Who we are
BamLoops ("we", "us") provides an AI-powered conversion rate optimization platform for e-commerce brands. This policy covers two contexts: visitors to this website, and data processed on behalf of our clients when the platform runs on their stores.
Data we collect on this website
- Contact and lead data — name, email, company, website URL and message content you submit through our forms, plus the marketing source (UTM parameters) of your first visit, so we know how you found us.
- Usage data — standard analytics such as pages viewed, device type and referrer, collected via first-party, consent-aware tooling.
We use this data to respond to your inquiry, schedule demos, and — if you opt in — send relevant email. Lead data is stored in our email platform (Klaviyo) and our internal CRM. You can unsubscribe at any time via the link in any email, or by writing to us.
Data we process for clients
When the platform is installed on a client's store, we process funnel and behavioral data as a processor on the client's behalf, under a data processing agreement:
- First-party only. We work with the client's own analytics and on-site behavioral signals. We do not buy, sell or share third-party audience data.
- Consent-aware. Our script respects the store's consent management — visitors who decline tracking are not profiled or personalized.
- No PII sold or shared. Ever.
- Workspace isolation. One client's data never trains, informs or leaks into another client's agents or models.
Retention
Lead data is kept while we have an active relationship or a legitimate interest in maintaining contact, and deleted on request. Client store data is retained for the duration of the engagement plus the period required by the data processing agreement, then deleted.
Your rights
Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. To exercise any of these rights, email hello@growthloops.com — we respond within 30 days.
Security
Data is encrypted in transit, access is limited to personnel who need it, and API credentials clients grant us are scoped read-only wherever the platform allows it.
Changes
We'll post any changes to this policy on this page and update the date above. Material changes affecting client data are communicated directly.
Contact
Questions about this policy: hello@growthloops.com or via the contact page.