Legal
Privacy Policy
Last updated: 17 September 2026
Who we are
TwelveLoop ("we", "us") is the trading name of Two Tapers AB, a company registered in Sweden (org. no. 559534-0133), and operates twelveloopai.com, the Weekly Loop newsletter, and the Monthly Loop training platform at training.twelveloopai.com. For any question about this policy or your data, email hey@twelveloopai.com.
The two kinds of data we handle
We collect two different kinds of personal data, and we play a different role for each. When you subscribe to the Weekly Loop or join a waitlist, we decide what happens with your email address, we are the data controller. When a company signs up for the Monthly Loop and enrolls its own team, we act on that company's instructions for its employees' data, the company is the data controller for that data, and we are the data processor. This policy explains what we do with that data and the safeguards in place; the company itself is responsible for its own basis for enrolling its employees.
What we collect, Weekly Loop and waitlist
Your email address, and the date you signed up. Nothing else.
What we collect, Monthly Loop
From the person who signs a company up (the admin): company name, first name, email address, phone number, and a language preference. From each employee who joins: first name and email address. No payment card details ever pass through our own systems, those go directly to Stripe.
Why we collect it, and our legal basis
Admin data is collected to create and run the account, communicate about it, and bill for the subscription, our basis is performance of a contract with the admin. Weekly Loop and waitlist addresses are collected on the basis of consent, given when you submit the form, and you can withdraw it at any time. Employee data is collected and used solely to deliver each month's Loop and track that employee's own completion and quiz results, on the instructions of their employer.
Who processes your data
Two processors, both hosted in the EU: Supabase, which stores account and Loop data encrypted at rest, and Resend, which sends emails and stores associated contact lists. Neither is authorized to use your data for its own purposes.
Data processing agreement
For Monthly Loop customers, our obligations as processor of employee data are set out in the Data Processing Addendum included in our Terms of Service, which forms part of the contract accepted at signup.
How long we keep it
Weekly Loop and waitlist addresses: kept until you unsubscribe. Monthly Loop admin and employee data: kept for the life of the subscription, then deleted within 30 days of cancellation or non-renewal. Billing records we are required to keep longer under Swedish accounting law (currently seven years) are retained separately, only for that purpose.
If an individual employee wants their data deleted
You can ask us directly. Since your employer controls that data, we will let them know a request came in and give them five business days to raise an objection, for example, an active access dispute. If we do not hear back, or they confirm, we delete your record.
Cookies
On twelveloopai.com, we use essential cookies needed for the site to function, and optional analytics cookies to understand site usage, these only load if you accept them in the cookie banner, and you can decline or change your choice at any time. The Monthly Loop platform (training.twelveloopai.com) uses only essential cookies to keep you signed in to your personal Loop link, and does not use analytics or tracking cookies.
Your rights
Under GDPR you have the right to access the data we hold about you, to correct it, to have it deleted, to restrict or object to processing, and to receive a copy in a portable format. To exercise any of these rights, email hey@twelveloopai.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).
Changes to this policy
If we change how we handle personal data, we will update this page and adjust the date below.