Privacy Policy
Last updated: 1 August 2026
This policy explains what personal data Hundredloop collects, why, and what rights you have. Hundredloop is a product operated by Pixebyte Ltd, a company registered in England and Wales (company number 13869005), registered office 28 Maes Sarn Wen, Four Crosses, Llanymynech, Powys, United Kingdom, SY22 6NT. Pixebyte Ltd is the data controller. You can reach us about privacy at privacy@hundredloop.ai.
A note on Priya, our AI
Priya is an artificial intelligence assistant, not a person. When you talk to Priya, on the website or over WhatsApp, you are interacting with an AI system. We tell you this plainly, and you can ask to reach a human at any time. Media that has been generated by AI is marked as such.
What we collect, and why
| When | What | Why (lawful basis) |
|---|---|---|
| You complete the scorecard or join the waitlist | Your name, email, your answers about your business, and how you reached us (referral or campaign trail) | Your consent to join the waitlist and receive follow-up, and our legitimate interest in delivering your scorecard result |
| You create an account and use the service | Account details and the work you and Priya produce together | Performance of our contract with you |
| You talk to Priya, including voice notes over WhatsApp | Your messages, any voice recordings, and their transcripts. These are free-form, so they may contain whatever you choose to share about your business and yourself | Performance of our contract, plus your explicit consent for processing voice recordings, which we ask for before your first voice note |
| You upload documents to seed your positioning | Whatever the document contains, which may include other people's details | Performance of our contract. You confirm you have the right to share what you upload |
| You take part in Support and help spaces | Your display name and what you post | Performance of our contract and our legitimate interest in running a useful community |
| You receive our emails | Your email, and whether messages are opened or links clicked | Your consent, and every marketing email carries a one-click unsubscribe |
| You click a tracked link | The click event. Your IP address is stored only as a one-way salted hash for basic analytics; we do not keep the raw IP | Our legitimate interest in understanding which content works |
Who we share it with
We do not sell your data. We use a small set of trusted service providers to run the product, each under a data-processing agreement:
| Provider | What they do | Where |
|---|---|---|
| Amazon Web Services | Hosting, email delivery, and media storage and delivery | United Kingdom (London) |
| Anthropic | The AI models behind Priya and drafting | United States |
| OpenAI | Voice-note transcription and image generation | United States |
| Meta (WhatsApp) | The WhatsApp messaging channel | Per Meta's WhatsApp Business terms |
| Stripe | Payments. We use Stripe's hosted checkout, so your card details never touch our systems | Stripe's own compliance scope |
We add publishing providers (such as LinkedIn or X) and other tools only when a founder connects them, and we will update this list before we do.
Sending data outside the UK
Our primary data is stored in the UK. Some of our AI providers process data in the United States. Where that happens, we rely on an approved transfer mechanism (such as the UK-US Data Bridge or standard contractual clauses) to protect your data to UK standards.
How long we keep it
We keep personal data only as long as we need it for the purposes above, or for as long as you have an account with us, and then delete or anonymise it. Because we are a small, early-stage team, some of this is handled by hand: if you ask us to export or delete your data, we will do so within one month. Voice recordings are kept only as long as needed to produce and check the transcript, which is the working artifact.
Your rights
Under UK data protection law you have the right to access your data, correct it, delete it, restrict or object to how we use it, ask for a copy in a portable form, and withdraw consent at any time. To exercise any of these, email privacy@hundredloop.ai. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk), though we would rather you told us first so we can put it right.
How we protect it
- Your data is isolated from other customers' at the database level, not just in the app.
- Nothing goes out in your name, no email, post, or page, without your approval.
- We never hold card data. Payments run through Stripe's hosted checkout.
- Data is encrypted in transit. Access to production systems is limited and logged.
Cookies and tracking
We keep this minimal. The site uses a small number of strictly necessary cookies to run the scorecard session. We do not use third-party advertising cookies. Our tracked links record a click and a salted hash of your IP, never the raw address.
Marketing and your preferences
We only send marketing to people who have opted in, and every marketing message has a one-click unsubscribe. You can also manage what we send you, and how, in your Hundredloop settings, or just tell Priya to pause updates.
Children
Hundredloop is a business product and is not intended for anyone under 18.
Changes to this policy
We will update this page when our practices change, and we will note the date at the top. For material changes we will tell you directly.
Contact
Questions about this policy or your data: privacy@hundredloop.ai.