Agent Loopr is a brand operated by Ananda Services, with its office at Golf Course Road, Sector 54, Gurugram, Haryana 122011, India.
In this policy, "Agent Loopr", "we", "us" and "our" refer to Ananda Services. "You" refers to any person who visits agentloopr.com, submits an enquiry, books a call or consultation, or otherwise interacts with us through this website.
We handle a lot of sensitive material for our clients. We take the same approach to your data. This policy explains what we collect, why we collect it, who else touches it, and what you can ask us to do about it.
01. Scope of this policy
This policy covers personal data we collect through agentloopr.com, including all sub-pages, forms, embedded scheduling tools and analytics running on the site.
It does not cover personal data we process on behalf of a client under a signed engagement. When we build, host or operate a system for a client, that client is the data controller (or data fiduciary) and we act as a processor (or data processor) under the terms of the executed Statement of Work, Master Services Agreement or Data Processing Agreement. Those documents govern that relationship, not this policy.
It also does not cover third-party websites we link to. Once you leave our site, the destination site's own policy applies.
02. Who is responsible for your data
Ananda Services is the data fiduciary under India's Digital Personal Data Protection Act, 2023, and the data controller under the EU General Data Protection Regulation and the UK GDPR, for all personal data described in this policy.
Grievance Officer and Privacy Contact
Shivam Chandhok, Founder
Ananda Services
Golf Course Road, Sector 54, Gurugram, Haryana 122011, India
shivam@agentloopr.com
We respond to privacy requests within 30 days.
03. What we collect
Information you give us directly
When you submit the contact form or book a call or consultation, we collect your full name, work email address, company or project name, your role, a description of what you are looking to build, your approximate budget range, and your intended start timeline. If you email us or reply to a message, we collect whatever you choose to include in that correspondence.
You control this. Every field beyond name and email exists so that we can scope the conversation properly before we speak. Nothing here is required for you to browse the site.
Information collected automatically
When you visit the site, we and our analytics providers collect your IP address (truncated or anonymised where our tools support it), browser type and version, device type and screen size, operating system, referring URL, pages viewed, time spent on each page, scroll depth, clicks, and approximate location derived from IP at city or region level. On our Business Brain page we also read your country from your IP address (our hosting provider works it out when the page is requested), to show you the right version of the page (India or international) and to label our advertising measurement (see section 05).
Information from scheduling
If you book a Discovery Call or a free consultation through our embedded Calendly scheduler, Calendly collects your name, email address, phone number, selected time slot, timezone, and any information you enter into its booking fields (such as your company name, team size and website). Calendly processes this under its own privacy policy and shares the booking details with us. If you arrived through one of our ads or links, the booking also records which campaign brought you (see section 05).
WhatsApp messages
When you book a free consultation on our India page, we send your confirmation, reminders and consultation notes to the phone number you gave us, on WhatsApp. If you book from our international page, we write to you by email only and send no WhatsApp messages. If you message us on WhatsApp, we receive your phone number, your WhatsApp profile name and the messages you send, including the short reference code that tells us which page or ad you came from. You can reply STOP at any time and we will send you no further automated messages.
Instagram comments and messages
If you comment a keyword (such as "BRAIN") on one of our Instagram posts, we send you a direct message with the link you asked for. To do this we receive, through Instagram, your Instagram username and account identifier, the text of your comment and the post it was on, the replies and button taps you send us in that conversation, and whether you follow our Instagram account. We use this only to send you the link and to avoid messaging you twice. Other direct messages you send us are read and answered by a person.
Recordings and notes
Discovery Calls and free consultations are recorded with Calendly's Notetaker so that we can send you written notes afterwards. The recording produces a transcript and summary. We use the transcript to draft your notes, which are reviewed by a member of our team before they are sent to you by email and WhatsApp.
Our own notes on a booking
After a call or consultation we note in our project management tool the outcome, and, if we are not a good fit for what you need, a short reason (for example, "too small" or "no clear use case") with any note we add. This is only for our own follow-up and planning; it is not shared outside the providers listed in section 06.
What we do not collect
We do not collect payment card details, government identification numbers, biometric data, or any special category data through this website. Payments made on this website are handled by Razorpay, which collects your payment details directly under its own privacy policy. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data to us, contact shivam@agentloopr.com and we will delete it.
