We collect what we need to run deltaloop: your account, what you ask us to create, your reference photos, and (if you connect it) data from your Instagram account.
We send prompts and photos to AI providers (Anthropic and Google) only to generate your content. We do not use your photos to train models.
Your data is stored with AWS in Frankfurt (EU), in private storage.
No ads, no tracking cookies, and we never sell your data.
You can ask for a copy of your data or for deletion any time: nezer14@gmail.com.
deltaloop is operated by Suf, an exempt dealer (עוסק פטור) registered in Israel. We are responsible for (the "controller" of) the personal data described in this policy. This policy explains what we collect, why, who we share it with, and your choices. It works together with our Terms of Service.
Account data: your email address, a hashed version of your password (we never store the password itself), your name if you give it, and which team you belong to. If you later sign in with Google, we receive your basic Google profile (name, email).
Content you give us: your niche or business description, ideas, instructions, edits, and reference photos you upload (which may show you, your family or other people).
Generated content: the images, videos and captions created for you, and your review decisions.
Instagram data (only if you connect an account): an access token, basic account info (ID, username, profile), your posts, post insights, and comments on your posts. See section 6.
Usage and cost records: which actions used credits or AI calls, when, and their cost, so we can count credits and run the business.
Support messages: what you send us when you ask for help.
Technical logs: server logs such as IP address, request times, and error messages, used for security and fixing problems.
We process personal data under Israel's Privacy Protection Law, 5741-1981 (including Amendment 13) and its regulations. For users in the European Economic Area or the UK, our legal bases under the GDPR are:
Contract: to provide the service you signed up for.
Consent: for connecting Instagram and for reference photos of people (you can withdraw it by disconnecting or deleting the photos).
Legitimate interests: security, preventing abuse, and improving the service.
Legal obligation: keeping accounting records when the law requires it.
Reference photos are used only to generate content for the account that uploaded them. Other users cannot see them.
You must have the right and consent to upload photos of other people. Photos of a minor may only be uploaded by their parent or legal guardian.
We do not use reference photos (or any of your content) to train AI models.
To generate and check images, photos are sent to our AI providers (Anthropic and Google) through their business APIs. As we understand their API terms, they do not use this data to train their models, but their own terms and policies apply and may change.
You can delete a reference photo in the app at any time.
Connecting Instagram is optional and uses Meta's official Instagram API. With your permission we can:
read your account's basic profile, posts and post insights;
read comments on your posts (comment text, commenter username and ID);
publish posts you approve;
send private replies (DMs) and public replies for comment→DM rules you set up.
We use this data only to provide these features to you. You can revoke access at any time in Instagram: Settings → Website permissions → Apps and websites (or in your Meta account settings). We then can no longer access your Instagram account.
If you comment on the Instagram post of someone who uses deltaloop's comment→DM feature, we process your comment text, Instagram username and ID to check whether it contains the keyword and, if so, send you one private reply on that user's behalf. We store your comment ID and the time of the reply so you never receive the same message twice. To ask us to delete these records, email nezer14@gmail.com with your Instagram username.
We share data only with service providers that help us run deltaloop, and only what they need:
Amazon Web Services (AWS) - server hosting (Lightsail) and file storage (S3), in the eu-central-1 region (Frankfurt, Germany).
Anthropic - Claude models, for writing ideas and captions and for reviewing generated images.
Google - Gemini models, for generating images and videos; and, later, Google Sign-In.
Meta - the Instagram API, for reading your connected account's data, publishing, and sending replies.
We may also disclose data if the law requires it, to protect people's safety, or as part of a sale or transfer of the business (in which case this policy will continue to apply to your data).
Your data is stored in the EU (Frankfurt). Some providers, such as Anthropic, Google and Meta, may process it in the United States or other countries outside where you live. We rely on these providers' standard safeguards (such as standard contractual clauses or similar mechanisms offered in their terms) for these transfers.
Email nezer14@gmail.com from your account's email address and ask us to delete your account.
We delete your account, your team's content (ideas, posts, captions, reference photos) and stored images and videos, and confirm by email. We aim to do this within 30 days.
Usage and cost records may be kept in anonymised form for accounting.
To stop deltaloop from accessing your Instagram account, remove it in Instagram: Settings → Website permissions → Apps and websites. If you commented on a deltaloop user's post and want your records removed, see section 7.
deltaloop accounts are for people aged 18 or older (or the age of majority where they live). Children do not use deltaloop themselves. Parents may upload photos of their own children as described in section 5.