Last Updated: July 28, 2020
Please refer to our Privacy Overview at https://www.loom.com/privacy for additional details regarding how Loom Properties may use your information, including Loom’s use of certain applications and platforms operated by Third Party Services, and how you may export your data.
What information Loom collects from you
Loom collects only the information required to provide products and services to you. The amount of information provided by you and collected by Loom depends on the circumstances. Loom may collect two (2) types of information about you: Personal and Non-Personal.
“Personal Information.” Personal Information means any information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household, or is otherwise defined as personal information under applicable law. Loom may collect Personal Information when you use the Loom Properties including, without limitation, setting up account information, filling out surveys, corresponding with Loom, or otherwise volunteering information about yourself.
“Non-Personal Information.” Non-Personal Information refers to information that does not meet the definition of Personal Information above. Loom may collect Non-Personal Information through any of the methods discussed above as well as automatically through use of industry standard technologies described further below.
How Loom collects your information
Registration. Prior to using one or more of the Loom Properties, Loom may require you to provide us with certain Personal Information and Non-Personal Information to create an account (“Account”) or to enable features or functionality of the Loom Properties.
Users. Loom may gather Personal Information about organizational representatives via various methods (phone, email, online forms, in-person meetings) but only if such Personal Information is submitted voluntarily. Loom may use such Personal Information for sales, marketing, and support of the Loom Properties. This Personal Information is never shared with third parties other than Third Party Service Providers utilized by a User in connection with Loom Services.
User communications. When you send email or other communications to us, we may retain those communications in order to process your inquiries, respond to your requests and improve the Loom Properties.
Payment Information. When creating an Account, for certain Loom Properties, or when you make online purchases, you may be asked to provide information, which may include your payment instrument number (e.g., credit card), your name and billing address, and the security code associated with your payment instrument (e.g., the CSV) and other financial data (“Payment Information”). We use Payment Information to complete transactions, as well as for the detection and prevention of fraud. When you provide Payment Information while authenticated, we will store that data to help you complete future transactions without your having to provide the information again. We do not, however, retain the security code associated with your payment instrument (e.g., the CSV) in this manner. To remove or modify Payment Information, please contact us. After you close your account or remove Payment Information, however, we may retain your Payment Information for as long as reasonably necessary to complete your existing transaction and for the detection and prevention.
Information Collected Through Technology. Loom automatically collects and receives certain information from your computer or mobile device, including the activities you perform on the Loom Site, the Loom Software and the Loom Services, the type of hardware and software you are using (for example, your operating system or browser), and information obtained from cookies (see below). If you have an Account, we may link this Non-Personal Information to your Account to better understand your needs and the needs of Users in the aggregate, diagnose problems, analyze trends, provide services, improve the features and usability of the Loom Properties, and better understand and market to our customers and Users.
We use technology to automatically gather information by the following methods:
IP Address. You may visit many areas of the Loom Site anonymously without the need to become a registered User. Even in such cases, Loom may collect IP addresses automatically. An IP address is a number that is automatically assigned to your computer whenever you begin services with an Internet services provider. Each time you access the Loom Site and each time you request one of the pages of the Loom Site, the server logs your IP address.
Web Beacons. Web beacons are small pieces of data that are embedded in web pages and emails. Loom may use these technical methods in HTML emails that Loom sends to Users to determine whether they have opened those emails and/or clicked on links in those emails. The information from use of these technical methods may be collected in a form that is Personal Information.
Tracking Content Usage. If you use the Loom Services and you post audio visual materials including, without limitation, videos, links, logos, artwork, graphics, pictures, advertisements, sound and other related intellectual property contained in such materials (collectively, “Content”) to your website or to a third party website, Loom tracks and captures information associated with User accounts and the use of Content by those that access your Content.
Information You Provide About a Third Party. You may have the opportunity to communicate with others from the Loom Properties, such as by sending an invitation to a friend. If you choose to take advantage of this functionality, we may ask you to provide us with certain information about the person with whom you wish to communicate (e.g., name, email address, etc.). Loom collects such information for the purposes of facilitating the requested communication, which may contain a specific promotional message from you (e.g., an invitation to watch a video). Unless we explicitly say otherwise, Loom will not use this information for other marketing purposes without first obtaining consent from the person to whom the relevant information pertains. Please be aware that when you use any invitation functionality on the Loom Properties, your email address, name or username, and message may be included in the communication sent to your addressee(s).
