Privacy

Last updated: September 4, 2026

Readyloop (a product of X19 Studios) provides an AI governance readiness workspace. This page explains what we collect and how we handle it.

What we collect

• Account data (name, email) via Clerk authentication
• Workspace content you enter: AI inventory, control statuses, evidence URLs/titles, optional archived evidence snapshots (fetched or uploaded), auditor share metadata, digest preferences, API key hashes
• Optional compliance-check answers, lead form submissions, and contact form messages
• Billing identifiers if you subscribe via Stripe
• Usage analytics via Google Analytics (page views and product events such as shares and upgrades)—IP truncated per GA defaults

How we use it

To operate the workspace, send digests you enable, process ingest events, provide auditor snapshots you create, and communicate about the service. We do not sell personal data.

Subprocessors

• Clerk — authentication
• Convex — application database and backend
• Vercel — hosting and edge delivery
• Stripe — payments (when billing is enabled)
• Google Analytics — site and product usage analytics
• FormSubmit — contact form delivery (messages sent to our inbox)
• Email/SMTP provider — transactional and digest email when configured

Retention

Workspace data is retained while your account is active. You can export anytime from Overview (Export & handoff). After account deletion requests, we delete or anonymize workspace data within 30 days, except where we must retain records for legal or security reasons.

Your rights

Contact hello@getreadyloop.com to export, correct, or delete your data.