Privacy Policy
This Privacy Policy explains how LeLoupe LLC ("LeLoupe," "we," "us" or "our") collects, uses, shares and protects personal information when you visit our website, use the LeLoupe service as a customer, or answer a test as a respondent (together, the "Service").
The short version: we collect what we need to run tests and readings, we do not sell personal information, we do not use it for advertising, and the answers respondents give belong to the customer who sent the test.
1. Who we are and our role
LeLoupe LLC is an Illinois limited liability company based in Chicago, Illinois. You can reach us about privacy at legal@leloupe.com.
We play two different roles:
- For website visitors and customers, LeLoupe decides how your information is used. We are responsible for it under this policy (a "controller" or "business" under privacy laws).
- For respondents, the customer who created the test decides what it asks and how the answers are used. LeLoupe processes respondents' information on that customer's behalf and under its instructions (a "processor" or "service provider"). The customer's own privacy policy governs what it does with your answers. Section 6 explains how this works for respondents.
2. Information we collect
2.1 Information you give us
| Who | What we collect |
|---|---|
| Customers | Name, email address, password (stored only in hashed form), organization name, billing contact details, the tests you build and the concepts, images, video, copy, PDFs and links you upload, your test settings, and messages you send us. |
| Paying customers | Billing name, billing address, plan and purchase history, and the last four digits and expiry date of your card. Full card numbers go directly to our payment processor; we never receive or store them. |
| Respondents | Your answers to a test, including ratings, price responses, word choices, rankings and any open-text answers; the order you saw each item in; and how long you spent on each item and on the test. |
| Anyone who contacts us | Your name, email address and the content of your message. |
2.2 Information collected automatically
When you use the website or the Service, we collect your IP address, browser and device type, operating system, referring page, pages viewed, and the date and time of your visit. For respondents, we use this information to detect duplicate or automated responses and to keep readings reliable.
We do not collect precise geolocation. We may derive an approximate location, such as country or region, from your IP address.
2.3 Information from others
If a colleague or client adds you to their account, or an agency runs a test for your organization, we receive your name and email address from them. Our payment processor tells us whether a payment succeeded.
2.4 Information we ask you not to give us
Please do not include sensitive information in tests, uploads or answers — for example, government ID numbers, financial account numbers, health information, or information about racial or ethnic origin, religion, sexual orientation, immigration status or criminal history. Our Terms of Service prohibit customers from designing tests to collect it.
3. How we use information
We use personal information to:
- Provide the Service — create accounts, build and deliver tests, collect responses, and generate readings and reports.
- Process payments — bill you, send receipts and renewal reminders, and handle refunds.
- Keep readings reliable — detect duplicate, automated, rushed or fraudulent responses, and flag low-quality data to the customer.
- Communicate with you — answer questions, send service and security notices, and tell you about changes to our terms or this policy.
- Send product news — tell customers about new features, if you have not opted out. Every marketing email has an unsubscribe link.
- Improve LeLoupe — understand how the website and Service are used, fix problems, and develop new features. We use de-identified, aggregated data for this wherever we can.
- Protect people and comply with law — secure our systems, prevent abuse, enforce our Terms, and meet legal obligations.
Legal bases (for people in the European Economic Area, United Kingdom and Switzerland). We rely on: performance of a contract, to provide the Service you signed up for; our legitimate interests, to run, secure and improve LeLoupe, prevent fraud, and send customers relevant product news, balanced against your rights; your consent, where we ask for it, which you may withdraw at any time; and legal obligations. For respondents, the customer who sent the test determines the legal basis.
6. If you answered a test
If you answered a LeLoupe test, a LeLoupe customer — a creator, brand, campaign, agency or company — sent you the link. That customer chose the questions, decides what to do with your answers, and is responsible for having the right to contact you.
- Your answers go to that customer. They will see your answers and may use them to make decisions about products, prices, marketing or branding.
- Your name and email are not required. We do not ask respondents for their name or email unless the customer's test asks for them. However, the customer may be able to connect your answers to you if it sent you a personal link or asks identifying questions.
- We do not market to you. LeLoupe does not use respondents' information to contact them, advertise to them or build profiles about them, and does not sell it.
- To access or delete your answers, contact the customer who sent you the test. If you contact us instead, we will forward your request to that customer and help it respond. If you cannot identify the customer, email legal@leloupe.com with the test link and we will help.
