Privacy notice

Loudmill is a product of Aarya Technologies Ltd (“we”), registered in England and Wales, company number 08845253, registered office Arena Business Centres, 100 Berkshire Place, Winnersh, Wokingham RG41 5RD, registered with the Information Commissioner’s Office as a data controller (registration number ZC264488). This notice covers www.loudmill.com and the Loudmill app. Questions or requests: hello@loudmill.com.

It has three parts, depending on who you are: someone visiting our website, a business using Loudmill (and its team), or a customer of a business that uses Loudmill.

Our two roles

For the website, and for the accounts of the businesses and people who use Loudmill, we decide what happens to the data (in law, we’re the “controller”). For the details a business puts into Loudmill about its own customers (its contacts, the comments and messages its customers send it, its customers’ reviews and photos of their jobs), the business decides, and we handle them only on its instructions (we’re its “processor”), under our data processing agreement.

1. Visiting www.loudmill.com

What we collect: only what you type into the early-access form: your name, business name, email, phone number, website (if you give it) and message. To stop spam we also keep a one-way scrambled (hashed) form of your internet address, never the address itself. The website sets no cookies and uses no trackers or analytics.

Why: to reply about early access. The legal basis is taking the steps you asked for before a possible contract, and our legitimate interest in answering enquiries. We don’t add you to a mailing list unless you ask.

How long: the request is deleted from our database 12 months after you send it. A copy is emailed to our own inbox, and we delete that copy within the same 12 months.

2. Businesses using Loudmill, and their team

What we collect, and why:

• Your account: your name, email and the sign-in service you use (Google or Microsoft); which businesses you belong to and your role; the devices you’re signed in on. To give you access and keep it secure.
• Your business: its name, website, what it does, its brand (colour, logo, font, picture style), your services and prices, the answers you save, your settings, and the Terms you accepted (version, date, who). To write in your voice and run the service.
• What Loudmill makes and does for you: drafts, posts, pictures, approvals and their history, what was published where and whether it worked, and clicks on your posts’ links (counted, without recording who clicked). To run the service and show you results.
• Connected accounts: the access your social accounts, Google Business Profile or Mailchimp give Loudmill (stored encrypted), and the account’s id and name. To publish what you approve.
  YouTube: When you connect YouTube, Loudmill uses YouTube API Services. By connecting you agree to the YouTube Terms of Service; Google’s Privacy Policy applies. Loudmill keeps only your channel’s name and id and the access Google grants, encrypted, to upload the Shorts you approve, and checks them daily. Press Disconnect in Settings → Connections and we delete them straight away. You can also remove Loudmill’s access at any time at myaccount.google.com/connections: Loudmill notices within a day and deletes what it stored. Deleted data leaves our backups within 7 days.
  TikTok: When you connect TikTok, Loudmill keeps your TikTok display name and account id and the access TikTok grants, encrypted, to send the posts you approve to your TikTok inbox or profile with the settings you choose. Press Disconnect in Settings → Connections and we delete it straight away; it leaves our backups within 7 days. If you remove Loudmill in TikTok instead (Settings and privacy → Security → Manage app permissions), Loudmill can no longer use the access, and pressing Disconnect deletes what we stored.
• Usage and security records: a request log (which part of Loudmill was used, the result and how long it took; never what you typed), what each AI request cost, and sign-in events. To keep Loudmill working, safe and within its costs.
• Phone alerts, if you switch them on: your browser’s push address and keys. To send the alerts you asked for. They travel, encrypted, through your browser’s own push service (see subprocessors).
• A read-only link to your coming week, if an owner makes one: we keep only a scrambled (hashed) form of it. Whoever holds the link can read the next 7 days’ post words and times until it is turned off, replaced, or 90 days pass.
• Support: what you send us by email.

Legal basis:

• If you are the business yourself (a sole trader, or the person who accepted the Terms for a partnership you’re in): performing our contract with you.
• If you are a director, employee or team member of a company that uses Loudmill: our legitimate interest in providing the service your business signed up for, and in giving its team the access it asked for. You aren’t a party to that contract, but using Loudmill is part of your work for the business.
• For everyone: our legitimate interests in keeping Loudmill secure, preventing abuse and improving it; your consent for phone alerts (switch them off any time); and legal obligations (for example, tax records once we charge).

3. Customers of businesses that use Loudmill

If a business uses Loudmill, it may hold your email address and first name (to send you its newsletters or follow-up emails), any tags the business gives you (for example “boiler”, so only the right newsletters reach you), and whether you asked it to ring you back (its automatic emails wait until it has), your comments or messages to it on social media (so it can answer), a review you wrote (to thank you, or share it if you agreed), or a photo of a job it did for you (only if you agreed it may be shared). That business is responsible for these details and for having a lawful reason to use them; please contact it first. You can also write to us and we’ll pass your request on and help it respond.

