How heptaloop, a Quanti LLC product, handles website, demo, platform, integration, and cookie data.
PrivacyQuanti LLC
Overview
Quanti LLC operates heptaloop and related services. References to "heptaloop," "Quanti," "we," "us," or "our" mean Quanti LLC and the heptaloop product unless the context says otherwise.
Our public website is heptaloop.ai. Our application is also available on heptaloop.app subdomains, including demo.heptaloop.app. This policy applies to those heptaloop services, not just to visitors of the public website.
heptaloop is a business-to-business consumer intelligence and activation platform. We process information to operate the site, answer demo and sales requests, support authorized platform workflows, connect approved integrations, secure the service, and improve product performance.
The public site and product are not directed to children under 13, and we do not knowingly collect personal information from children through the site.
Information We Collect
We collect information you provide directly, information generated when you use the site, and information made available through integrations you or your organization authorize.
Contact and account data: name, business email, phone number, company, role, inquiry details, meeting requests, and support communications.
Site and device data: IP address, browser, device type, pages viewed, referring page, timestamps, clicks, diagnostics, and security events.
Customer and market data: business content, campaign context, research inputs, audience or market signals, feedback, and outputs that authorized users submit to or generate through heptaloop.
Integration data: OAuth access and refresh tokens, account identifiers, profile information, campaign metadata, channel data, location data, media assets, and related records from connected services when an authorized user enables an integration. The Google-specific categories and purposes are described below.
Cookie and preference data: consent status, preference settings, analytics identifiers where accepted, and opt-out signals.
We do not ask users to submit sensitive personal information through public website forms. If a customer uses heptaloop with regulated or sensitive data, the customer remains responsible for having the rights and notices needed for that data.
How We Use Information
We use information for business and product purposes tied to heptaloop's AI-native operating loop.
Provide, operate, monitor, and secure the website and platform.
Respond to demo requests, questions, sales conversations, and support needs.
Configure authorized integrations and carry out user-requested platform actions.
Analyze market, customer, consumer, media, and operational signals for scoring, routing, insight generation, and activation workflows.
Improve product reliability, workflow quality, usability, and performance, subject to the Google data restrictions below.
Detect abuse, troubleshoot errors, enforce terms, and comply with legal obligations.
Send service, transactional, and business communications, with marketing choices honored where required.
Cookies and Tracking Technologies
We use cookies and similar technologies to support core functionality, remember preferences, measure performance, improve security, and understand how the site is used. Optional categories are controlled through the cookie preference center.
Essential cookies: required for core site behavior and secure navigation.
Preference cookies: remember consent, display, and site behavior settings.
Analytics cookies: active by default to help us understand site usage, page performance, content effectiveness, and visitor journeys. We use Google Analytics 4 and Microsoft Clarity for measurement, heatmaps, and session-level usability insight.
Marketing and activation cookies: may support demo attribution, audience measurement, or campaign performance where enabled and permitted.
Google Analytics 4 and Microsoft Clarity are active by default unless analytics is disabled through the cookie preference center or browser controls. Reject optional keeps essential and analytics active while preference and marketing or activation categories remain inactive. You can change cookie choices at any time. Blocking essential cookies in your browser may prevent parts of the site or product from working correctly.
Connected ServicesLimited Use
Google Ads and YouTube: Access and Use
Connecting Google is optional. Google displays a consent screen before granting heptaloop access. Our current Google connection requests Google Ads and YouTube management permissions together. These permissions do not give heptaloop access to your Gmail messages or Google Drive files.
Google Ads — adwords: Ads360 accesses connected advertising account identifiers, campaigns, ads, budgets, targeting settings, status, and performance information. We use this information to display and manage the advertiser's accounts and campaigns, prepare changes for review, and submit user-requested campaign actions. Read-only access would not support campaign creation or editing.
YouTube — youtube.force-ssl: Share360 uses YouTube API Services to access connected channel and video identifiers, video titles, descriptions, thumbnails, publishing status, and associated statistics used by the publishing workflow. It uploads videos and thumbnails you provide, schedules eligible videos, changes supported video details or privacy settings, and deletes a video when you request deletion. Upload-only permission does not support the video update and delete operations in this workflow.
Connection records: We store authorization tokens and account/channel mappings to maintain the connection and perform authorized requests, including scheduled actions. You do not need to give heptaloop your Google password.
Google describes the full capability of each permission on its consent screen. A broad permission description does not mean that heptaloop uses every operation it permits. Actions affect the Google Ads account or YouTube channel you connect, not a heptaloop-owned advertising account or channel.
Limited Use: heptaloop's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The Google-specific restrictions in this policy take precedence over more general descriptions of data use elsewhere on this page.
Google API data is not for sale, data-broker resale, credit decisions, or unrelated advertising profiles. Managing an advertiser's requested campaign does not authorize us to repurpose private YouTube data into advertising audiences or share it with unrelated advertisers.
Connected-account information, authorization tokens, private publishing content, and non-public campaign information require protection against unauthorized access, disclosure, alteration, and loss. Our safeguards include the following mechanisms:
Encrypted web connections: Our public HTTPS website and Google's HTTPS authorization and API endpoints use TLS to protect information in transit on those connections.
