Privacy隐私政策

Loopat · 2026-11-08

Privacy policy

This policy describes the official Loopat service at https://loopat.socket.ltd and its sign-in service at https://auth.socket.ltd. A self-hosted Loopat instance is operated separately; consult that operator’s policy.

What we process

Sign-in providers supply account identifiers, display names and, when available, email addresses. The identity service stores these details, sessions and provider credentials needed for sign-in and account management. The product service uses an identity subject and account profile to authorize access.
Computer names, public keys, pairing grants, system/version information and connection status support device authorization and connectivity. We also process network information needed to serve requests.
Conversation content and attachments pass through authenticated encrypted channels between your client and paired computer. The service stores encrypted content and readable operational metadata, including ownership, object size and revision. Published pages and their resources are readable by the service; their access follows the page’s authorization settings.
On your computer, Codex sends prompts, conversation context, selected attachments, relevant code/files and tool results to the model provider configured there. Loopat requests your permission before these model operations. Authorized tools, plugins and web actions may send information to other services. Their use and retention follow their own terms and your account settings; Loopat does not promise that every provider has the same retention or training policy.
Optional diagnostics contain allowlisted timings, connection/operation states, counts and sizes. They are uploaded when you choose to submit them. Support requests contain the contact information and material you choose to send. Avoid sending passwords, API keys, login codes or unrelated private files.

Permissions and choices

Camera access is used for photos and pairing/service QR codes. Photo/file pickers use the items you select. Local network access supports direct computer connections and diagnosis. Loopat does not request microphone or location access in this release. Declining AI sharing keeps account settings and deletion available. You can withdraw permission in Settings → AI data sharing; this does not recall sent data or stop tasks already running or queued on your computer.

Retention and deletion

Account information is retained while the account is in use. Use Settings → Delete account to remove product account data and this client’s copies, then follow the identity-service link to delete the login identity. Identity deletion revokes Apple authorization when a token is available. If no token is available, the identity is still deleted and we direct you to revoke Apple access manually; other external accounts are not themselves deleted. Computer projects/Codex history, other devices’ offline copies, your exports and data held by third parties require separate management.

Uploaded diagnostics are limited to 20 reports per account; reports older than 7 days are removed when that report store is accessed. Completed deletion receipts lose their user association, expire after 30 days and are removed on status access. These are not promises of a global physical purge at an exact time. We do not make historical database backups. Retired databases and identified historical copies are deleted during service cutovers. The product keeps an independent deletion journal containing scoped hashes of random account IDs and deletion times, to reapply deletion when old product state is restored. The identity service separately keeps scoped hashes of identity IDs, deletion times and Apple revocation outcomes, without plaintext IDs or tokens. Neither journal currently has automatic expiry; both must remain current and separate from historical restores. Contact us about data retention and deletion requests.

Contact and changes

For access, correction, deletion or privacy questions, contact support@loopat.ai. We do not use the current product code for advertising or cross-company tracking. Provider and infrastructure practices must also be considered. Changes to this policy will be reflected on this page with an updated date.

隐私政策

本政策适用于 Loopat 官方服务 https://loopat.socket.ltd 及登录身份服务 https://auth.socket.ltd。自托管实例由其管理员独立运营，请查看对应服务的政策。

处理的数据与用途

登录提供方提供账号标识、显示名称及可用时的邮箱。身份服务保存这些资料、会话及登录和账号管理所需的提供方凭据；产品服务使用身份标识和账号资料控制访问。
电脑名称、公钥、配对授权、系统/版本和连接状态用于设备授权与连接。服务也处理响应请求必需的网络信息。
会话和附件通过客户端与已配对电脑之间经认证的加密通道传输。服务保存加密内容及可读的所有权、对象大小、版本等运行元数据。用户发布的页面及资源由服务端以可读形式保存，访问遵循页面授权设置。
电脑上的 Codex 会将提示词、对话上下文、选中附件、任务相关代码/文件及工具结果发送给电脑配置的模型提供方。Loopat 在这些模型操作前请求许可。经授权的工具、插件和网页操作可能访问其他服务；各提供方按其条款及你的账号设置处理与保留数据，我们不保证所有第三方具有相同的留存或训练政策。
可选诊断仅含白名单中的耗时、连接/操作状态、计数和大小，在你主动提交时上传。支持请求包含你主动提供的联系方式和材料。请勿发送密码、API 密钥、登录验证码或无关私人文件。

权限与选择

相机用于拍照及扫描配对/服务二维码；照片和文件选择器只使用你选中的项目；本地网络权限用于电脑直连与诊断。本版不请求麦克风或定位权限。拒绝 AI 分享不影响设置与删号；可在「设置 → AI 数据分享」撤回，但不会召回已发数据，也不会停止电脑上已运行或排队的任务。

保留与删除

账号使用期间保留账号资料。通过「设置 → 删除账号」移除产品账号数据及当前客户端副本，再按链接删除身份服务登录账号。身份删除在持有令牌时撤销 Apple 授权；缺少令牌时仍删除身份，并指引您手动取消 Apple 授权。不会删除其他外部账号。电脑项目/Codex 历史、其他设备的离线副本、用户导出及第三方持有的数据需另行管理。

上传诊断每账号最多 20 份，超过 7 天的报告在访问报告存储时清除。完成的删除回执解除用户关联，30 天到期并在状态访问时清除；这不代表全局在某时刻立即物理擦除。我们不制作历史数据库备份；服务切换时删除退出使用的数据库及已识别的历史副本。产品另行保存独立删除日志，记录随机账号 ID 的作用域哈希与删除时间，用于恢复旧产品状态后重施删除；身份服务另行保存身份 ID 的作用域哈希、删除时间和 Apple 撤权结果，不保存原始 ID 或令牌。两份日志均没有自动到期机制，必须保持最新、不能随旧快照回退。有关数据留存及删除申请，请联系我们。

联系与更新

访问、更正、删除及隐私问题请联系 support@loopat.ai。当前产品代码没有广告或跨公司追踪用途，仍须考虑提供方及基础设施的数据处理。本政策变更会在此页更新日期。