Security

The mechanics behind what Loomis Intel collects, connects, keeps and deletes — stated plainly, not as a promise.

The basics

Loomis Intel reads what is already public, plus whatever you connect yourself. Nothing else.

Public material, matched to you first: Loomis matches public accounts and mentions to you first, then reads only what anyone else could already see. Never a private message. Never a setting you've locked down.
Never behind a login you don't own: An unauthorised login-wall bypass, or data bought from a broker, is refused outright — not weighed case by case, simply never collected.
TLS at the edge, checked not claimed: Your connection to Loomis runs over TLS, terminated through Let's Encrypt and enforced in strict mode by Cloudflare. The token behind a connected account gets its own encryption at rest, covered next.

Every token, before it reaches the database: The token behind a connected account is encrypted before it is written to the database, with the key kept apart from it.
Never in a log, never sent back to you: That token never appears in a log line, and never appears in anything the dashboard sends back to your browser.

Scoped to your account — or one you manage by invitation: Disconnecting only ever touches your own connection, or, inside a shared workspace, a connection its owner has given your seat explicit permission to manage. There is no other route from your disconnect action to anyone else's data.
Stops Loomis reading it from the inside: Once disconnected, Loomis stops reading that account from the inside. Anything already collected still follows the same retention and deletion rules as the rest of your account.

A defined period, not forever: What Loomis gathers is kept for a set retention period, then deleted automatically once it passes. That period comes from an editable setting, never a number fixed in the code.
Cancelling is not deleting: Cancelling a subscription does not erase anything by itself. Anyone who has ever subscribed keeps the longer retention window regardless. Deleting everything means asking — which the next section covers.

Every check-in and finding, gone: A request to erase your data deletes every check-in and finding Loomis Intel has produced for you, along with the evidence behind them. It cannot be undone.
Your account and connections are not part of this: Erasure clears your check-in history, not your account. Your account, and any account you've connected, stays for as long as the account exists — the same as our privacy page states. Close the account separately if you want those gone too.
One entry remains, so the promise is checkable: A single entry stays afterwards: the audit entry recording that the erasure happened. It holds none of your data — and it is what makes the promise checkable, not just a claim.
You do not need an account to ask: Anyone can submit a request to access, correct or delete this data with no account required — you, or someone acting on your behalf.
Responsible Party under POPIA, not an Operator: Loomis operates under South Africa's Protection of Personal Information Act. For every Loomis Intel product, Loomis is the Responsible Party for what you connect — never an Operator carrying out someone else's instruction.

Never one number about you: Loomis never combines your findings into a single score, rating or verdict. What you see are labelled findings, organised by area, never averaged into one grade.
Never a file to hand over: There is no PDF for a check-in, ever. The download endpoint refuses a check-in outright, and no download button is ever shown for one.