Google-hosted authorization: You sign in and grant permissions on Google's pages. heptaloop receives OAuth authorization credentials instead of collecting your Google account password. Google determines what those credentials allow us to access.
User review and account selection: The advertising and publishing workflows let you review the content and connected destination before requesting an action. Connecting an account does not transfer ownership of that account to heptaloop.
Access restrictions: Our policy limits personnel access to connected Google data to user-authorized assistance, necessary security investigations, legal requirements, or other access expressly permitted by Google's policies. Support access to specific private content requires your affirmative permission unless another permitted exception applies.
Revocable permissions: You can withdraw heptaloop's Google authorization through your Google Account permissions page. Revoking permission prevents further use of that authorization; requesting deletion of stored copies is a separate step described below.
No method of storage or transmission is completely secure. To report suspected unauthorized access or a security concern, contact developer.admin@heptaloop.app. Do not include passwords, access tokens, or refresh tokens in your message.
Where Data Is Stored and Who Receives It
We disclose information only as needed to operate heptaloop, provide requested services, and meet business or legal obligations.
Service providers: hosting and cloud infrastructure, including Amazon Web Services, security, communications, customer support, and product operations vendors. Website analytics providers include Google Analytics 4 and Microsoft Clarity as explained in the cookie section. Website analytics preferences are separate from permission to access a connected Google account.
Customer-authorized users: administrators or teammates in the same customer workspace where the product workflow requires access.
Integration providers: Google, advertising, publishing, social, or business platforms when a user authorizes heptaloop to connect or act through that service.
Legal and safety needs: disclosures necessary to comply with law or investigate security incidents. Transfers of Google API data in a merger, acquisition, or asset sale remain subject to Google's consent requirements.
Account and integration records, including connection credentials and identifiers, are stored in application databases. Uploaded media, generated work, and supporting files may be stored in cloud object storage. Browser storage is also used for application sessions and preferences. Processing locations depend on the services used and may be outside your country.
Google data may be provided to a service provider only for the disclosed, permitted service purpose and subject to Google's applicable transfer restrictions. Connecting Google is not permission for a provider to use that data for its own unrelated purposes.
We do not sell personal information for money. Some analytics, advertising, or attribution technologies can be treated as "sharing" under California privacy law when used for cross-context behavioral advertising. You can opt out through cookie settings or the "do not sell or share" link in the footer.
AI-Assisted Features
heptaloop offers AI-assisted drafting, replies, and analysis. When you use these features, your instructions and the relevant context used for that task may be processed by our AI services and cloud model providers, including models accessed through Amazon Bedrock. This processing generates the requested output; it is distinct from training a model.
Google API data remains subject to the Google-specific limitations above. This policy does not authorize using that data to train or fine-tune generalized AI or machine-learning models, build unrelated profiles, or make it available to other customers. Any use of connected data as AI context must be limited to the disclosed user-facing feature and the consent and restrictions applicable to that data.
Retention, Revocation, and Deletion
We retain information for the service purpose for which it was collected, including maintaining a connection, scheduled publishing, saved work, account administration, and resolving support requests. Retention is subject to applicable API-specific requirements; connecting an account does not authorize indefinite retention of its data.
Revoke Google access: Open your Google Account permissions, select heptaloop, and remove its access. Features that depend on that connection, including scheduled actions, may stop working until you reconnect.
Disconnect in heptaloop: Use the integration's disconnect control where available to remove the application connection. To ensure the Google-side authorization is also removed, use the Google permissions page above.
Request deletion of stored data: Email developer.admin@heptaloop.app from your account email. Identify your heptaloop workspace, the connected Google Ads account or YouTube channel, and whether you want integration data or your heptaloop account deleted. Do not send credentials. We may need to confirm your identity and authority before processing the request.
YouTube API data is subject to YouTube's retention and deletion requirements, including deletion within seven calendar days after a user deletion request or in-app revocation, and within thirty calendar days after revocation through Google's permissions page. These are provider-required deadlines, not a claim that disconnecting instantly erases every stored copy.
Removing the heptaloop connection or requesting deletion of our stored copies does not by itself delete videos from YouTube or campaigns from Google Ads. Deleting a source video requires a separate video-delete action in Share360 or YouTube. Published content otherwise remains with the source platform under its terms.
Some records, such as invoices or legally required transaction records, may have a separate retention purpose. That does not permit continued use of revoked Google data or override applicable API deletion requirements. Contact us for the retention and deletion handling applicable to your request, including stored media and backups.
Privacy Choices
Cookie controls: Use the cookie preference center to accept, reject, or change optional categories.
Sale/share opt-out: Use the cookie preference center to opt out of sale or sharing tied to marketing or activation technologies. Analytics can be managed separately in settings. We also attempt to honor browser-based Global Privacy Control signals where detected.
Access, correction, and deletion: You may request access to, correction of, or deletion of personal information you provided, subject to applicable exceptions.
Google and third-party access: Follow the revocation and deletion steps above. Revoking access, deleting stored heptaloop data, and deleting published content are separate actions.
Marketing communications: You may opt out of non-transactional marketing emails by using unsubscribe controls or contacting us.
Non-discrimination: We do not discriminate against users for exercising privacy rights.