Your workflows stay under your control.

Effective July 25, 2026

Summary

Loompath stores workflow definitions, settings, schedules, and run history in Chrome’s extension storage on your device. Loompath does not operate an analytics or telemetry service and does not sell personal information.

Data Loompath handles

When instructed by a workflow, Loompath may read page content, form values, browser storage, selected file data, URLs, and HTTP responses. This data is processed to perform the steps you configured.

Storage

Workflow definitions, preferences, schedules, and execution history are stored locally through Chrome extension storage. API credentials placed in the secrets vault are encrypted with AES-GCM using a key derived from your vault password. The unlocked key is retained only for the browser session.

Network requests

Loompath contacts a website only when you run a page workflow, configure a webhook, enable an AI provider, or activate and periodically validate a Pro license with Lemon Squeezy. Destinations and workflow request content are chosen by you. AI prompts and selected page context are sent only to the provider you configure.

Permissions

Loompath requests active-tab, scripting, side-panel, storage, alarm, and notification capabilities for core operation. Website origins remain optional and are requested when a workflow needs them. Provider and webhook origins are requested individually where possible.

Data sharing

Loompath itself does not operate a telemetry service. Information may be transmitted to websites, webhook endpoints, or AI providers solely when required by a workflow you created. License keys and activation identifiers are transmitted to Lemon Squeezy to verify Pro access. Those services apply their own privacy terms.

Retention and deletion

You can delete workflows, schedules, individual execution records, all execution history, settings, and stored secrets from the extension. Removing the extension also removes extension-local data according to Chrome’s behavior.

Security

Loompath minimizes permanent site access, uses an encrypted secrets vault, avoids remote executable code, and displays workflow actions before execution. Review imported workflows before running them.

Children

Loompath is a productivity tool and is not directed to children under 13.

Changes

Material policy changes will be reflected on this page with a new effective date.

Contact

Privacy and support questions can be sent to hello@krri.sh.