Privacy Policy

This policy explains how Looma AI Innovations (SSM No. KT0620556-K, "Looma", "we", "us"), registered at C-6-2, The Saffron Sentul, 51100 Kuala Lumpur, Malaysia, collects and uses personal data in connection with asklooma.com, in line with Malaysia's Personal Data Protection Act 2010 (PDPA).

• Account information — your email address and password (handled by our authentication provider, Supabase) when you sign up.
• Report submissions — the business concept, target customer, market, budget, and objective you submit to generate a report.
• Payment information — we never see or store your card, bank, or e-wallet details. Our payment processor, Xendit, handles payment directly; we only receive confirmation that a payment succeeded and an invoice reference.
• Contact and enquiry data — your name, email, and message if you use our contact form or email us directly.
• Newsletter and waitlist data — your email address if you subscribe to our monthly market newsletter or join the Investigator waitlist.
• Usage data — basic technical data (such as IP address and browser type) collected automatically by our hosting provider for security and reliability purposes.

• To create and manage your account, and let you sign in securely.
• To generate the report you requested, using your submission as the research brief.
• To process payment for a report through Xendit.
• To respond to questions you send us, and to reply to your enquiry.
• To send the monthly newsletter or waitlist updates, if you opted in — you can unsubscribe from either at any time.
• To maintain the security and reliability of the service.

We do not sell your personal data, and we do not use your business concept or report content as a case study or marketing example without your written agreement.

We rely on a small number of service providers to operate Looma, each of which processes data only to provide their specific service to us:

• Supabase — stores your account and submission data, and handles authentication.
• Anthropic — processes your report submission to research and generate the report content.
• Xendit — processes payment for one-off reports.
• Resend — delivers transactional emails (enquiry confirmations, newsletter and waitlist confirmations).
• Vercel — hosts the website and application.
• Trigger.dev — runs the background job that generates your report.

We do not share your data with any other third party except where required by law.

We keep your account, submissions, and generated reports for as long as your account is active, so you can refer back to past reports. Contact form messages and newsletter/waitlist entries are kept until you ask us to delete them or unsubscribe.

Under the PDPA, you can ask us to access, correct, or delete the personal data we hold about you, or withdraw consent to our using it (for example, unsubscribing from the newsletter). To make a request, email inquiry@asklooma.com. We will respond within 21 days as required by the PDPA.

We use a small number of strictly necessary cookies to keep you signed in and to operate the site securely. We do not use advertising or cross-site tracking cookies.

We rely on our service providers' security measures (encryption in transit, access controls, and row-level data isolation) to protect your data, and we restrict internal access to what is needed to operate the service.

Looma is a business tool and is not directed at, or intended for use by, children.

We may update this policy from time to time. The "last updated" date above reflects the most recent revision.

Questions about this policy or how your data is handled can be sent to inquiry@asklooma.com or +60 10-392 1183. See also our Terms & Conditions.