Privacy Policy

sloop ("sloop", "we", "us") provides a customer-relationship management (CRM) platform that travel businesses use to receive, manage and respond to travel enquiries. This Privacy Policy explains what personal information we process, how we use it, and the choices and rights available to you. It applies to the sloop platform at app.usesloop.com, its API at api.usesloop.com, and this website at usesloop.com.

We act as a data processor on behalf of each travel business that uses sloop (the "agency"), who is the controller of the enquiry and customer data it collects. Agencies are responsible for their own use of that data and their own privacy notices to their customers.

Information we collect

• Lead & enquiry data. When an agency connects an advertising or messaging channel (such as Meta / Facebook Lead Ads, Google Lead Forms, or WhatsApp), we receive the information a person submits — typically their name, phone number, email address, and any answers to the lead form's questions (e.g. destination, travel dates, number of travellers).
• Agency account data. Names, email addresses and roles of the agency's staff who use sloop.
• Usage data. Basic technical logs (IP address, device/browser, timestamps) used to operate and secure the service.

Meta (Facebook) Lead Ads

When an agency connects their Facebook Page to sloop, they grant our application permission (via Facebook Login) to retrieve leads from that Page. We then receive new lead submissions in real time through Meta's Webhooks, and can fetch recent leads through the Meta Graph API, using only the permissions the agency explicitly grants (including leads_retrieval). We only access lead data for Pages an agency has connected, and only to deliver those leads into that agency's sloop workspace. We do not use Meta data for advertising or sell it to anyone.

How we use information

• Deliver enquiries to the correct agency's workspace so they can respond to the traveller.
• Provide, maintain, secure and improve the sloop service.
• Communicate about the service (e.g. account, security and transactional messages).
• Comply with legal obligations.

We do not sell personal information.

Sharing

Enquiry data is accessible only to the agency that owns the connection through which it arrived. We share data with service providers (sub-processors) that host and operate the platform — for example cloud hosting and database infrastructure — under contracts that require them to protect the data and use it only to provide services to us. We may disclose information if required by law.

Data retention

We retain enquiry and account data for as long as the agency maintains its sloop account and as needed to provide the service, then delete or anonymise it within a reasonable period, unless a longer retention is required by law. An agency can delete individual records at any time from within the product.

Data deletion & your choices

You can request deletion of your personal information at any time by emailing support@usesloop.com. If you submitted a lead through a Facebook Page, you may also revoke the connected app or request deletion through Facebook; our application honours Meta's data-deletion and de-authorization callbacks and will remove the associated lead data. Depending on your location you may also have rights to access, correct, or object to the processing of your personal data — contact us to exercise them.

Security

We protect data with encryption in transit, encryption of stored third-party credentials (such as access tokens), access controls, and single-session enforcement with idle time-outs. No method of transmission or storage is completely secure, but we work to protect your information.

Children

sloop is a business tool and is not directed to children under 16.

Changes

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, by additional notice.

Contact

Questions or requests about this policy or your data: support@usesloop.com.