04. Why we use your data, and our legal basis
| Purpose | What it covers | Legal basis (GDPR / UK GDPR) | Basis (DPDP Act) |
|---|---|---|---|
| Responding to enquiries | Reading your submission, replying, scoping, preparing a proposal | Steps taken at your request prior to entering a contract, Art. 6(1)(b) | Consent given at point of submission |
| Scheduling and holding calls and consultations | Booking, rescheduling, confirmations and reminders by email and WhatsApp (email only if you book from our international page), recording, notes, and our record of the outcome | Steps taken prior to contract, Art. 6(1)(b) | Consent given when you book |
| Replying on Instagram | Sending the link you asked for when you comment a keyword on one of our posts | Steps taken at your request, Art. 6(1)(b) | Consent given when you comment and reply |
| Advertising measurement | Telling Meta which of our ads led to a visit, a message or a booking, so we can measure and improve our ads | Legitimate interests, Art. 6(1)(f), or consent where the law requires it | Consent, where cookies are involved |
| Showing the right version of a page | Reading your country from your IP address to show the India or the international version of the Business Brain page, and remembering your choice if you switch | Legitimate interests, Art. 6(1)(f) | Legitimate use |
| Site analytics and improvement | Understanding which pages work, fixing friction, measuring campaign performance | Legitimate interests, Art. 6(1)(f) | Consent, where cookies are involved |
| Security and abuse prevention | Detecting spam submissions, bot traffic, and attacks on our infrastructure | Legitimate interests, Art. 6(1)(f) | Legitimate use |
| Legal and accounting obligations | Records we are required to keep | Legal obligation, Art. 6(1)(c) | Legal obligation |
Where we rely on legitimate interests, we have assessed that our interest in running and improving a business website does not override your rights. You can object to that processing at any time using the contact details in section 02.
We do not sell your personal data. We share limited browsing and conversion data with Meta to measure our own ads, as described in section 05. We do not use your data to build profiles for third parties.
05. Cookies and tracking
We use a small set of cookies and similar technologies. On your first visit you will see a consent banner after you start scrolling. Non-essential cookies do not load until you accept them, and you can change or withdraw your choice at any time through Cookie settings in the footer of every page, which reopens the choice.
The exception is our Business Brain page, which is where our ads send people, in its two versions (agentloopr.com/business-brain for visitors outside India and agentloopr.com/in/business-brain for visitors in India). On those pages, Google Analytics, Hotjar and the Meta Pixel load when the page opens, without the banner, so that we can measure which ads lead to consultations. If you are visiting from the United Kingdom, the European Union or the European Economic Area, it works differently: you will see a choice with Accept and Decline as soon as the page opens, and none of these tools load unless you accept. We read your country from your IP address to decide this.
Strictly necessary. These keep the site working, remember your cookie preferences, and protect our forms against abuse. They cannot be switched off.
Analytics. We use Google Analytics 4 to understand traffic sources, page performance and conversion paths. We use Google Search Console, which relies on aggregated search data rather than cookies on your browser. IP anonymisation is enabled where the platform provides it.
Product experience. We use Hotjar to record aggregated behaviour such as scroll depth, click patterns and heatmaps. This helps us see where a page loses people. Hotjar's data suppression settings are configured to exclude keystrokes entered into form fields.
Advertising measurement. We use the Meta Pixel and Meta's Conversions API to tell Meta when someone who saw one of our ads visits the site, messages us on WhatsApp, or books a call or consultation. This sets Meta's own cookies (_fbp, _fbc). Each event we send also says which version of the page you were on and your country. On the Business Brain page we also tell Meta which case study you opened and whether you tapped its booking button, and, when the demo video is on the page, whether you played it with sound, to the halfway point, and to the end. When you book, we also send Meta your email address, phone number and country in hashed form, so that the booking can be matched to the ad that brought you. If you are in the United Kingdom, the European Union or the European Economic Area and have not accepted, we do not send Meta anything about your booking. Meta uses this to report on and improve the delivery of our ads.
Campaign attribution. On the Business Brain page we store a first-party cookie (al_bb_attr) for 30 days that records the campaign tags in the link you arrived from (such as utm_source) and Meta's click identifier. We use it to know which ad or link a booking or WhatsApp message came from. If you are in the United Kingdom, the European Union or the European Economic Area, we only set it if you accept.
Page version. On the Business Brain pages we use two small first-party cookies. al_region (90 days) remembers which version of the page you chose, if you use the link in the footer to switch between the India and international versions, so we do not move you again. al_country (one day) holds the two-letter country code that our hosting provider read from your IP address, so that our measurement events can carry it. Neither contains your name, email or phone number.
Third-party embeds. The Calendly scheduler sets its own cookies when it loads. Vercel, our hosting provider, may set cookies necessary for delivery, performance and security.
Most browsers let you block or delete cookies directly. Blocking strictly necessary cookies will break parts of the site.
06. Who we share data with
We share personal data only with service providers who help us run the business, and only to the extent they need it. Each is bound by contract to protect it.
