Privacy

Draft — last updated 6 October 2026

Looseform is an early-stage product run by Nicolas Zuluaga. This page says what information Looseform keeps about you, what it is used for and who else handles it. If anything here is unclear, write tohello@looseform.com.

What Looseform keeps

• Your account: your name, your email address, and either a password (stored only as a one-way hash) or the identity Google gives us if you sign in with Google.
• What you make: the messages you send, the panels and spaces Looseform builds, what you and the people you share with put into them, and files you upload.
• Saved website logins: if you save a login so the agent can sign in to a website for you, it is stored encrypted and used only for that.
• Voice: if you use voice, your speech is sent to be transcribed and the replies are turned into speech. Looseform keeps the text, not the recordings.
• Location: only if you allow it in your browser, and only to answer the question you asked (for example, places near you). It is not kept as a history.
• Technical records: the IP address and browser details that come with each request, logs and error reports, kept to run the service, find faults and stop abuse.
• Notifications: if you turn on notifications, the address your browser gives us to send them to.

What it is used for

Your information is used to provide Looseform: to answer what you ask, show and save your spaces, let the people you invite work with you, send you the emails you need (such as sign-in and invitations), keep the service secure, and keep costs within limits.

Looseform does not sell your information, does not show you advertising, and does not use your content to train AI models.

Who else handles it

Looseform uses these companies to run the service. Each one handles only what its part needs.

• Fly.io (United States) hosts the application.
• Neon (United States) hosts the database where accounts and spaces are stored.
• Cloudflare provides DNS, sits in front of the site as a proxy (so it sees the traffic passing through), serves this website, and stores uploaded files (R2).
• Anthropic provides the AI model. Your messages, the content of the panels involved and the context needed to answer are sent to it to produce each reply.
• TypeSafe reads each message you send, with the few before it and the names of the space's panels and files, to suggest which kind of panel fits. TypeSafe says it does not train its models on what it receives.
• Resend sends email.
• Google, only if you choose to sign in with Google.
• Deepgram (speech to text) and Cartesia (text to speech), only when you use voice.
• Web push services run by browser makers (such as Apple, Google and Mozilla) deliver notifications, if you turn them on.
• Map and place services receive the place or area being looked up when a panel shows a map or searches for places, not your account details.

When you ask Looseform to research or book something, it visits websites on your behalf, and those sites receive what it searches for or enters there, as they would if you did it yourself.

Some of these companies are in the United States, so your information may be processed there.

Sharing with other people

A space is private until you share it. People you invite, or anyone with a link you create, can see and edit what is in that space and ask Looseform about it.

Cookies

Looseform uses a cookie to keep you signed in. This website does not use advertising or tracking cookies.

Keeping and deleting

Your account and spaces are kept until you delete them. You can delete your account from Settings. That deletes your account, your saved logins and every space only you are in, with everything inside it. In spaces shared with other people, what you wrote there stays for them, without your name. Backups and logs that still contain your information are removed as they expire.

To find and fix problems, Looseform keeps a record of what it did for each request, which can include your messages and its replies. Only the people who run Looseform can read it, and it is deleted after 30 days, or when you delete your account.

You can ask for a copy of your information, ask for it to be corrected, or ask any question about it by writing to hello@looseform.com.

Children

Looseform is not meant for children under 13, and does not knowingly collect their information.

Changes

If this policy changes, the new version is posted here with a new date. For a significant change, signed-in people are told in the app or by email.