7. How long we keep information
| Information | How long we keep it |
|---|---|
| Customer account and Customer Content, including respondent answers | While the account is open. After deletion of an account or of specific content, removed from live systems within 30 days and from backups within 90 days. A customer can delete individual tests and responses at any time. |
| Billing records | Seven years, as required for tax and accounting purposes. |
| Records of acceptance of our Terms | For the life of the account plus seven years, to show what was agreed. |
| Security and server logs | Up to 12 months. |
| Support emails | Up to three years after the conversation ends. |
We may keep information longer if the law requires it or to resolve a dispute, and only for as long as needed.
8. How we protect information
We encrypt information in transit using TLS and at rest using our hosting providers' encryption. We store passwords only in hashed form, limit access to personal information to people who need it to run the Service, and require our service providers to protect it. No system is perfectly secure. If we learn of a security breach that affects your personal information, we will notify you and any authorities as the law requires.
9. Your choices and rights
Wherever you live, you can ask us to:
- confirm whether we hold personal information about you and give you a copy;
- correct information that is inaccurate;
- delete your information;
- give you your information in a portable format; and
- stop sending you marketing emails.
Depending on where you live, you may also have the right to opt out of the sale of personal information, targeted advertising or certain profiling (we do none of these), to limit the use of sensitive personal information (we do not seek to collect it), to withdraw consent, to object to or restrict processing, and to complain to a data protection authority.
How to make a request. Email legal@leloupe.com from the address associated with your account, or tell us which address the request concerns. We will verify your identity before acting, usually by confirming you control that email address. You may use an authorized agent; we will ask the agent for proof of your permission and may ask you to verify your identity directly. We respond within 45 days, or within one month where EU or UK law applies, and will tell you if we need more time.
Respondents should start with the customer who sent the test, as explained in Section 6.
Appeals. If we deny your request, you may appeal by replying to our decision or emailing legal@leloupe.com with the subject line "Privacy appeal." We will respond within 60 days. If you are not satisfied with the outcome, you may contact the attorney general of your state.
No discrimination. We will not deny you service, charge you a different price or provide a lower quality of service because you exercised a privacy right.
Account and marketing settings. Customers can update account information and delete tests, responses or the whole account in account settings. You can unsubscribe from marketing emails using the link in any of them; we will still send service messages, such as receipts and security notices.
10. U.S. state privacy disclosures
In the past 12 months, we have collected the following categories of personal information, as defined by California and other U.S. state privacy laws, from the sources and for the purposes described in Sections 2 and 3:
| Category | Examples | Disclosed for a business purpose to |
|---|---|---|
| Identifiers | Name, email address, IP address, account ID | Service providers; for respondents, the customer who sent the test, only if the test asks for a name or email |
| Customer records | Billing name and address, last four digits of a card | Payment processor and other service providers |
| Commercial information | Plans purchased, purchase history | Service providers |
| Internet or network activity | Pages viewed, referring page, device and browser type, time spent on a test | Service providers; the customer who sent a test |
| General geolocation | Country or region derived from IP address | Service providers |
| Professional information | Organization name, type of business, audience size | Service providers |
| Inferences | Response quality flags on test answers | The customer who sent a test |
We have not sold or shared personal information, or used or disclosed sensitive personal information for purposes that would give you a right to limit it, in the past 12 months. We do not knowingly sell or share the personal information of anyone under 16.
California "Shine the Light." We do not disclose personal information to third parties for their own direct marketing purposes.
Nevada. We do not sell covered information as defined by Nevada law.
11. International transfers
LeLoupe is based in the United States, and we store and process information in the United States. If you are outside the United States, your information will be transferred to, stored and processed in the United States, where privacy laws may differ from those where you live. Where the law requires it, we protect transfers from the European Economic Area, United Kingdom or Switzerland with the European Commission's Standard Contractual Clauses or another approved mechanism.
12. Children
The Service is not intended for children. Customers and respondents must be at least 18, and our Terms prohibit customers from sending tests to anyone under 18 or aiming tests at children. We do not knowingly collect personal information from anyone under 18. If you believe someone under 18 has given us personal information, email legal@leloupe.com and we will delete it.
13. Links to other websites
Tests may include links or embedded content from other websites, such as video hosts or a customer's own site. Those websites have their own privacy practices, and this policy does not cover them.
14. Changes to this policy
We may update this policy as the Service or the law changes. We will post the new version here and update the "Last updated" date. If a change is material, we will tell customers by email or in the Service at least 30 days before it takes effect.
15. Contact us
LeLoupe LLC, Chicago, Illinois. Email: legal@leloupe.com.