LEGAL

Data processing agreement

LAST UPDATED 28 JULY 2026

This agreement is incorporated into the terms of service. You are the controller of the personal data in your workspace; Loupe is the processor.

Subject matter and duration

We process prompt telemetry, git metadata and device inventory for as long as your workspace exists, plus the deletion window in the privacy notice.

Nature and purpose

Scoring prompts, grouping them into tasks, detecting patterns, delivering coaching and proving hook coverage. We do not use your data to train models.

Categories of data subject

Developers whose machines run the Loupe device agent.
Workspace administrators, leads, security and billing users.

Security measures

On-device redaction of credentials before transmission.
Role-based access control enforced server-side on workspace requests.
Device-token revocation and hook-integrity reporting.

Sub-processors

Loupe uses service providers for application hosting, transactional email and payment processing. Request the current provider list at privacy@loupe.dev.

Assistance and audit

Contact privacy@loupe.dev for data-subject requests, impact assessments, breach notifications or audit questions.