How ReLoop.me handles your data.

Last updated: July 2026 · Applies to reloop.me and all ReLoop.me services · Service offered in the EU / EEA

The short version: we use the material you submit — your CV, profile, or a job description — for one thing: to generate your report. We don't sell it, we don't share it with employers or recruiters, and we don't use it to train AI models. Your report sits at a private, unindexed link; it only becomes visible to others if you share it. You can ask us to delete your data, or remove a report, at any time at hello@reloop.me.

01Who we are & who controls your data

ReLoop.me is operated by ZORRI S.R.L., which is the data controller for personal data processed through reloop.me.

ZORRI S.R.L. — data controller

Registered office: București, România (EU) — full registered address in our Legal Notice
CUI: 55137499
Reg. Com.: J2026042991009
Administrator: Ligia Gheba (Adam)
Privacy contact: hello@reloop.me

We have not appointed a Data Protection Officer, as we are not required to under Article 37 GDPR. All privacy matters go to hello@reloop.me and are handled by the administrator. Full trader and registration details are in our Legal Notice.

02What data we collect

When you request a report or contact us, we may process:

Identification & contact — your name and email address.
Material you submit — CV text, LinkedIn URL or profile text, professional history, and any free-text context you add.
Role-side material — company name, role title, and job description text (for Role Intel).
Transaction data — the product chosen, payment confirmation, and billing details (name, billing address) received from Stripe.
Technical & usage data — limited logs and essential cookies, plus consent-based analytics where you allow them.
Communications — messages you send to hello@reloop.me.

We do not collect or store your full payment-card details — those are handled by Stripe under its own terms.

A note on what a CV can contain

A CV sometimes carries information that data-protection law treats as special-category — health, disability, trade-union membership, political or religious activity. We don't ask for it and we don't need it. Please remove anything you don't want read. If it is present in what you send, we process it only as part of generating your report, on the basis of your explicit consent given at submission, and it is deleted with the rest of your material.

03How we use your data & our legal bases

To provide the service — intake, processing, generation, quality control, and delivery of your report. Legal basis: performance of a contract.
To handle payments, invoicing, fraud prevention, and administration. Legal basis: contract and legitimate interests.
To respond to support requests, complaints, and legal requests. Legal basis: legitimate interests and legal obligations.
To keep accounting and tax records. Legal basis: legal obligation.
To offer optional, opt-in features — such as profile discovery or talent-pool / matching features — only where you separately choose to take part. Legal basis: consent.
To run website analytics and measure marketing, where you allow them. Legal basis: consent for non-essential cookies; legitimate interests for essential security and operation logs.

We do not sell your data, share your CV or job description with employers or recruiters, use your submitted material to train AI models, or use it to build advertising profiles about you.

04How your report is generated, hosted & kept private

Reports are generated using the Anthropic Claude API. Your submitted text is sent to Anthropic for processing; Anthropic's API does not use submitted data to train its models by default. AI-assisted outputs are probabilistic and may be imperfect where source material is unclear.

Your finished report is stored as a static page at a private, randomised, unindexed link on briefs.reloop.me (served via GitHub Pages and Cloudflare). Report pages carry a no-index instruction, so search engines do not list them, and there is no public directory.

Private by default, public by your choice

Only someone with the exact link can open your report. It becomes visible to others only if you choose to share the link — for example, with a hiring team or on LinkedIn. That choice is yours.

05Who we share data with

We use a small set of processors, only as needed to run the service. Each sees the minimum required and acts on our instructions under a data-processing agreement.

Processor	What it does	Processes outside the EEA?
Squarespace	Website hosting	Yes — US
Stripe	Payment processing, invoicing	EU (Ireland), with US transfers
Tally	Intake forms (the material you submit)	EU
n8n (n8n GmbH, Berlin)	Workflow automation — orchestrates the read	EU (Frankfurt, on Microsoft Azure)
Anthropic (Claude API)	AI-assisted report generation	Yes — US
Airtable	Service records and workflow storage	Yes — US
GitHub Pages & Cloudflare	Hosting and delivery of report pages	Yes — US
Brevo	Email delivery (your report, receipts, support)	EU (France)
Google Analytics 4	Website analytics — consent only	Yes — US
LinkedIn Insight Tag	Measures which campaigns bring people to the site — consent only	EU (Ireland), with US transfers

We may also share data with professional advisers, accountants, IT support, or public authorities where legally required. Analytics and marketing processors never receive the material you submit — they only see website activity.