Every marketing email sent through Loudmill has an unsubscribe link. Unsubscribing stops that business’s marketing emails at once: your contact record stays, marked as unsubscribed, so you aren’t emailed again. If the business later removes your contact record, we keep only a one-way scrambled (hashed) form of the business and your address, not the address itself, so you can’t be added back by mistake.

4. AI in Loudmill

Loudmill uses AI to draft posts and replies and to make pictures. What a business asks for goes to our AI providers: Google (Gemini); Anthropic (Claude) is planned as a backup but not switched on yet. That includes the business’s details, the draft’s topic, a customer’s comment being answered, and, for pictures, up to three photos the business ticked as its style guide (only photos with the customer’s OK, shrunk and with location details removed). Tidy my photo sends the one photo the business chose to tidy (a product, never a job, and only with the customer’s OK), so Google can give it a cleaner background.

Neither provider uses this to train its AI. Each may keep it for a limited time to check for abuse or where its rules require (Google “for a limited period”; Anthropic up to 30 days for some models), then deletes it. When Loudmill makes a picture, it asks Google not to store the request beyond that. When a business asks for a short AI clip, Loudmill sends that one picture to Google to make a few seconds of movement; the clip is labelled as made by AI, and Google adds its own invisible watermark. Every draft is checked by a person in the business before anything is published. Pictures made or tidied by AI say so in the file, so platforms can label them.

Weather ideas (on by default; off in Settings → Weekly drafts): once a week Loudmill asks Open-Meteo, a weather service, for a 10-day forecast for the business's area. Open-Meteo receives the first half of the business's postcode (like LS1) or its town once (to find its coordinates) and the coordinates after that; nothing about any person. Open-Meteo keeps its request logs, which may hold our server's address and the coordinates, for 90 days.

5. Who else handles the data

Loudmill runs on Microsoft Azure in its UK South region (London). We use a few other services to run it, listed with what each does and where on our subprocessors page; some are in the United States. Each one, and the UK-approved safeguard that covers it, is on that page. When a business publishes to Facebook, Instagram, LinkedIn, Google or another platform, or connects Mailchimp, the post and anything sent there are then held by that platform under its own terms. We don’t sell data or use it for advertising.

6. How long we keep it

• A business’s account, posts and their history, contacts, photos and settings: while the business uses Loudmill, until it deletes them or its business (see below).
• Customers’ comments and messages, and the answers: 90 days.
• Who was asked for a review: 12 months. Which follow-up emails went to whom: 2 years.
• Pictures replaced on a draft, or on a rejected draft: 30 days.
• What a business asked the AI to write from (for example a review it pasted in), and what it wrote: 30 days after it’s done. The posts themselves stay with the business.
• The request log: 90 days. Our hosting’s technical logs: 30 days. AI cost records: about 13 months (they hold no content).
• Database backups: 7 days, after which deleted data is gone from them too.
• Early-access requests: 12 months (see part 1).

7. Your rights

You can ask to see, correct or delete your details, to restrict or object to how we use them, or to have a copy to take elsewhere. Email hello@loudmill.com; we reply within a month. If you’re a business’s customer, see part 3. If you’re unhappy with our answer, you can complain to the Information Commissioner’s Office at ico.org.uk.

8. Deleting your data

• A whole business: the owner opens Settings → Your account → Delete this business (after signing in again). Everything stops at once: nothing more is posted, emailed or drafted, and nobody can open it. For 7 days the owner can restore it from the welcome page, in case it was a mistake; then its posts, pictures and photo library, contacts, review requests, customers’ comments and messages, connected accounts and settings are deleted for good. Download all your data, in the same place, gives you a copy first.
• Leaving a business (a team member): Team, or ask the owner. Your login stays for any other businesses you belong to.
• Your login itself: email hello@loudmill.com from the address you sign in with; we delete it within 30 days and confirm when it’s done.
• One customer: Contacts → Remove. Their details go, and their address leaves the delivery records.
• A connected account (Facebook, Instagram, LinkedIn, Threads, Pinterest, TikTok, YouTube, Google Business Profile, Bluesky, Mastodon, Mailchimp): Settings → Connections → Disconnect, and Loudmill deletes its access at once. If you remove Loudmill in the platform’s own settings instead, Loudmill can’t use that access any more. Facebook, Instagram and Threads then tell us, and we delete the stored access and the account’s details automatically. For YouTube and Google Business Profile, Loudmill checks daily, and deletes them within a day of noticing. The other platforms don’t tell us, so Loudmill keeps the (now useless, encrypted) access until you press Disconnect.

Once data is deleted for good, it leaves our backups within a further 7 days (for a whole business: about 15 days from pressing Delete). What the platforms hold (your posts, your followers) is yours on those platforms, and deleting it there is up to you.

Last updated 21 October 2026.

Back to Loudmill · Terms of service · Data processing agreement · Subprocessors