Privacy policy.

Who we are

Loam is team messaging with an AI agent, @loam, that answers questions from your company's connected data. This policy covers the Loam app at app.getloam.co, the Loam desktop app, the Loam Android app (co.getloam.app) and this website, getloam.co.

The organisation responsible for your data under this policy is:

The Android app is published on Google Play under the Acrelane developer account. For anything in this policy, email support@getloam.co.

What we collect

Your account

Your name, email address and user id. Optionally a phone number, profile picture, title, department and manager. You sign in by email or with your Google account.

What you put into Loam

Messages, reactions and threads; pages, tasks and comments; files and photos you upload; your chats with @loam. Loam also keeps memories: short facts it picks out of conversations so @loam can use them later.

Accounts you connect

If you connect a service such as Google Drive, GitHub or Gmail, Loam stores the access key and reads data from that service so @loam can answer questions about it. You choose what to connect, and disconnecting removes the data Loam pulled through it.

Voice huddles

Huddle audio is live only. It passes between participants and is not recorded or transcribed. We do keep call history: who joined a huddle, when, and for how long.

Your devices

To send notifications we store a push token for each device you allow: a web push subscription in a browser, and a push token on Android. The Android app asks for the microphone (for huddles) and for notifications. It only reads a file when you pick one to attach.

Usage and diagnostics

Which features are used, and when. Crash and error reports. Server logs, which include IP addresses. Crash reports from the Android app itself carry no user identity and no IP address.

This website

getloam.co counts page views with Vercel Analytics, which sets no cookies. We also use PostHog, hosted in the EU, to understand how visitors use the site and sign up for Loam: the pages you visit and the buttons you click. Until you accept cookies in the banner, PostHog sets no cookies and stores nothing on your device. If you accept, it sets a cookie shared with app.getloam.co, so a visit here and a later sign-up count as one visitor, and records your session on the site with everything you type masked. If you decline, we remember that choice on your device and nothing else.

We also use Google Analytics to count visits and see where they come from. Until you accept cookies, it sets no cookies and stores nothing on your device: it only tells Google, without a cookie, that a page was viewed. If you accept, it sets Google Analytics cookies on getloam.co. We do not use it for advertising.

Billing

Billing contact and payment details, handled by our payment provider.

How we use it

To run Loam and nothing else:

• to deliver messages, calls and notifications, and to show you your workspace;
• to let @loam answer questions, using only what the people in that conversation are allowed to see;
• to find and fix faults, keep the service secure, and see which features are used;
• to bill for paid plans;
• to answer you when you write to us.

We do not sell your data. We do not show ads, and we do not share your data with anyone for advertising. We do not train AI models on your content.

Who can see it

People in your workspace. In Loam the room is the permission: what you post in a channel is visible to that channel's members, and @loam answers from what the people in the conversation can already see. Workspace admins manage who belongs to the workspace.

Our service providers. Loam runs on other companies' services, listed below. They handle your data to provide their service to us, not for their own purposes.

Services you connect. When you connect an account, or ask an agent to act for you (for example to post to X or send an email), the data involved goes to that service under its own terms.

When the law requires it. We disclose data if we are legally required to.

Service providers

We use outside companies to run Loam. Each one sees only what it needs to do its job for us. The kinds of provider, and what they handle:

• Hosting and databases. Run the Loam app and this website, and store your account, messages, pages, files, call history and Loam's knowledge store.
• AI model providers. Receive your questions to @loam and the messages, documents and memories retrieved to answer them, and index content so @loam can find it.
• Sign-in. Handle signing in, and see your name, email address and sign-in history.
• Calls. Carry live huddle audio between participants.
• Monitoring. Store logs, error reports and a sample of @loam's prompts and answers, so we can find and fix problems. These can carry fragments of content.
• Product analytics. Record which features are used, by whom and when.
• Payments. Take payment, and hold billing contact and payment details.
• Agent tools. Give Loam's agents a web browser and email addresses, and see the pages they visit and the mail they handle for you.
• Push notifications. Deliver notifications to the Android app, using your device's push token.

For the current list of providers by name, email support@getloam.co.

These providers operate in several countries, including the United States, so your data may be processed outside the country you live in.

Security

All data travelling between your device and Loam, and between Loam and its providers, is encrypted in transit. The Android app turns off Android's automatic backup, so your sign-in cannot be copied to another device.

How long we keep it

We keep your account and content for as long as your account exists. There are three exceptions:

• Pages you archive are deleted permanently 30 days after archiving.
• Huddle call history (who joined, when and for how long) has no time limit today. It is anonymised when you delete your account.
• Logs, error reports, analytics and AI traces held by our providers are kept until each provider's retention period ends.

When you ask us to delete your account, we do it within 30 days, as described below.

Deleting your account

You can ask us to delete your account and your data at any time, at app.getloam.co/delete-account. In the app, go to Settings → General → Account → Delete account. You can cancel the request until we act on it.

If you can't sign in, email support@getloam.co from the address you sign in with. We reply to confirm it is you, then delete the account. We complete every request within 30 days.

What we delete

• Your account details: name, email, phone number, profile picture and sign-in identity.
• Your profile (title, department, manager).
• Your private @loam chats, including your direct messages with @loam.
• Your personal pages, files and tasks.
• Your notification settings and the devices registered for notifications.
• Accounts you connected (for example Google Drive or GitHub), and the data Loam pulled through them.
• Your personal memories in Loam's knowledge store.
• Any workspace where you are the only member: its channels, messages, pages, files, tasks and agents.

What we anonymise

• Messages, reactions and edits you posted in workspaces other people still use. They stay so conversations still make sense, and show as “Deleted user”.
• Pages, tasks and comments you wrote in shared spaces.
• Call history: who joined a huddle, when and for how long.

What we keep

• A record that your account was deleted, holding an internal id and dates — nothing that identifies you.
• A workspace's audit log, which can contain the text of messages deleted before your account was.
• Invoices, which tax law requires us to keep.
• Facts in a shared workspace's knowledge that mention you by name, for example “Priya owns the launch plan”. They are part of that workspace's history, like your messages.
• Operational logs and AI traces held by our service providers, until each provider's retention period ends. We do not delete these per person.

If you are the only admin of a workspace that other people use, make someone else an admin first.

Your rights

You can ask for a copy of your data, ask us to correct it, ask us to delete it, or object to how we use it. There is no self-serve export yet: email support@getloam.co and we will send you a copy. We reply to every request within 30 days.

If you are unhappy with how we handle your data, tell us first. You can also complain to the data protection authority where you live.

Children

Loam is a tool for work. It is for people aged 18 and over and is not directed at children. If you believe a child has given us data, email support@getloam.co and we will delete it.

Changes to this policy

When this policy changes we update this page and the date at the top. If a change affects how we use data you have already given us, we will tell account holders by email or in the app before it takes effect.