essential means of processing, while LoodTech processes the data on its behalf under applicable instructions and agreements. LoodTech may separately act as a controller for its own website, account, operational, security, and business-contact data. Actual legal roles depend on the processing activity and applicable agreements.

3. Information We May Process

Depending on the service used, data may include:

• Account and contact information: Name, company name, email address, phone number, account information, roles and permissions, and inquiries.
• CRM information: Contacts, messages and conversations, orders, bookings, products, company settings, and relevant activity records.
• WhatsApp and Meta integration information: WhatsApp Business Account (WABA) IDs, phone-number IDs, display names, necessary authorization information and permissions, messages, metadata, and available delivery-status information.
• Technical information: Session, device and browser information, IP address, error logs, and security events to the extent actually collected by deployed systems.

We do not require business customers to provide their personal Meta account passwords to LoodTech. Authorization takes place through Meta's official mechanisms.

4. Purposes of Processing

Depending on the service and applicable legal basis, we process information to create accounts and manage access, provide CRM and messaging services, connect authorized WhatsApp Business accounts, operate selected AI features, manage orders and bookings, provide support, maintain security and reliability, and meet applicable legal and contractual obligations.

We do not independently use business customers' customer data for unrelated marketing without an appropriate legal basis and any required consent.

5. WhatsApp Business and Meta Integration

Businesses may connect their own WhatsApp Business accounts through Meta's official authorization process. Our backend verifies granted permissions and the association of the phone number with the authorized account before trusting a connection, protects necessary integration credentials, and associates conversations with the appropriate business customer.

Business customers remain responsible for ensuring that their communications with recipients are lawful, obtaining necessary consent, and complying with applicable WhatsApp messaging policies. Meta and WhatsApp services are also subject to their own terms and policies.

6. Artificial Intelligence Services

When AI features are enabled, relevant messages or portions of content may be processed by the configured AI provider to generate replies, classify inquiries, or support workflows. We aim to limit the information shared to what is reasonably necessary for the function and apply appropriate safeguards.

AI outputs may be inaccurate and should not be relied upon alone for high-impact decisions without appropriate review.

Review before publication: [Confirm AI providers actually used in production, processing purposes, and provider retention/training settings applicable to inputs and outputs.]

7. Sharing of Information

We may share information to the extent necessary with service providers such as Meta and WhatsApp, hosting providers, enabled AI service providers, technical support and security providers, or competent authorities where legally required. Such processing is subject to applicable legal and contractual safeguards.

We do not sell personal data to advertisers or data brokers.

8. Data Security

We use technical and organizational measures appropriate to the data and risks involved, which may include access controls, protection of integration credentials, authentication, tenant separation, and necessary security logging. No internet-based service can guarantee absolute security.

Review before publication: [Confirm actual production tenant-isolation, encryption, backup, and monitoring controls, rather than relying only on local test results.]

9. Data Retention and Deletion

We retain data for as long as reasonably necessary for the legitimate purposes for which it was collected, or as required by applicable legal and contractual obligations. Periods vary by data category and service. When information is no longer needed or a valid deletion request is accepted, we take appropriate steps to delete or de-identify it, subject to applicable retention duties. Some information may remain temporarily in backups according to the approved backup lifecycle.

Review before publication: [Specify actual retention periods for WhatsApp messages, CRM data, security logs, and backups, together with operational deletion procedures.]

10. International Data Transfers

Some messaging, hosting, or AI services may involve processing outside Saudi Arabia. Where international transfers of personal data occur, the relevant requirements and safeguards under applicable Saudi personal data protection laws and cross-border transfer rules apply.

Review before publication: [Confirm hosting and processing regions, recipients, and relevant transfer safeguards.]

11. Individual Privacy Rights

Subject to applicable law, individuals may have rights to be informed of processing purposes, access personal data, request a copy subject to legal conditions, request correction, seek deletion where legally permitted, and withdraw consent where consent is the lawful basis and applicable conditions are met.

Where the data is controlled by a business customer using the platform, a request may need to be directed to that business or handled in coordination with it.

12. Privacy and Data Deletion Requests

For questions or requests concerning access, correction, or deletion, contact:

Privacy contact: [INSERT AN ACTIVE, VERIFIED PRIVACY EMAIL ADDRESS]

Please describe the nature of the request and relevant account or service, without sending passwords or unnecessary sensitive information. We may take reasonable steps to verify identity or authority before acting. Requests are handled in accordance with applicable legal requirements and timelines.

13. Cookies and Similar Technologies

Our website or platform may use cookies and similar technologies for sessions, authentication, security, and core functionality. Analytics and marketing technologies may be used where enabled, with consent options provided when required by applicable law.

Review before publication: [Inventory actual website and platform cookies, analytics and advertising tools, and consent management.]

14. External Services

Our services may integrate with third parties, including Meta, WhatsApp, infrastructure providers, and AI services. Those parties may process information under their own applicable policies and terms.

15. Changes to This Policy

We may update this policy to reflect changes in services, data practices, or applicable laws. Updated versions will be posted with a revised effective date, and additional notices will be provided where legally required for material changes.

16. Contact

LoodTech
Riyadh, Saudi Arabia
Website: https://loodtech.com
Privacy email: [INSERT VERIFIED PRIVACY EMAIL ADDRESS]

This is an unapproved draft. Do not publish until all placeholders are completed and legal and operational review is finished.