Privacy Policy

This policy explains how LooiQ, Inc. ("LooiQ", "we") handles information in three places: the restroom pages and texts businesses use to hand out door codes, the LooiQ app at looiq.app that businesses and their staff use, and this website. "Guests" means people requesting restroom access. "Businesses" means LooiQ account holders and their staff.

• Your phone number, as a one-way tag. When you ask for a door code, your number is turned into a one-way hash (HMAC-SHA256) the moment it arrives. We store the hash, never the number, and the hash can't be turned back into the number.
• Your visits: the time, the restroom, and whether a door code was given or the request was stopped.
• What you choose to send us: ratings, comments and problem reports.
• Accountability records linked to your tag: probation, strikes, blocks and bans, as described in our Terms of Service.
• Request details. Like any website, our servers receive your IP address and browser details with each request. We use IP addresses to limit abuse, such as too many attempts in a short time.
• Your location, only on the restroom map and only if you allow it. Your device's location is used to sort nearby restrooms. It's sent with that request and not saved by LooiQ.

We don't ask guests for a name, an email address or an account.

• Account details: names and email addresses, the business name and address, and team members' phone numbers, used for sign-in and the staff panel.
• Where you signed up from: which trial button on this website you used.
• Restroom settings and the door codes you enter.
• Activity in your account, such as cleanings, staff entries with their reason, and problem reports, each recorded under the staff member's name.
• Billing details. Stripe processes payments, so we don't receive or store full card numbers.
• Messages you send us.

• We count visits, and a few clicks like opening or sending a form, with Vercel Web Analytics, which uses no cookies and keeps nothing that names you. Google Analytics and Vercel Speed Insights run only if you accept analytics cookies. Google explains how it uses information from sites that use its services.
• Our contact form sends what you type in it to HubSpot: your name, email address, business name if you give one, and message, along with the page you sent it from. It sets no cookies.
• Our enterprise form is a HubSpot form. It loads only after you accept marketing cookies, and it collects what you type in it.
• We don't use advertising cookies. You can change your choice at any time with “Cookie preferences” at the bottom of every page.

• To give out door codes and keep restrooms open to guests in good standing.
• To keep restrooms accountable with probation, strikes, blocks and bans.
• To show businesses the activity at their own restrooms, with an anonymous tag for each guest.
• To send door codes, links to rate a visit, and account emails.
• To bill business accounts.
• To prevent abuse and keep LooiQ secure.
• To answer questions and support requests.

• With the business that runs the restroom. A business sees visits to its own restrooms with an anonymous tag, never a phone number. Ratings, comments and problem reports go to that business.
• Across restrooms that use LooiQ. A ban applies at every restroom that uses LooiQ. Only the one-way tag is used, and no phone number or name passes between businesses.
• With service providers that run parts of LooiQ for us, only as needed for their part:

We may also disclose information when the law requires it.

We never sell personal information, and we don't share it for advertising.

When you ask for a door code, LooiQ texts it to the number you enter, with a link to rate your experience. You get one text each time you ask. We do not send marketing texts. Message and data rates may apply. Reply STOP to stop texts from LooiQ, or HELP for help.

We do not share your mobile number, or your consent to receive texts, with any third party or affiliate for marketing or promotional purposes. Text message opt-in data and consent are never shared with third parties. Telnyx receives your number only to deliver the text.

Deletion runs automatically every day.

• See, correct or delete guest records. Email us the phone number you used. We find your records by turning it into the same one-way tag, then send you a copy, correct them or delete them within 30 days.
• A new phone number with an old ban. Email support@looiq.io and we'll look into it.
• California residents have the right to know, correct and delete personal information, to opt out of its sale or sharing, and not to be treated differently for using these rights. We don't sell or share personal information, so there's nothing to opt out of.
• Business accounts can ask us for an export or deletion of account data at any time.
• Cookies: use “Cookie preferences” at the bottom of every page.

• Phone numbers are one-way hashed (HMAC-SHA256) before anything is stored.
• Database access is limited by role, so each business sees only its own restrooms.
• Stored data is encrypted at rest by our database provider.

We'll post any change here and update the date at the top. For a material change, we'll also email business account holders.

Email support@looiq.io for privacy questions and requests, bans, appeals, or a new phone number with an old ban.