Privacy Policy

Last updated July 28, 2026

Two kinds of data

Huntloop holds data about its customers, and data about the companies its customers research. They are treated differently and this policy covers both.

If you are a Huntloop customer

We store your email address, your name if you provide one, your language preference, your plan and credit balance, and the campaigns you create.

We do not sell this data or use it to train models. Deleting your account removes it, with one exception.

We keep a one-way, salted hash of your email address, so that the one-time free trial cannot be claimed again by closing an account and signing up afresh. It cannot be reversed into your address, cannot be used to contact you, and matches nothing outside this check.

If your company appeared in someone's search

Huntloop collects business contact information from public sources: business listings and your own public website. This is company-level data — a business name, address, phone number, published contact address, and a description of what the site says.

We do not attempt to identify individuals, and we do not buy data from brokers or bypass access controls. Pages behind a login are never read.

How long it is kept

Extracted website content and contact details for leads that were not converted are deleted automatically after 90 days. This runs as a scheduled job, not on request.

When someone unsubscribes, the extracted data for that lead is deleted immediately and the address is added to a permanent do-not-contact list.

Extracted website content is additionally held in a shared index keyed on the company’s domain, so that two customers researching the same business do not cause the same website to be read twice. This index belongs to no customer and outlives the closing of any account, but it expires on the same 90-day schedule, and an unsubscribe deletes its entry immediately.

Opting out

Every email drafted by Huntloop carries an unsubscribe link. Using it removes you globally: no Huntloop customer can target that address or domain again, now or in future campaigns.

You can also ask to be removed without having received anything, by writing to the contact address below.

Who processes the data

The services below process data on our behalf. Some are outside the EEA; transfers rely on standard contractual clauses.

ServicePurposeRegion
SupabaseDatabase and authenticationUS
VercelWeb application hostingGlobal
RailwayProcessing pipeline hostingUS
Google PlacesCompany discoveryGlobal
FirecrawlPublic website content extractionUS
OpenAIEmail draft generationUS
UpstashJob queueUS
PaddlePayments, as merchant of recordUK/EU

Your rights and legal basis

The data controller is Akidata, the trading name of a sole trader resident in Colombia. It is not a separate legal entity; the controller’s full legal identification is available on request. You can reach us at the address at the end of this page.

Two regimes can apply, because Huntloop is operated from Colombia and is used to research companies elsewhere, including in the European Union.

Under Colombian Law 1581 of 2012 you may know, update and rectify your data, request proof of the authorisation given, be informed of how it is used, take a complaint to the Superintendencia de Industria y Comercio, and request deletion or withdraw authorisation where no legal or contractual duty requires us to keep it.

Where a company we process is established in the European Union or the EEA, the GDPR applies. The lawful basis is legitimate interest under Article 6(1)(f): making a business aware of a product relevant to it. We consider that interest not to override the rights of the people behind that business, because the data is company-level and taken only from public business listings and public websites; nothing behind a login is ever read; no data is bought from brokers; no special categories are processed and no individual is profiled; every draft carries an unsubscribe link; an opt-out applies globally across all customers; and extracted data expires after 90 days.

You may object at any time under Article 21. The unsubscribe link is that objection, and it works whether or not you have been contacted. You may also complain to the supervisory authority of your country of residence.

We answer requests within thirty days. We do not sell personal data and do not use it to train models.

Questions? Write to privacy@akidata.co