Last updated: June 20, 2026
This Privacy Policy describes how Trustloop("we", "us", or "our") collects, uses, and shares information about you when you use our review management platform, including our website, QR code scanning flows, dashboard, and related services (collectively, the "Service"). By using the Service you agree to the collection and use of information in accordance with this policy.
Contents
Trustloop is a SaaS platform that helps businesses collect customer reviews via QR codes and manage their online reputation. Business owners ("Owners") register businesses on our platform; their customers ("Customers") interact with the Service to leave reviews. Both are referred to as "you" where the context applies to both groups.
Our registered address and contact details are set out in the Contact section below.
When you register as a business owner we collect:
When you register as a customer we collect:
When a Customer submits a review through our platform we collect the star rating (1–5), any written comment (up to 500 characters), the QR code that was scanned, and the timestamp. Reviews are linked to the Customer's account and to the Business being reviewed.
If an Owner enables a review-sync integration (e.g. Google, Tripadvisor, Facebook) we may import publicly available review data from those platforms including reviewer name, profile photo URL, review text, rating, and a link back to the source review. This data is subject to the privacy policies of the respective platforms.
If you grant browser or app notification permission, we store a push subscription token linked to your account. This token is used solely to send you notifications about your account activity and review nudges.
We use the information we collect to:
Password reset emails, email verification links, phone OTP messages, and critical account security alerts are necessary for operation of the Service and cannot be disabled.
After leaving a review, Customers may receive up to a configured maximum of follow-up nudges via email, SMS, and/or push notification encouraging them to share the review on an external platform. Owners control whether nudges are enabled and the maximum number per visit. Customers can unsubscribe from nudge emails via the unsubscribe link in each message, or by deleting their account.
Owners receive email and/or push notifications when a new review is submitted. These can be managed in the dashboard Settings page.
Our LoopAI Insights feature analyses review text to generate sentiment scores, theme groupings, strengths, and improvement suggestions. This processing is performed using an AI language model. Review content (rating and comment text) from a business's review history is submitted to the AI model to produce the daily insight report. We do not use review content to train or fine-tune any AI model. AI-generated insights are stored in our database and displayed exclusively to the Owner of the relevant business.
Owner and Customer account data is retained for as long as the account is active. Upon account deletion we remove personally identifiable information within 30 days, subject to legal or billing obligations that require us to retain certain records longer.
Reviews submitted through Trustloop are retained for the lifetime of the associated business account. If an Owner deletes their account, review data linked to their business is deleted. Customer-authored reviews are anonymised (the link to the Customer account is removed) rather than deleted so that business analytics remain consistent.
Session tokens are deleted on sign-out or when they expire. OTP verification records expire after 10 minutes. Password-reset tokens expire after 1 hour. Email verification tokens expire after 24 hours.
Web server access logs are retained for up to 30 days.
Depending on your location you may have rights under applicable privacy law, including:
To exercise any of these rights please contact us at support@gotrustloop.com. We will respond within 30 days.
You may also delete your account at any time from the Settings page of the dashboard, which will trigger removal of your personal data in accordance with the retention schedule above.
We implement reasonable technical and organisational measures to protect your information:
No method of transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at support@gotrustloop.com.
The Service is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have done so, we will delete that information promptly. If you believe a child has provided us with personal information, please contact us at support@gotrustloop.com.
We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date at the top of this page and, where required by law, notify you by email or via an in-app notice. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.
If you have questions about this Privacy Policy or our data practices, please contact us:
Trustloop
Email: support@gotrustloop.com
If you are in the European Economic Area and believe we have not addressed your concern adequately, you have the right to lodge a complaint with your local data protection authority.