Security

The mechanics behind what Loomis Intel collects, connects, keeps and deletes — plain and checkable.

The basics

Loomis Intel reads what is already public, plus whatever you connect yourself.

Public material, matched to you first: Loomis matches public accounts and mentions to you first, then reads only what anyone else could already see. It never reads anything you've kept private: a locked setting, a private message.
Never behind a login you don't own: Loomis turns down an unauthorised login-wall bypass, or data bought from a broker, automatically. There's no case-by-case judgment call.
TLS at the edge: Your connection to Loomis runs over TLS, terminated through Let's Encrypt and enforced in strict mode by Cloudflare. The token behind a connected account gets its own encryption at rest, covered next.

Every token, before it reaches the database: Loomis encrypts the token behind a connected account before writing it to the database, and keeps the key apart from it.
Off the logs, off your screen: That token stays out of every log line, and out of anything the dashboard sends back to your browser.

Scoped to your account, or one you manage by invitation: Disconnecting only ever touches your own connection, or, inside a shared workspace, a connection its owner has given your seat explicit permission to manage.
Stops Loomis reading it from the inside: Once disconnected, Loomis stops reading that account from the inside. Anything already collected still follows the same retention and deletion rules as the rest of your account.

A set retention period: What Loomis gathers is kept for a set retention period, then deleted automatically once it passes. That period is set in the admin dashboard, so it can change without a code deploy.
Cancelling doesn't delete your data: Cancelling a subscription does not erase anything by itself. Anyone who has ever subscribed keeps the longer retention window regardless. Deleting everything means asking. The next section covers exactly how.

Every check-in and finding, gone: A request to erase your data deletes every check-in and finding Loomis Intel has produced for you, along with the evidence behind them. It cannot be undone.
Your account and connections stay put: Erasure clears your check-in history. Your account, and any account you've connected, stays for as long as the account exists, matching our privacy page. Close the account separately if you want those gone too.
One entry remains, so the promise is checkable: A single entry stays afterward: the audit entry recording that the erasure happened. It holds nothing personal, which is what makes the promise checkable.
Anyone can ask: Anyone can submit a request to access, correct or delete this data, no account required. That includes someone acting on your behalf.
Responsible Party under POPIA: Loomis operates under South Africa's Protection of Personal Information Act. For every Loomis Intel product, Loomis decides what your connected data is used for and how — that decision, and the responsibility for it, stays with Loomis.

Every finding stays in its own area: What you see is organised by area — professional conduct, communication, community involvement — each one read on its own, positives listed first.
Stays in your dashboard: Every check-in lives online, in your own dashboard, where it's always current.