Privacy Policy
Last updated: November 10, 2026
Loomisly is a product of Aegis Technologies Pvt. Ltd. ("Aegis Technologies", "we", "us", "our"), a company registered in Nepal. Loomisly provides a social media scheduling, publishing, advertising, and analytics platform. This Privacy Policy explains what information we collect, how we use it, and the choices you have, for anyone who creates an account or otherwise uses Loomisly (the "Service").
1. Information we collect
We collect the following categories of information:
- Account information: name, email address, and password (stored hashed, never in plain text).
- Organization/team data: organizations you create or are invited to, and your role within them.
- Connected social accounts: when you connect a platform (Facebook, Instagram, LinkedIn, TikTok, X/Twitter, YouTube, Pinterest, Bluesky, Mastodon, Threads, Google Business Profile, Google Ads), we receive and store an access token (and refresh token where provided) via that platform's official OAuth flow, encrypted at rest. We use these tokens only to publish content, read analytics, and manage comments on your behalf, as authorized by the permissions you grant during connection.
- Content you create: post text, images, videos, and GIFs you upload or import (including via Unsplash or Canva) for scheduling and publishing.
- Analytics and engagement data: metrics such as impressions, likes, comments, shares, and clicks that we retrieve from your connected accounts' own analytics APIs, and comments/replies synced from your posts so you can manage them in one place.
- Billing information: subscription plan, credit balance and transaction history, and payment references from our payment gateways (eSewa and Khalti). We do not receive or store your card, wallet PIN, or full payment credentials — those are handled entirely by the payment gateway.
- Usage data: log data, IP address, browser/device information, and cookies used to keep you signed in and to remember preferences.
2. How we use your information
- To operate the Service: authenticate you, publish and schedule the content you create, retrieve analytics, and let you manage comments across connected accounts.
- To process payments and manage your subscription or credit balance.
- To automatically screen content you submit for explicit, hateful, or otherwise disallowed material before it's posted or stored (see Section 5). If enabled, this may include an automated check by a third-party AI content-classification service.
- To communicate with you about your account, billing, or changes to the Service.
- To maintain the security of the Service and investigate abuse.
3. Who we share information with
We do not sell your personal information. We share information only as follows:
- The social platforms you connect — to publish content and fetch analytics/comments on your instruction, using the token you authorized.
- Payment processors (eSewa, Khalti) — to process subscription and credit payments.
- Infrastructure and service providers who help us run the Service (hosting, error logging, email delivery, and — only if you or your admin enables it — an AI content-moderation provider).
- Legal or safety reasons — if required by law, or to protect the rights, property, or safety of Aegis Technologies, our users, or the public.
4. Data retention
- Account and organization data is retained for as long as your account is active.
- Analytics data pulled from connected platforms is retained for up to 365 days, after which older records may be aggregated or removed.
- If you disconnect a social account, we stop syncing new data for it; previously stored posts, analytics, and comments for that account are retained unless you request deletion.
- You may request deletion of your account and associated data at any time — the fastest way is the "Delete My Data" option in your account settings while signed in, or you can contact us (see Section 9). Either way, a team member reviews and completes the deletion; some information may be retained where required by law (e.g. payment records for tax/accounting purposes).
5. Content moderation
Content you submit through the Service (posts, comments, and replies) is automatically screened before publishing for explicit, hateful, harassing, or otherwise disallowed material, and for links that impersonate known brands or payment providers. This screening may combine a maintained word/phrase list with, where enabled, a request to a third-party AI classification service. Content that is flagged is not published.
6. Your rights
Under Nepal's applicable privacy and data-protection laws, and as a matter of how we operate the Service:
- You can disconnect any connected social account at any time from your account settings, which revokes our ability to act on it going forward.
- You can request a copy of, correction to, or deletion of your personal data using the "Delete My Data" page in your account settings, or by contacting us.
- You can control cookies through your browser settings — see our Cookie Policy for what Loomisly actually sets today (currently: only the essential cookies needed to keep you signed in). Disabling those will prevent you from staying signed in.
We currently operate on a Nepal-only legal basis and don't claim compliance with non-Nepali frameworks (e.g. the EU's GDPR) that we haven't built specific mechanics for.
7. Security
We store social account access/refresh tokens encrypted at rest, hash passwords, and serve the Service over HTTPS. No method of storage or transmission is 100% secure, and we cannot guarantee absolute security, but we work to protect your information using industry-standard practices.
8. Children's privacy
The Service is not directed to children under 13 (or the minimum age required by your country to use social media platforms, if higher), and we do not knowingly collect personal information from children.
9. Contact us
Questions about this Privacy Policy or your data can be sent to support@loomisly.com.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you directly.