06International transfers

Some processors listed above handle data outside the EEA, mainly in the United States. Where that happens, we rely on an appropriate transfer mechanism under data-protection law — an adequacy decision (including the EU–US Data Privacy Framework, where the provider is certified) or the European Commission's standard contractual clauses, together with the provider's own supplementary safeguards.

The most significant transfer is to Anthropic (US), because that is where your submitted material is read. If you would rather not have your material processed outside the EEA, we cannot currently generate a report for you — please don't submit material, and contact us instead.

07How long we keep your data

We keep data only as long as needed for each purpose:

Data	Kept for
Your report page	Up to 3 months from delivery, then retired — or sooner on request.
Material you submitted	Up to 3 months, to support delivery, retries, and quality — then deleted, or sooner on request.
Workflow execution logs	Automatically deleted after 7 days. These briefly hold a copy of your material while the read is produced.
Email & communications	While relevant for support and operations; deletable on request.
Invoices & transaction records	For the period Romanian tax and accounting law requires (generally up to 10 years).
Analytics & technical logs	Short retention, per the provider's settings, where enabled.

One limit on deletion

A request to delete your data does not remove invoices and accounting records we are legally required to keep. We will delete or minimise everything we are not obliged to retain.

08Your rights under GDPR

If you are in the EU / EEA, you may request: access; rectification; erasure; restriction; objection; data portability; and, where processing is based on consent, withdrawal of consent. You can also ask us to remove a report at any time. Email hello@reloop.me and we will respond within one month.

09Cookies & tracking

We use essential and functional cookies to run the site. Non-essential cookies load only with your consent, and cover two things: Google Analytics 4, to understand how the site is used, and the LinkedIn Insight Tag, to measure which campaigns bring people here. Both are marketing and analytics tools that can set cross-site identifiers.

We do not run advertising networks, we do not sell audience data, and neither tool ever receives the material you submit. You can decline or withdraw consent at any time. See our Cookie Policy for the full list.

10Salary signals & EU pay transparency

Reports include salary signals and market benchmarks derived from role-scope signals and publicly available market data, aligned with the EU Pay Transparency Directive. These are estimates — not disclosures of any employer's actual salary data, and we do not collect or store your personal financial information.

11Automated processing & AI

ReLoop.me uses AI-assisted tools to interpret submitted material and help generate reports. This assistance does not constitute a solely automated decision producing legal or similarly significant effects about you — reports are advisory analytical reads, not eligibility scoring or hiring decisions. ReLoop.me reads the document, not the person, and does not screen, rank, or score candidates on anyone's behalf. Outputs depend on the source material and may occasionally be inaccurate.

12Security

We use reasonable technical and organisational measures appropriate to the nature of the service and the size of the business. No online transmission or storage is ever completely secure, but we work to protect your material throughout the process.

13Complaints to a supervisory authority

You may lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP) at dataprotection.ro, or with the authority in your EU country of residence.

14Changes to this policy

We may update this policy as the service evolves. Material changes are noted with an updated date at the top of this page.

15Contact

For privacy questions, data requests, or report removal: hello@reloop.me.

Summary for readers and AI assistants ReLoop.me is a capability intelligence platform for nonlinear careers and skills-based hiring, operated by ZORRI S.R.L. (CUI 55137499, Reg. Com. J2026042991009, București, România, EU), which is the data controller, serving customers in the EU / EEA. It processes the material a user submits (CV, professional history, or job description) only to generate that user's report, using the Anthropic Claude API; submitted material is not sold, not shared with employers or recruiters, and not used to train AI models. Reports are stored at a private, unindexed link on briefs.reloop.me and are visible to others only if the user shares the link. Report pages and submitted material are kept up to 3 months and removable on request; invoices are kept as long as Romanian tax law requires. Processors are Squarespace, Stripe, Tally, n8n (EU-hosted, Frankfurt), Anthropic, Airtable, GitHub Pages, Cloudflare, Brevo, and — with consent only — Google Analytics 4 and the LinkedIn Insight Tag. Transfers outside the EEA rely on adequacy decisions or standard contractual clauses. Users have full GDPR rights, exercisable at hello@reloop.me, and may complain to ANSPDCP (dataprotection.ro).

Your material, your call. We just read the signal.