Privacy Notice

Last updated: 28 May 2026

1. Who we are

Loapi is operated by Kosher Solutions Pty Ltd, a company registered in Botswana under company number BW00000166162 (VAT BW00000166162-00-05-56), trading as "Loapi". For personal data processed in connection with the Loapi platform we act as the data controller.

Contact: hello@loapi.ai.

2. Personal data we collect

Account data: name, email address, organisation, hashed password, role.
Profile and workspace content: information you enter into Loapi (strategies, risks, projects, KPIs, comments, uploaded files).
Support data: messages and attachments you send us.
Usage and telemetry: pages visited, features used, error logs, approximate location derived from IP, device and browser identifiers.
Billing identifiers: a customer reference returned by Paddle so we can match a subscription to your account. Card and payment details are collected directly by Paddle and are never seen or stored by us.

3. Why we use it and our legal bases

To create and operate your account and provide the Service — performance of our contract with you.
To prevent fraud, abuse and secure the Service — our legitimate interests in keeping the platform safe.
To improve the product and AI features — our legitimate interests; we do not use customer content to train third-party foundation models.
To provide customer support — performance of our contract.
To send service announcements and, with your consent, marketing emails — consent (which you can withdraw at any time).
To meet legal and tax obligations — legal obligation.

4. Who we share data with

We share personal data only with the following categories of recipients:

Service providers / sub-processors — cloud hosting, database, email delivery, analytics, error monitoring and customer support tools, acting on our instructions.
Paddle.com Market Limited, our Merchant of Record, for the sale of subscriptions, subscription management, payments, invoicing and tax compliance.
AI model providers for the purpose of generating AI responses to your prompts, under contracts that prohibit using your data to train their general models.
Professional advisers (legal, accounting, auditors) where necessary.
Authorities where required by law, court order, or to protect our rights.

5. International transfers

Some of our providers are located outside Botswana, including in the United Kingdom, the European Economic Area and the United States. Where personal data is transferred to such countries we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses.

6. Retention

We keep personal data for as long as your account is active, plus a reasonable period thereafter to meet our legal, accounting and dispute-resolution obligations. Workspace content is deleted within 30 days of account closure unless we are required to retain it. Backups are rotated and overwritten on a rolling basis.

7. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit and at rest, access controls, audit logging and regular reviews. No system is perfectly secure, but we take our responsibilities seriously and notify users of material incidents as required by law.

8. Your rights

Depending on the laws that apply to you, you may have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent at any time. You may also have the right to lodge a complaint with a data protection authority. To exercise these rights, email hello@loapi.ai. We respond within one month.

9. Cookies

We use a small number of cookies and similar technologies that are strictly necessary for the Service to function (authentication, security) and, where permitted, for analytics to help us improve the product. You can manage cookies through your browser settings.

10. Changes

We may update this notice from time to time. Material changes will be communicated through the Service or by email.