| Provider | Role | Where processed |
|---|---|---|
| Vercel Inc. | Website hosting, delivery and edge security | United States, global edge network |
| Google LLC | Analytics (GA4), Search Console, business email and cloud storage | United States, EU |
| Hotjar Ltd. | Product experience analytics | European Union (Malta, Ireland) |
| Calendly LLC | Discovery Call and consultation scheduling, recording and transcripts (Notetaker) | United States |
| Meta Platforms, Inc. and Meta Platforms Ireland Ltd. | Advertising measurement (Meta Pixel, Conversions API), the WhatsApp Business Platform, and Instagram comments and messages | United States, European Union |
| AiSensy | Sending and receiving our WhatsApp messages | India |
| Razorpay Software Private Limited | Payment processing for purchases made on this website. Razorpay collects your payment details directly | India |
| Hetzner Online GmbH | Server that runs our booking and messaging automations (reminders, call notes, Instagram replies) | Germany |
| ClickUp Inc. | Project management, our record of each booking and its outcome, and shared client boards for active engagements | United States |
| Slack Technologies LLC | Internal and client communication | United States |
| Notion Labs Inc. | Internal documentation and project knowledge | United States |
| Anthropic PBC | AI model infrastructure used in our delivery workflows, and drafting call notes from call transcripts | United States |
We may also disclose personal data where we are legally required to do so, where it is necessary to establish or defend legal claims, or in connection with a merger, acquisition or transfer of the business, in which case we will notify you before your data becomes subject to a different policy.
07. AI systems and your data
We build with AI. That makes it worth being explicit about how we treat data inside those systems.
We use Anthropic's Claude models, Claude Code, and related tooling in our internal delivery workflows. We are a member of the Anthropic Partner Network.
Enquiry data submitted through this website is not used to train, fine-tune or evaluate any AI model, ours or a third party's.
After a Discovery Call or consultation, we send the transcript to Anthropic's commercial API to draft your notes. A member of our team reviews and approves every draft before it is sent to you; nothing is sent automatically. The transcript is processed under Anthropic's commercial terms, which exclude it from model training.
Client data handled under an active engagement is not submitted to consumer AI tools or free-tier chat interfaces. It is processed only through commercial API endpoints or approved enterprise tooling, under terms that exclude the data from model training, and only where the engagement documents permit it.
Where a system we build for a client sends data to a model provider at runtime, that flow is documented in the client's technical documentation and Data Processing Agreement before launch. We do not add model calls to a client system without that being agreed.
08. International transfers
We are based in India and serve clients in the United States, United Kingdom, European Union and Australia. Your data will therefore be transferred outside your country of residence.
Where we transfer personal data from the EEA or the UK to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses, or the UK International Data Transfer Addendum, together with supplementary technical measures including encryption in transit and at rest.
You can request a copy of the relevant transfer mechanism by writing to shivam@agentloopr.com.
09. How long we keep it
Enquiry, Discovery Call and consultation records, including recordings, transcripts, notes, our note of the outcome, our WhatsApp conversation with you and the record of an Instagram keyword reply, are kept for 24 months from your last interaction with us, then deleted or anonymised. Analytics data is retained for 14 months under GA4's retention setting. Hotjar data is retained for 12 months. Records required for tax, accounting or statutory compliance are kept for the period Indian law requires, currently eight years for financial records. Client engagement records are governed by the retention terms in the relevant Statement of Work.
You can ask us to delete your data earlier. See section 10.
10. Your rights
Your rights depend on where you are. We apply the strongest applicable standard rather than the minimum.
If you are in India (DPDP Act, 2023)
You have the right to access a summary of the personal data we hold about you and how we process it, to correct or complete inaccurate data, to erasure, to nominate another person to exercise your rights in the event of death or incapacity, and to a grievance redressal process. Contact the Grievance Officer named in section 02. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.
If you are in the EEA or the UK (GDPR / UK GDPR)
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. You may withdraw consent at any time without affecting processing carried out before withdrawal. You have the right to lodge a complaint with your national supervisory authority, or with the Information Commissioner's Office in the UK.
If you are in California (CCPA / CPRA)
You have the right to know what personal information we collect, use and disclose, the right to delete it, the right to correct inaccurate information, and the right to non-discrimination for exercising these rights. We do not sell personal information. We share limited browsing and conversion data with Meta to measure our own ads (see section 05), which may count as "sharing" under the CPRA. You can opt out at any time by emailing shivam@agentloopr.com.
How to exercise them
Email shivam@agentloopr.com with the request and enough detail for us to identify your records. We may ask you to verify your identity before we act, which protects you as much as us. We do not charge for this unless a request is manifestly unfounded or excessive.
11. Security
We hold data on infrastructure that enforces encryption in transit using TLS 1.2 or higher, and encryption at rest. Access to enquiry data is limited to team members who need it to respond to you. Administrative access uses multi-factor authentication. Credentials are stored in a managed secrets vault, not in code, documents or messages.
No system is perfectly secure. If a breach occurs that is likely to result in risk to your rights, we will notify you and the relevant supervisory authority within the timeframes the applicable law requires.
12. Changes to this policy
We update this policy when our tools, processing activities or legal obligations change. The effective date at the top shows the current version. If a change materially affects how we handle your personal data, we will post a notice on the site before the change takes effect. Continued use of the site after that date means you accept the updated policy.
13. Contact
Ananda Services (operating as Agent Loopr)
Golf Course Road, Sector 54, Gurugram, Haryana 122011, India
shivam@agentloopr.com
For anything relating to privacy, data access, correction, deletion, or a complaint, write to the address above and mark it for the attention of the Grievance Officer.
See also: Terms of Service