Agent Loopr is a brand operated by Droprave Online Services LLP, a limited liability partnership registered in India (LLPIN: ABC-4520), with its registered office at Golf Course Road, Sector 54, Gurugram, Haryana 122011, India.
In this policy, "Agent Loopr", "we", "us" and "our" refer to Droprave Online Services LLP. "You" refers to any person who visits agentloopr.com, submits an enquiry, books a call, or otherwise interacts with us through this website.
We handle a lot of sensitive material for our clients. We take the same approach to your data. This policy explains what we collect, why we collect it, who else touches it, and what you can ask us to do about it.
01. Scope of this policy
This policy covers personal data we collect through agentloopr.com, including all sub-pages, forms, embedded scheduling tools and analytics running on the site.
It does not cover personal data we process on behalf of a client under a signed engagement. When we build, host or operate a system for a client, that client is the data controller (or data fiduciary) and we act as a processor (or data processor) under the terms of the executed Statement of Work, Master Services Agreement or Data Processing Agreement. Those documents govern that relationship, not this policy.
It also does not cover third-party websites we link to. Once you leave our site, the destination site's own policy applies.
02. Who is responsible for your data
Droprave Online Services LLP is the data fiduciary under India's Digital Personal Data Protection Act, 2023, and the data controller under the EU General Data Protection Regulation and the UK GDPR, for all personal data described in this policy.
Grievance Officer and Privacy Contact
Shivam Chandhok, Founder
Droprave Online Services LLP
Golf Course Road, Sector 54, Gurugram, Haryana 122011, India
shivam@agentloopr.com
We respond to privacy requests within 30 days.
03. What we collect
Information you give us directly
When you submit the contact form or book a call, we collect your full name, work email address, company or project name, your role, a description of what you are looking to build, your approximate budget range, and your intended start timeline. If you email us or reply to a message, we collect whatever you choose to include in that correspondence.
You control this. Every field beyond name and email exists so that we can scope the conversation properly before we speak. Nothing here is required for you to browse the site.
Information collected automatically
When you visit the site, we and our analytics providers collect your IP address (truncated or anonymised where our tools support it), browser type and version, device type and screen size, operating system, referring URL, pages viewed, time spent on each page, scroll depth, clicks, and approximate location derived from IP at city or region level.
Information from scheduling
If you book a Discovery Call through our embedded Calendly scheduler, Calendly collects your name, email address, selected time slot, timezone, and any information you enter into its booking fields. Calendly processes this under its own privacy policy and shares the booking details with us.
What we do not collect
We do not collect payment card details, government identification numbers, biometric data, or any special category data through this website. We do not knowingly collect personal data from anyone under the age of 18. If you believe a minor has submitted data to us, contact shivam@agentloopr.com and we will delete it.
04. Why we use your data, and our legal basis
| Purpose | What it covers | Legal basis (GDPR / UK GDPR) | Basis (DPDP Act) |
|---|---|---|---|
| Responding to enquiries | Reading your submission, replying, scoping, preparing a proposal | Steps taken at your request prior to entering a contract, Art. 6(1)(b) | Consent given at point of submission |
| Scheduling and holding calls | Booking, rescheduling, reminders, call notes | Steps taken prior to contract, Art. 6(1)(b) | Consent |
| Site analytics and improvement | Understanding which pages work, fixing friction, measuring campaign performance | Legitimate interests, Art. 6(1)(f) | Consent, where cookies are involved |
| Security and abuse prevention | Detecting spam submissions, bot traffic, and attacks on our infrastructure | Legitimate interests, Art. 6(1)(f) | Legitimate use |
| Legal and accounting obligations | Records we are required to keep | Legal obligation, Art. 6(1)(c) | Legal obligation |
Where we rely on legitimate interests, we have assessed that our interest in running and improving a business website does not override your rights. You can object to that processing at any time using the contact details in section 02.
We do not sell your personal data. We do not share it with advertisers. We do not use it to build profiles for third parties.
05. Cookies and tracking
We use a small set of cookies and similar technologies. On your first visit you will see a consent banner. Non-essential cookies do not load until you accept them, and you can change or withdraw your choice at any time through the banner controls.
Strictly necessary. These keep the site working, remember your cookie preferences, and protect our forms against abuse. They cannot be switched off.
Analytics. We use Google Analytics 4 to understand traffic sources, page performance and conversion paths. We use Google Search Console, which relies on aggregated search data rather than cookies on your browser. IP anonymisation is enabled where the platform provides it.
Product experience. We use Hotjar to record aggregated behaviour such as scroll depth, click patterns and heatmaps. This helps us see where a page loses people. Hotjar's data suppression settings are configured to exclude keystrokes entered into form fields.
Third-party embeds. The Calendly scheduler sets its own cookies when it loads. Vercel, our hosting provider, may set cookies necessary for delivery, performance and security.
