loupsio
Security and GDPR

Your customers’ typed input never leaves their browser.

Loupsio is hosted in the European Union. You set the retention period, erase data on request and accept the data processing agreement online.

What Loupsio receivesExample
E-mail••••••••••••••
Card number•••• •••• •••• ••••
Shipping address•••••••••••••••••••
Page text******* ** ******
Masked in the browser, before anything is sent.

How your data is protected

01

Hosted in the EU

Servers, backups and replay storage are in the European Union.

02

Typed input never recorded

Every input field is masked in the visitor’s browser, before anything is sent.

03

Mask all text

With this site option, no page text leaves the browser. Frictions are still detected.

04

Consent

Loupsio can wait for the visitor’s agreement, or follow Shopify’s cookie banner.

05

Adjustable retention

90 days by default, from 30 to 730 days. After that, everything is deleted automatically.

06

Erasure

You can delete a session, all the visits of a visitor or a customer, a whole site or your account.

07

No cookie

The script sets no cookie. If you turn on returning-visitor recognition, a random identifier stays in the browser for 13 months.

08

Claude off by default

Claude receives nothing until you turn on one of its options, each one separately: answers to questions, visit summaries, comment themes.

The documents

The data processing agreement is accepted online, in the site settings. The other documents are public.

Access

Everyone has their own account and a role on the site.

  • E-mail invitations, with a manager or member role
  • Read-only, revocable API keys
  • Recording restricted to the domains you allow
  • An e-mail change is confirmed by a link, and the old address is notified
  • The keys of the tools you connect (Jira, GA4, data warehouse…) are kept encrypted and never shown again

Frequently asked questions

Do I need a cookie banner?

It depends on your setup and your country’s rules. Loupsio can wait for consent, and we provide a template text for your banner.

Are you ISO 27001 or SOC 2 certified?

Not yet. We are preparing the audit: the list of our security measures, and of what is still to do, is available on request. The state of the service is shown on the status page.

Who can see the replays?

The people invited to the site, and those you send a share link to, for as long as the link lasts.

Paste one line and your first report arrives on Monday.