nineloops

Legal

Where your data lives

Last updated 28 September 2026

This page says where nineloops keeps your data, who runs the servers, and what leaves them. It is written for the person who has to answer a security questionnaire. The operator is PUBLSHR LTD.

The app

The web app and this site are served by Vercel, worldwide. Pages are cached on Vercel's global network so they load close to you wherever you are. A few server functions (screenshots for Monitoring, Studio rendering, the email relay) run in Vercel's default region in the United States.

The Mac and iPhone apps talk to the same backend as the web app.

Your database and files

Everything you store in nineloops (records, documents, messages, files, sign-in details) lives in a managed Postgres database with private file storage, run by Supabase.

  • Today your data is in the USA. Northern California, United States (Supabase region us-west-1).
  • A move to London, United Kingdom, is planned (Supabase region eu-west-2).

We will update this page and email every workspace owner when the move is done. Until then, transfers from the UK and EU are covered by the safeguards in our Data Processing Agreement.

Every record belongs to one workspace, and row level security in the database stops one workspace reading another's data. The rule runs on the server for every read and every write.

AI processing

  • Levi and Brain run on Anthropic's Claude models through Anthropic's commercial API, in the United States. What is sent is the content of the action you invoke: the message, document, record or conversation you ask about, and what you ask an AI employee to do, with the records it reads to do it. Anthropic also screens the job applications your careers site receives, answers the chat widget on your website, powers Studio AI and matches columns when you import a file.
  • Memory for Levi and Brain is built with OpenAI's embeddings API, in the United States. Short summaries of your CRM companies, contacts (name, title, email, stage), deals, invoices, retainers, Levi briefings and the first 2,000 characters of each shared document are sent to be turned into vectors, and so is each question you ask memory. Private and HR-scoped documents are never sent.
  • The WhatsApp bot sends every message a customer writes to a number you connect to OpenAI, with the business details you gave the bot, to understand the message and pick a reply. The campaign agent and the bot setup assistant use the same API. AI steps in Automations (summarise, classify, write) send the text the step acts on. Studio image editing (enhance, inpaint, outpaint, grab) sends the image you edit. If Anthropic does not answer during a Brain voice call, the reply is written by OpenAI from the conversation so far.
  • Voice input uses the speech recognition built into your browser or device: Google's service on Chrome, Apple's on Safari, under their terms. nineloops does not receive the audio. In the Mac app, a Brain voice call can use a speech model that runs on your own computer. Audio is never sent to nineloops's servers, Anthropic or OpenAI.

Both Anthropic and OpenAI are used under terms that forbid training on the content we send. We never use your content to train models, and we never send Google or Microsoft mailbox data to a model provider for training.

Email

  • Emails from nineloops itself (sign-in codes, invitations, billing and deletion notices) are sent from a mailbox on the publshr.ae domain, through the Google or Microsoft account connected to it. If that mailbox cannot send, the email goes through Amazon Web Services (Simple Email Service) instead, in the United States.
  • Mail you connect (Gmail or Outlook) stays with Google or Microsoft. nineloops fetches messages on demand to show them and keeps only a small index (sender, subject, snippet, read state) plus encrypted connection tokens. Both are deleted when you disconnect.
  • Campaign mail from Distribute is sent through your own email provider, which you add in Settings.
  • A push notification to the iPhone app carries the title and text of the message through Apple's push service.

Payments

Card details are collected and stored by Stripe. nineloops never sees your card number. Stripe keeps billing name, address and tax ID in the United States and Ireland.

Connected channels

If you connect WhatsApp, Instagram or Facebook, messages and posts pass through Meta's platform. Meta is a separate controller for its own services.

Backups and retention

  • The database is backed up daily by Supabase and about a week of daily backups is kept (8 were held on 28 September 2026). Backups are encrypted. Point-in-time recovery is planned with the region move.
  • Files sit in durable object storage at Supabase in the same region as the database.
  • When you delete your account, deletion is scheduled for 30 days and can be cancelled in that window. When the window closes, a scheduled job removes the data from active systems, including uploaded files, within the hour, and emails you. Copies in backups are gone on their normal rotation, within 30 days.
  • When a paid plan ends, your data stays in the workspace on the Free plan, so you can export or delete it.

Export

You do not have to ask. Settings, Data and audit, exports every record in your workspace: one ZIP with a CSV per record type and a manifest. Files you uploaded are listed in it by link and are downloaded from the module they live in; they are not packed into the ZIP.

Who to contact

Questions about data location, a security questionnaire, or a copy of the Data Processing Agreement: hello@publshr.ae.

Full list of providers and regions: nineloops.ae/sub-processors.