Most browsers let you block or delete cookies directly. Blocking strictly necessary cookies will break parts of the site.
06. Who we share data with
We share personal data only with service providers who help us run the business, and only to the extent they need it. Each is bound by contract to protect it.
| Provider | Role | Where processed |
|---|---|---|
| Vercel Inc. | Website hosting, delivery and edge security | United States, global edge network |
| Google LLC | Analytics (GA4), Search Console, business email and cloud storage | United States, EU |
| Hotjar Ltd. | Product experience analytics | European Union (Malta, Ireland) |
| Calendly LLC | Discovery Call scheduling | United States |
| ClickUp Inc. | Project management and shared client boards for active engagements | United States |
| Slack Technologies LLC | Internal and client communication | United States |
| Notion Labs Inc. | Internal documentation and project knowledge | United States |
| Anthropic PBC | AI model infrastructure used in our delivery workflows | United States |
We may also disclose personal data where we are legally required to do so, where it is necessary to establish or defend legal claims, or in connection with a merger, acquisition or transfer of the business, in which case we will notify you before your data becomes subject to a different policy.
07. AI systems and your data
We build with AI. That makes it worth being explicit about how we treat data inside those systems.
We use Anthropic's Claude models, Claude Code, and related tooling in our internal delivery workflows. We are a member of the Anthropic Partner Network.
Enquiry data submitted through this website is not used to train, fine-tune or evaluate any AI model, ours or a third party's.
Client data handled under an active engagement is not submitted to consumer AI tools or free-tier chat interfaces. It is processed only through commercial API endpoints or approved enterprise tooling, under terms that exclude the data from model training, and only where the engagement documents permit it.
Where a system we build for a client sends data to a model provider at runtime, that flow is documented in the client's technical documentation and Data Processing Agreement before launch. We do not add model calls to a client system without that being agreed.
08. International transfers
We are based in India and serve clients in the United States, United Kingdom, European Union and Australia. Your data will therefore be transferred outside your country of residence.
Where we transfer personal data from the EEA or the UK to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses, or the UK International Data Transfer Addendum, together with supplementary technical measures including encryption in transit and at rest.
You can request a copy of the relevant transfer mechanism by writing to shivam@agentloopr.com.
09. How long we keep it
Enquiry and Discovery Call records are kept for 24 months from your last interaction with us, then deleted or anonymised. Analytics data is retained for 14 months under GA4's retention setting. Hotjar data is retained for 12 months. Records required for tax, accounting or statutory compliance are kept for the period Indian law requires, currently eight years for financial records. Client engagement records are governed by the retention terms in the relevant Statement of Work.
You can ask us to delete your data earlier. See section 10.
10. Your rights
Your rights depend on where you are. We apply the strongest applicable standard rather than the minimum.
If you are in India (DPDP Act, 2023)
You have the right to access a summary of the personal data we hold about you and how we process it, to correct or complete inaccurate data, to erasure, to nominate another person to exercise your rights in the event of death or incapacity, and to a grievance redressal process. Contact the Grievance Officer named in section 02. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.
If you are in the EEA or the UK (GDPR / UK GDPR)
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. You may withdraw consent at any time without affecting processing carried out before withdrawal. You have the right to lodge a complaint with your national supervisory authority, or with the Information Commissioner's Office in the UK.
If you are in California (CCPA / CPRA)
You have the right to know what personal information we collect, use and disclose, the right to delete it, the right to correct inaccurate information, and the right to non-discrimination for exercising these rights. We do not sell or share personal information as those terms are defined under the CPRA, and we have not done so in the preceding 12 months.
How to exercise them
Email shivam@agentloopr.com with the request and enough detail for us to identify your records. We may ask you to verify your identity before we act, which protects you as much as us. We do not charge for this unless a request is manifestly unfounded or excessive.
11. Security
We hold data on infrastructure that enforces encryption in transit using TLS 1.2 or higher, and encryption at rest. Access to enquiry data is limited to team members who need it to respond to you. Administrative access uses multi-factor authentication. Credentials are stored in a managed secrets vault, not in code, documents or messages.
No system is perfectly secure. If a breach occurs that is likely to result in risk to your rights, we will notify you and the relevant supervisory authority within the timeframes the applicable law requires.
12. Changes to this policy
We update this policy when our tools, processing activities or legal obligations change. The effective date at the top shows the current version. If a change materially affects how we handle your personal data, we will post a notice on the site before the change takes effect. Continued use of the site after that date means you accept the updated policy.
13. Contact
Droprave Online Services LLP (operating as Agent Loopr)
Golf Course Road, Sector 54, Gurugram, Haryana 122011, India
shivam@agentloopr.com
For anything relating to privacy, data access, correction, deletion, or a complaint, write to the address above and mark it for the attention of the Grievance Officer.
See also: Terms of Service