How Loom uses your information
Personal Information. Loom identifies the purpose for which your Personal Information is collected and will be used or disclosed. If that purpose is not listed below, we will identify any additional purposes for which we will collect your Personal Information, before or at the time of collection, and we will obtain your consent to collect, use or disclose your Personal Information for such additional purpose(s).
By using the Loom Properties, you will be deemed to consent to our use of your Personal Information for the purposes of:
communicating with you generally;
processing your purchases;
processing and keeping track of transactions and reporting back to you;
protecting against fraud or error;
providing information or services requested by you;
administering and managing the Loom Properties and our business operations;
personalizing your experience with the Loom Site, as well as evaluating statistics on Loom Site activity;
performing statistical analyses of your behavior and characteristics, in order to measure interest in and use of the various sections of the Loom Site;
communicating with you on other websites;
delivery of content and information to Third Party Services Providers;
complying with legal and governmental requirements; and/or
fulfilling any other purpose that would be reasonably apparent to the average person at the time that we collect it.
Users utilize Loom Properties to manage and deliver Content to Viewers. As part of this process, Loom may collect Personal Information from you.
Otherwise, we will obtain your express consent (by verbal, written or electronic agreement) to collect, use or disclose your Personal Information. You can change your consent preferences at any time by contacting us (see the “How to Access, Change and Erase Your Personal Information” section below).
Loom extends the rights granted to “data subjects” under the General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”) to all of its Users. Consequently, you have the right to withdraw your consent to our processing of your Personal Information at any time (if our processing is based on consent) and the right to object to our processing of your Personal Information (if processing is based on legitimate interests).
Non-Personal Information. Loom may use Non-Personal Information for the following purposes:
System Administration: Loom may use Non-Personal Information for the purposes of system administration, assisting in diagnosing problems with Loom servers, monitoring Loom's system performance and traffic on the Loom Properties and to gather broad demographic information about Loom Users.
How to access, change and erase your personal information
Upon request, Loom will allow Users to update or correct Personal Information previously submitted, but only to the extent such activities will not compromise privacy or security interests. Additionally, upon request, Loom will delete Personal Information from the database where such information is stored; however, it may be impossible to entirely delete a User’s entry without some residual information being retained due to the manner in which data backups are maintained. Requests to delete Personal Information may be submitted to firstname.lastname@example.org.
Users also have the right to receive their Personal Information from us in a structured, commonly used and machine-readable format, and the right to transmit their Personal Information to another controller without hindrance from us (data portability).
Loom may use your Personal Information to send you emails periodically listing promotions or events relating to the Loom Properties. You have the choice to opt-out of receiving such promotional emails by sending an email to email@example.com and/or following the instructions in such correspondence. Once Loom's has processed your opt-out request, Loom will not send you promotional emails unless you opt back in to receiving such communications.
Disclosure of information to third parties
Except as described below, we do not sell, transfer or otherwise disclose, sell, trade, or otherwise transfer your Personal Information to outside parties. This statement does not include trusted third party service providers who assist us in administering and providing the Loom Properties or provide services to us. Examples include storing and managed Content, analyzing data, providing marketing assistance, integrations of Third Party Services such as CRM and MAP services, processing credit card payments, and providing customer service. These third party service providers will have access to Personal Information needed to perform their functions, but may not use it for other purposes, and they are subject to appropriate agreements with Loom and/or its Users to secure and protect the confidentiality of your Personal Information.
We may use service providers located outside of the United States, and, if applicable, your Personal Information may be processed and stored in other countries and therefore may be subject to disclosure under the laws of those countries. You explicitly consent and agree to such transfer, storing and/or processing of your Personal Information outside of the United States or other country in which you are located.
We may share Payment Information with third parties for purposes of fraud prevention or to process payment transactions.
We may also release your information when we believe release is appropriate to comply with the law, enforce our policies, or protect our or others’ rights, property or for safety. We may also provide non-Personal Information to other parties for marketing, advertising or other uses.
Information, including Personal Information, which we collect from Users and Viewers, is considered to be a business asset. As a result, in the unlikely event that we go out of business, enter bankruptcy or if we are acquired as a result of a transaction such as a merger, acquisition or asset sale, your Personal Information may be disclosed or transferred to the third-party acquirer in connection with the transaction.
We may also share information related to your account with your employer or organization if you have an individual Loom account and your account email domain is owned or managed by your employer or organization.
Lastly, we may provide Users with certain usage information directly related to the videos and/or other Content that they make available through the Loom Properties. Such information may include who watched a particular Content (if the viewer is logged into Loom), which Content of a particular User was watched, and how many times a particular Content was watched.
