Privacy
Privacy notice
Last updated 3 November 2026
This notice explains how Salo Creative Ltd (“we”, “us”) uses personal data about the people who join our waitlist, sign up for or use Creative in the Loop, or contact us.
We are the controller for that data. Our company number is 11825337, our registered office is 57 Worgret Road, Wareham, Dorset, BH20 4PH, United Kingdom, and our ICO registration number is ZB883093. Contact us about privacy at support@creativeintheloop.com.
Brand material that organisations upload is covered by our terms of service. For any personal data in that material, the organisation is the controller and we process it on their behalf.
What we collect
- Waitlist: your email address, which form you used and when.
- Your account: your email address, name, the organisation you belong to, your role, and how you sign in (an email link, Google or Microsoft). From Google or Microsoft we receive your name, email address and whether the address is verified. We never see your password for those services.
- Using the service: which brands you open, changes you make or approve, and when. When an AI assistant uses a brand on your behalf, we record which tool it called, when, which brand, which assistant it was (for example Claude or ChatGPT) and whether it worked. We don’t store the conversation you had with the assistant.
- Emails we send: whether they were delivered.
- Security: IP addresses and browser details in our logs, and a captcha check when you sign in.
- Support: whatever you send us when you get in touch.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Running your account and the service, including signing you in and sending service emails (sign-in links, invites, “your questions are ready”) | Contract with your organisation, and our legitimate interest in providing the service to its people |
| Telling you when early access changes or a trial is ending | Legitimate interest |
| Following up on your waitlist sign-up or new account | Legitimate interest. You can ask us to stop at any time |
| Keeping the service secure and preventing abuse | Legitimate interest |
| Understanding how the service is used, so we can improve it | Legitimate interest |
| Billing, once paid plans start | Contract, and legal obligation for tax records |
We don’t sell personal data, and we don’t use it for advertising.
Who we share it with
We use these providers to run the service. Each is bound by contract to use the data only to provide their service to us.
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, file storage and sign-in | UK (London) |
| Vercel | Hosting the app | UK (London) and US (Washington, D.C.). Logs are processed in the US |
| Anthropic | AI that reads uploaded guidelines | US |
| Resend | Sending emails | US |
| Cloudflare | Captcha on sign-in | Global |
| Google, Microsoft | Sign-in, if you choose them | Global |
| Google Analytics | Website visits, only if you accept cookies on creativeintheloop.com | US |
| Stripe | Payments, once paid plans start | Added when paid plans start |
When your organisation connects an AI assistant, brand material is sent to that assistant’s provider when someone uses it. That happens under your organisation’s own agreement with that provider.
Some providers are in the US. Where personal data leaves the UK, we rely on the UK–US data bridge (the UK extension to the EU–US Data Privacy Framework) where the provider is certified, or on the UK’s approved international data transfer agreement or addendum in our contract with them.
We may also share data if the law requires it, or with a company that takes over the service, in which case this notice continues to apply.
How long we keep it
- Waitlist: until you ask us to remove you, or 2 years after you joined if you never sign up.
- Accounts: while your organisation’s account is open, then 90 days after it closes, then deleted.
- Usage records: 2 years, then deleted or anonymised.
- Logs: up to 30 days at our hosting and email providers, then deleted.
- Backups: our database is backed up daily and each backup is kept for 7 days, so deleted data can remain in a backup for up to 7 days.
- Billing records: 6 years, as UK tax law requires.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to move it to another service. Email support@creativeintheloop.com and we’ll reply within a month.
If your data is in brand material that an organisation uploaded, we’ll pass your request to that organisation, because they control it.
If you’re unhappy with how we’ve handled your data, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk.
Cookies
The app at app.creativeintheloop.com uses only cookies that are needed to sign you in and keep you signed in.
Our website, creativeintheloop.com, sets no cookies unless you accept them. If you accept, it loads Google Analytics, which sets the cookies _ga and _ga_FNT41H3HBG for up to 2 years to count visits, with your IP address shortened. Your choice is saved in your browser’s storage so we don’t ask again. You can change it at any time from the cookie link at the bottom of each page.
Changes
If we change this notice in a way that matters, we’ll email account owners before the change takes effect.