Privacy Policy
Last updated 18 August 2026
Loquin is a product of Cenango. This explains what we collect, why, and what you can do about it. We’ve tried to write it in plain language rather than the usual fog.
The short version. If you self-host Loquin Core, we receive nothing at all — no telemetry, no phone-home, no account. If you use our hosted service, we hold the content you ask us to index and the conversations your visitors have, so we can answer their questions. We do not train models on your data and we do not sell it.
1. Who we are
Loquin is operated by Cenango. For any privacy question, or to exercise any right described below, email privacy@loquin.io.
2. What we collect
If you visit this website
| Data | Why | Kept |
|---|---|---|
| Name, email, website, and anything you type into the early-access form | To contact you about access | Until you ask us to delete it |
| Standard server logs (IP, user agent, page requested) | Security and abuse prevention | 30 days |
We do not use advertising cookies or third-party trackers on this site.
If you self-host Loquin Core
Nothing. Loquin Core runs entirely on your own infrastructure with your own API keys. It does not contact our servers, check licences, or report usage. We have no visibility into your installation and cannot identify you as a user.
Note that Core sends the content it retrieves to whichever model provider you configure — OpenAI, Anthropic, or another. That relationship is directly between you and them, under their terms, and we are not party to it.
If you use Loquin hosted plans
| Data | Why | Kept |
|---|---|---|
| Account details — name, email, company, billing information | To run your account and take payment | Life of the account, plus what tax law requires |
| Indexed site content — the pages, posts and products you ask us to read | To answer questions about your site | Until you delete it or close the account |
| Conversation transcripts — chat messages, and voice call transcripts | To show you what people asked, and to improve your answers | 90 days by default, configurable |
| Voice call metadata — number, time, duration | Billing and troubleshooting | 24 months |
| Anything a visitor volunteers to the assistant | To take a message or pass a lead to you | Same as transcripts |
3. Visitors to your site are your users, not ours
When someone chats with or phones a Loquin assistant on your site, we process their data on your instructions, as a processor acting for you. You are the controller. You are responsible for telling your own visitors that an automated assistant is in use and for having a lawful basis to process what they say.
On voice calls, our assistant identifies itself as automated at the start of the call. Depending on where you and your callers are, recording may require consent from everyone on the line — several US states require all-party consent. Configuring that correctly for your jurisdiction is your responsibility, and we give you the controls to do it.
4. What we don’t do
- We do not train AI models on your content or your visitors’ conversations.
- We do not sell, rent or share your data with data brokers or advertisers.
- We do not use your data to build a competing product or a shared knowledge base.
- We do not read your transcripts except when you ask us to help with a specific problem, or where we must to investigate abuse.
5. Who we share it with
Only the suppliers needed to make the product work:
- Model providers (such as OpenAI) — to generate answers, under agreements that prohibit training on our customers’ data.
- Speech and telephony providers — to carry and transcribe voice calls.
- Hosting and infrastructure — to run the service.
- Payment processing — card details go to our processor and never touch our servers.
We’ll also disclose data where the law genuinely requires it. A current list of subprocessors is available on request from privacy@loquin.io.
6. Where it lives
Hosted data is stored in the United States. If you are in the UK, EU or another region with transfer restrictions, contact us before you sign up — we’ll tell you honestly whether we can meet your requirements rather than after the fact.
7. Security
Encryption in transit and at rest, per-customer isolation of indexed content, access limited to staff who need it, and multi-factor authentication on internal systems. No system is perfectly secure and we won’t claim otherwise. If we suffer a breach affecting your data, we will tell you promptly and tell you what we actually know.
8. Your rights
Wherever you are, you can ask us to show you what we hold, correct it, delete it, or send you a copy in a portable format. Depending on your jurisdiction — UK and EU GDPR, California’s CCPA and CPRA, and similar laws elsewhere — you may also object to certain processing or withdraw consent.
Email privacy@loquin.io and we’ll respond within 30 days. We won’t charge you and we won’t treat you differently for asking. Deleting your indexed content is a self-service button in the dashboard; you don’t need to email anyone for that.
9. Children
Loquin is a business product and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe we have, tell us and we will delete it.
10. Changes
If we change this policy materially we’ll email account holders rather than quietly updating the date at the top. The date at the top will change too.