Under certain exceptional circumstances, Loom may have a legal duty or right to collect, use or disclose your Personal Information without your knowledge or consent. In accordance with applicable laws, We will not disclose any consumer information (which may include Personal Information) without your written consent, except where consumer information is required to be disclosed: (i) for billing or market operation purposes; (ii) for law enforcement purposes; or (iii) for the purpose of complying with a legal requirement.
When you participate in a Loom Business or Loom Enterprise account (as described in Loom’s Terms of Service), the organization administering such account may be able to (1) access information in and about the account, including your Personal Information; (2) disclose, restrict or access Content posted in connection with the account; and (3) control how the account is accessed or deleted. Such accounts and their use are also subject to the Loom Terms of Service accepted by the organization that established the Loom Business or Loom Enterprise account.
You consent to disclosure of your information for the above purposes.
Safeguarding your personal information
Loom takes appropriate security measures to protect against unauthorized access, alteration, disclosure or destruction of Personal Information. These include, but are not limited to, internal reviews of: (a) Loom's data collection; (b) storage and processing practices; (c) electronic security measures; and (d) physical security measures to guard against unauthorized access to systems where Loom stores Personal Information.
Unfortunately, no data transmission over the internet can be guaranteed to be 100% secure. As a result, while we are committed to protecting your Personal Information, we cannot ensure or warrant the security of any information you provide to us.
All Loom employees, contractors and agents who access Personal Information are bound by confidentiality obligations and may be subject to discipline, including termination and criminal prosecution or unauthorized use or disclosure of Personal Information.
Some or all of the Personal Information we collect may be stored or processed on servers located outside your jurisdiction of residence, whose data protection laws may differ from the jurisdiction in which you live. As a result, this information may be subject to access requests from governments, courts, or law enforcement in those jurisdictions according to laws in those jurisdictions.
Retention of information
Children and students
Loom takes the privacy of children and students extremely seriously. Personal information we collect through the Loom Services may be subject to the Children’s Online Privacy Protection Act (“COPPA”) and/or the Family Educational Rights and Privacy Act (“FERPA”).
COPPA Compliance. COPPA requires that operators of websites and online services that collect the personal information of children under 13 years of age (i) inform parents and legal guardians about their practices for collecting, using and disclosing such personal information and (ii) obtain verifiable consent from parents and legal guardians for doing so. We only collect personal information through the Loom Services from a child under 13 if that student’s school, school district or teacher has agreed to obtain parental consent for that child to use the Loom Services and disclose personal information to us for purposes of providing the Loom Services, or we have directly obtained such parental consent.
FERPA Compliance. FERPA protects personally identifiable information contained in students’ education records from unauthorized disclosure. Consistent with FERPA, we will only use education records, as defined under FERPA, for the purpose of providing agreed services to a school, school district or teacher. We will never share or sell FERPA-protected information, or use it for any other purposes, except as otherwise directed or permitted by the school, school district or teacher. If a parent or eligible student requests access to education records that are hosted on our servers, we will help facilitate such access.
EU and Swiss Privacy Shield Frameworks
With respect to Personal Information received or transferred pursuant to the Privacy Shield Frameworks, Loom is subject to the regulatory and enforcement powers of the U.S. Federal Trade Commission.
Purposes of EU, UK and Swiss Personal Information Collection and Use. We will only process EU, UK and Swiss Personal Information in ways that are compatible with the purpose for which we collected the EU, UK and Swiss Personal Information, or for purposes that the individual or entity providing the EU, UK and Swiss Personal Information later authorizes.
Pursuant to the Privacy Shield Frameworks, EU, UK and Swiss individuals have the right to obtain our confirmation of whether we maintain Personal Information relating to you in the United States. Upon request, we will provide you with access to the Personal Information that we hold about you. You may also correct, amend, or delete the Personal Information we hold about you. An individual who seeks access, or who seeks to correct, amend, or delete inaccurate data transferred to the United States under Privacy Shield, should direct their query to firstname.lastname@example.org. If requested to remove data, we will respond within a reasonable timeframe.
We will provide an individual opt-out choice, or opt-in for sensitive data, before we share your data with third parties other than our agents, or before we use it for a purpose other than which it was originally collected or subsequently authorized. To request to limit the use and disclosure of your Personal Information, please submit a written request to email@example.com.
In certain situations, we may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.
