Privacy policy
Last updated: 14 October 2026. Loom Agent is provided by Alan Wizemann LLC ("we"). Contact: support@loomagent.co.
The short version
Loom runs your agents on your own Mac. Your web sign-ins, passwords, cookies and browsing, and your agents' files, memory and records, stay on your own devices. We see only what a model call needs, only while it runs, and the app records everything that leaves your Mac so you can see it.
What stays on your devices
- Your passwords, cookies, website sign-ins and browsing. Agents browse in a real browser on your Mac, on your own connection. Website sign-ins are kept in your Mac's Keychain.
- Your agents' files, memory, notes and records of what they did.
- Google account access you grant (Gmail and Calendar). The long-lived Google sign-in is kept in your Mac's Keychain. Our sign-in service holds it, encrypted, only until your Mac collects it once, then deletes it; afterwards it only turns it into a one-hour access key when your Mac asks, and keeps nothing of your mail or calendar.
- Items in your Vault (such as card numbers) stay on your Mac.
What we receive, and why
- Your account: your email address (to sign you in with a link), your plan, your balance, and the Macs signed in to your account (at most three, with the names you give them). To give the free $5 start once per Mac, we keep a scrambled, one-way code for each Mac that has used it.
- Model calls: when an agent needs a model, the text (and any picture) that call needs is sent through our service to the model, which Cloudflare runs for us; there is no other AI provider. The text your agents send and the reply pass through our service only while the request runs. We don't store them or write them to any log. Cloudflare does not use your content to train models (Cloudflare's data-usage terms). Pictures Loom makes are returned to your Mac, not kept by us.
- Usage records: for each call we keep the amounts (tokens and price), the time, the model class, and random ids for which agent and run made it, so we can charge your balance and show you your spending. They never include what was said.
- Messages between your devices: when you use Loom on your iPhone, messages pass through our relay sealed end to end between your own devices. We cannot read them.
- Problem reports: only when you choose to send one. You see exactly what will be sent before you send it.
- Usage data: off unless you switch it on. When on, Loom sends fixed-word events such as "an agent was made", "a screen was shown" or "a message was sent" (with a rough length bucket), plus the app and macOS version, device model, language, region and screen size, a random install id, and while signed in an anonymous account id (never your email). It never sends what you or your agents typed or read, agent names or instructions, files, web addresses, email addresses or error text. It goes to our analytics service, SwiftStats, and is erased when you delete your account.
- Payments: when you buy a plan or top-up, payment is handled by our payment provider (Stripe). We never see your full card number; we keep the payment reference and what you bought.
Google user data
If you connect a Google account, Loom uses the access you grant only to do what you ask your agents to do on your Mac. Google data is processed on your Mac and is not sent to us, except where an agent includes some of it in a model call to do your task. We do not sell Google user data, use it for advertising, or use it to train models. Loom's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect at any time in the app or in your Google account settings. Loom asks for these Google permissions: read, label, archive and draft Gmail messages (gmail.modify); read your list of calendars and read and change calendar events (calendar.calendarlist.readonly, calendar.events); and your email address (userinfo.email), to show which account is connected.
What we never do
- We never sell your information.
- We never run a remote browser that acts as you.
- We never store your files, memory or records in our cloud in a form we can read.
Keeping and deleting
You can delete everything an agent knows, or delete your account, from inside the app. Deleting your account, from a Mac signed in to it, at once: signs out every Mac and clears their names, replaces your email address with a placeholder, deletes your problem reports and our record of your Google sign-ins (the app also signs you out at Google), and erases your usage data from our analytics service. Two things are kept: the record of what your agents' model calls cost (amounts and random ids only, with agent and conversation labels removed, under a random id that no longer links to you), so our accounts add up; and a scrambled, one-way code made from your email address with this month's spending, so signing up again with the same address doesn't give a second free start; and the one-way codes for Macs that used the free $5. Once you buy a plan or top-up, we also keep the payment records the law requires.
Children
Loom is not meant for anyone under 16.
Changes
If we change this policy we will update this page and the date above, and tell you in the app if the change matters.