Loft

Privacy Policy

Last updated: March 11, 2026

What We Collect

When you sign up for Loft, we collect your email address via Google OAuth. When you connect your Google Drive, we access your Google Drive file contents and metadata (titles, modification dates) for the purpose of indexing.

How We Use It

We generate vector embeddings from your document text to enable semantic search. We store text chunks alongside these embeddings so results can be returned to you. Your data is only used to provide the search service.

Third Parties

We use the OpenAI API to generate text embeddings. Only document text is sent to OpenAI; no personally identifiable information (such as your email) is included. We use Turso for database hosting.

Data Storage & Security

Your data is stored in a cloud-hosted database and scoped to your user account. We take reasonable measures to protect your data, but no system is 100% secure.

Data Deletion

You can disconnect your Google Drive at any time from the dashboard, which stops further syncing. To request full deletion of your account and all associated data, contact us at support@getloft.app.

Google API Compliance

Loft's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

For questions about this policy, contact us at support@getloft.app.

Changes

We may update this Privacy Policy from time to time. Changes will be reflected by updating the "Last updated" date at the top of this page.