Privacy policy

This Privacy Policy describes how Loddle (“we,” “us,” or “our”) handles personal information when you visit our website at https://www.loddle.com, browse the prompt library, join the waitlist, or contact us. Loddle does not currently have user accounts, sign-in, or a live billing system. Pro, Firm, and Studio are pricing tiers we plan to launch — not live products you can sign up for today. This policy applies to anyone who visits the site, joins the waitlist, or writes to us through the contact form.

This policy does not describe what an AI model provider (such as Anthropic or OpenAI) does with the prompts you run, even when you copied that prompt from Loddle. Those providers operate under their own privacy policies and terms; their handling of your inputs is between you and them. See section § 03 for more.

By using Loddle you confirm you have read this policy. If you do not agree, please stop using the service.

The table below is the complete list. If something does not appear in it, we are not collecting it. This is not marketing language — it is a definition.

We collect the minimum needed to deliver the free library and waitlist today. If we ever want to collect anything else, we will update this policy first.

One of the questions a careful professional asks first is “what does this service see when I run a prompt?” Here is the honest answer.

Concretely, the following data never reaches Loddle's servers unless you explicitly paste it into one of our forms:

• The inputs you give to a model provider after copying a prompt — client names, matter details, transcripts, photographs, source documents.
• The model's response to those inputs, returned directly to you by the model provider.
• Any content of any document you have ever uploaded to a model provider's playground, web interface, or API.

If you are reviewing Loddle for adoption at a firm with confidentiality obligations, this section is the part to send to your information-security officer.

Each kind of data we collect supports a specific operational purpose. We do not repurpose data across categories, and we do not mine support correspondence for product training.

1. To notify you when something opens. Your waitlist email is used only to let you know if/when the Prompt Runner beta or paid subscriptions open. We do not email you for any other reason.
2. To answer support. Support correspondence is read by a member of the Loddle team, never auto-routed to a chat-bot or third party.
3. To meet legal obligations. If we are ever legally compelled to disclose the limited data described in this policy.

We do not sell personal information. We do not share personal information with advertisers. We do not allow our processors to use your data for their own marketing.

We share personal information only with the processors we need to run the service. The complete list is below.

We may also disclose personal information to comply with a valid legal process, to enforce our terms, or to protect the rights, property, or safety of Loddle, our users, or the public.

Waitlist emails are retained until the Prompt Runner beta or subscriptions open and you have been notified, or until you ask us to delete your entry — whichever comes first.

Contact form submissions are retained for 12 months, after which they are deleted.

Loddle gives all users — regardless of where you live — a baseline set of rights. You can exercise any of these by writing to contact@loddle.com; we will respond within 30 days.

• Access — request a copy of all personal information we hold about you (your waitlist entry and/or any contact-form submission).
• Correction — ask us to correct an inaccurate email address on the waitlist.
• Deletion — ask us to delete your waitlist entry or contact-form submission at any time (subject to the retention rules in section § 06).
• Restriction and objection — restrict or object to specific processing where the law gives you that right.
• Portability (GDPR/UK) — receive your data in a machine-readable format.
• California residents (CCPA) — we do not sell your personal data to third parties. No advertising-related data sharing applies to your use of Loddle.

You may also use our contact form for privacy-related queries. We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 days. We may need to verify your identity before fulfilling certain requests.

Loddle follows industry-standard practices to protect personal information. Rather than gesturing at the existence of “security,” here is what is actually in place:

• All data in transit between you and Loddle is encrypted with TLS.
• Database storage is encrypted at rest with AES-256 via Vercel's infrastructure.
• Production access is gated behind strong authentication and multi-factor requirements.
• Backups are taken regularly and tested for restoration.

No system is perfectly secure. If you become aware of a vulnerability in Loddle, please disclose it responsibly to contact@loddle.com. We will acknowledge within one business day and credit responsible disclosure.

Cookies are small text files stored in your browser. Here is the honest state of cookies on Loddle today:

Essential Cookies — None currently required. Loddle does not use accounts or sign-in, so there is no session cookie to maintain. If we add functionality that requires an essential cookie, we will update this section first.

Analytics Cookies — None currently set. Loddle does not run Google Analytics or any other analytics or tracking script today. If we add analytics in the future, we will update this policy before doing so.

No Advertising Cookies — Loddle is a paid-subscription product (once subscriptions open), not an ad-supported one. We do not display advertisements, do not use advertising or remarketing cookies, and do not embed third-party ad networks or advertising scripts of any kind. See section § 10 for the full statement.

Loddle does not display third-party advertisements. We are a paid subscription product and do not participate in third-party advertising networks or display advertising programs. No advertising or remarketing cookies are set by Loddle, and we do not share your browsing data with advertising partners for ad targeting purposes.

If this changes in the future, we will update this policy and notify users in advance.

Loddle is a professional tool designed for adults working in law, architecture, healthcare administration, and construction. Our service is not directed at children under the age of 16, and we do not knowingly collect personal data from children under 16.

If you believe a child under 16 has provided us with personal data, please contact us immediately at contact@loddle.com and we will take steps to delete that information promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will update the “Last Updated” date at the top of this page and, where appropriate, notify registered users by email.

We encourage you to review this policy periodically. Continued use of Loddle after any changes constitutes your acceptance of the revised policy.

Privacy questions, requests, and complaints go to contact@loddle.com, or through our contact form. We aim to acknowledge all privacy requests within 5 business days and resolve them within 30 days.