Loom’s accountability for Personal Information that it receives in the United States under the Privacy Shield and subsequently transfers to a third party is described in the Privacy Shield Principles. In particular, Loom remains responsible and liable under the Privacy Shield Principles if third-party agents that it engages to process the Personal Information on its behalf do so in a manner inconsistent with the Principles, unless Loom proves that it is not responsible for the event giving rise to the damage.
In compliance with the Privacy Shield Principles, Loom commits to resolve complaints about your privacy and our collection or use of your Personal Information transferred to the United States pursuant to Privacy Shield. European Union and Swiss individuals with Privacy Shield inquiries or complaints should first contact Loom by email at firstname.lastname@example.org or via post at:
140 2nd Street
San Francisco, CA 94105
Loom has further committed to refer unresolved privacy complaints under the Privacy Shield Principles to an independent dispute resolution mechanism, the BBB EU PRIVACY SHIELD, operated by the Council of Better Business Bureaus. If you do not receive timely acknowledgment of your complaint, or if your complaint is not satisfactorily addressed, please visit www.bbb.org/EU-privacy-shield/for-eu-consumers for more information and to file a complaint. This service is provided free of charge to you.
Loom commits to cooperate with the EU data protection authorities (DPAs), the UK Information Commissioner and the Swiss Federal Data Protection and Information Commissioner (FDPIC) and comply with the advice given by such authorities with regard to human resources data transferred from the EU, the UK and/or Switzerland, as applicable, in the context of the employment relationship with Loom.
If your Privacy Shield complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Privacy Shield Annex 1 here.
California law grants additional privacy rights to California residents. In particular, the California Consumer Privacy Act (CCPA) requires businesses to disclose, for the past 12 months, (i) the categories of personal information collected, (ii) the sources of the collected personal information, (iii) the purposes for which the collected personal information is used, (iv) the categories of personal information disclosed for a business purpose, and (v) the categories of any personal information sold. Loom provides these disclosures in the following table. Loom has not sold personal information in the past 12 months.
Sources of Collection: Website visits and registration for Loom Services
Purposes of Collection: To allow use of Loom Services and to enable Loom to communicate with you
Disclosures for a Business Purpose: To Loom service providers for the purpose of providing Loom Services to you
Category: Personal information categories listed in the California Customer Records statute
Sources of Collection: Registration for Loom Services
Purposes of Collection: Credit card information to permit payment for premium Loom Services
Disclosures for a Business Purpose: To Loom service providers to facilitate payment transactions
Category: Internet or other similar network activity
Sources of Collection: Your browsing and search history on the Loom Site
Purposes of Collection: To improve the visitor experience on the Loom Site, diagnose server problems and administer the Loom Site
Disclosures for a Business Purpose: To marketing specialist companies for the purpose of enhancing the Loom Site and improving the effectiveness of our advertising
California residents also have the rights described below. We will not discriminate against any California resident who exercises these rights.
Right to access/know. You may request from us a list of (i) the personal information that we have collected about you, and (ii) the categories of third parties to whom we have disclosed your personal information. You have the right to up to two (2) access requests each twelve (12) months.
Right to delete your personal information. You may request, at any time, that we delete your personal information.
You may contact us to exercise these rights at email@example.com. To ensure the privacy and protection of individuals, we are required to verify your identity or otherwise authenticate your request(s). Please note that, under the CCPA, we are not required to grant a request to access/know or a request to delete with respect to personal information obtained from you in your role as an employee, owner, director, officer or contractor of a company and within the context of Loom providing the Loom Services to such company.
Third Party Websites and Services
The Loom Properties may contain links to third party websites or services, including Third Party Services, (collectively, “Third Party Sources”) who may collect Personal Information and Non-Personal Information directly from you. Links to Third Party Sources are intended for convenience only. Third Party Sources are wholly independent from Loom. Third Party Source may have separate privacy policies and data collection practices, independent of Loom. Loom: (a) has no responsibility or liability for these independent policies or actions; (b) is not responsible for the privacy practices or the content of such websites; and (c) does not make any warranties or representations about the contents, products or services offered on such websites or the security of any information you provide to them.
How to contact us
Email us: firstname.lastname@example.org.
140 2nd Street
San Francisco, CA 94105
If you are a resident of the European Union, and you believe that our processing of your Personal Information is inconsistent with your data protection rights under the GDPR and we have not adequately addressed your concerns, you have the right to lodge a complaint with the data protection supervisory authority of your country. Current list of National Data Protection Authorities and members of the European Data Protection Board found here.