Last updated: 28 August 2026
Privacy policy
How JustLoop collects, uses and protects personal data, and the rights you have under the GDPR.
Who we are
JustLoop is a collaboration platform for brands, manufacturers and agents in apparel development. The controller for the data described here is the JustLoop operator; for product data you upload on behalf of your company, your company is the controller and JustLoop acts as processor.
What we process
- Account data — name, work email, company, role, language preference, avatar initials.
- Product and workflow data — styles, collections, measurements, components, samples, shipments, quotations, files and thread messages you create.
- Technical data — session tokens and security logs needed to keep the account safe.
- Content you submit to AI features — text or images you explicitly send for translation, transcription or measurement import.
Why, and on what legal basis
- Contract — providing the platform to you and your company.
- Legitimate interest — security, abuse prevention, and keeping the service reliable.
- Consent — non-essential device storage and any future analytics; withdrawable at any time.
- Legal obligation — invoicing and accounting records.
Who we share it with
Only processors that make the service work: Supabase (authentication, database, file storage), the Lovable AI Gateway (only for content you explicitly submit to an AI feature), and a transactional email provider for invitations and notifications. We do not sell personal data and we do not share it with advertisers.
International transfers
Some processors operate outside the European Economic Area. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses together with supplementary technical measures such as encryption in transit and at rest.
How long we keep it
Account and product data are retained while your company's account is active and for a limited period afterwards to allow recovery, then deleted or anonymised. Invoicing records are kept for the statutory retention period. Device storage retention is listed in the cookie policy.
Your rights
You may request access, rectification, erasure, restriction of processing, portability, and object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting prior processing. Contact privacy@justloop.app. You also have the right to lodge a complaint with your national data protection authority.
Security
Access is authenticated and authorised per company and per style through row-level security in the database. Data is encrypted in transit and at rest. Support access on behalf of an account is explicitly marked and logged.
Cookies and device storage
The full inventory of what we store on your device is in the cookie policy.