LookAI

Privacy Policy

Last updated: November 9, 2026

This Privacy Policy explains what personal data eSolutions 88, LLC ("we", "us") collects when you use the LookAI website, dashboard and API (the "Service"), why, and what rights you have. eSolutions 88, LLC, 390 Northeast 191st Street, Miami, FL 33179, United States, is the controller of the personal data described here. For the texts and files you submit for analysis, we act as your processor under our Data Processing Addendum.

The short version

  • Texts and files you send for analysis are processed in memory and discarded. We never store them, log them or use them for training.
  • We keep your account details, your usage records (date, word count, language, result) and your invoices.
  • We do not sell personal data, and we do not use advertising or analytics trackers.

1. What we collect

DataWhat it includes
AccountName or company name, email address, a hashed password.
API keysA one-way SHA-256 hash of each key, its last four characters, its name, and when it was created, last used and revoked.
Usage recordsFor each request: date and time, the key used, word count, detected language, the result class, processing time and status. Not the text.
BillingYour Stripe customer ID, card brand and last four digits, invoice amounts and payment status. Stripe collects and stores full card details; we never see them.
Technical dataIP address, browser type and request logs kept by our hosting and security providers to run and protect the Service.
CorrespondenceMessages you send us and our replies.
Submitted ContentThe texts and files you send to the API. Processed in memory for the duration of the request only.

2. Why we use it, and our legal basis

PurposeLegal basis (where the GDPR applies)
Create and run your account, authenticate API requests, return resultsPerformance of our contract with you
Measure usage, bill you and keep accounting recordsContract, and legal obligations for tax and accounting records
Keep the Service secure, prevent fraud and abuse, enforce limitsOur legitimate interest in a secure, reliable service
Send service messages, such as invoices, security notices and changes to our termsContract and legitimate interest
Answer your questions and requestsLegitimate interest, or contract where the request concerns your account

We do not use your data for marketing emails unless you ask to receive them, and we do not make decisions about you based solely on automated processing.

3. Who we share it with

We share personal data only with service providers that help us run the Service, under contracts that require them to protect it and use it only on our instructions:

ProviderWhat it does
Laravel Cloud (Laravel Holdings Inc.), hosted on Amazon Web ServicesHosts the website, dashboard and database
RunPod (RunPod Inc.)Runs the analysis on GPU servers; receives submitted Content for the duration of a request
Stripe (Stripe, Inc. and Stripe Payments Europe, Ltd.)Saves cards, issues invoices and processes payments
Cloudflare (Cloudflare, Inc.)DNS, content delivery and protection against attacks
Google (Google LLC)Serves the web fonts used by the website, which means your browser sends your IP address to Google when it loads them

We may also disclose data if the law requires it, to protect our rights or the safety of others, or to a buyer or successor if our business is sold or merged, who will be bound by this policy.

4. International transfers

We are based in the United States, and our providers process data in the United States and other countries, including the European Union. When personal data from the European Economic Area, the United Kingdom or Switzerland is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK addendum where needed) or on our providers' certification under the EU-U.S. Data Privacy Framework.

5. How long we keep it

  • Submitted Content: not kept. It is discarded as soon as the result is returned.
  • Account data and API key records: for as long as your account is open, then deleted within 30 days of closure.
  • Usage records and invoices: for as long as we need them for billing, disputes and tax law, normally up to 7 years.
  • Hosting and security logs: kept by our providers for their usual periods, typically up to 30 days.

6. Security

All traffic is encrypted with HTTPS. Passwords are stored with a one-way hash, API keys only as a SHA-256 hash, and card details only by Stripe. Access to production systems is limited to the people who need it. No system is perfectly secure; if a breach affects your personal data, we will notify you and the authorities as the law requires.

7. Your rights

Depending on where you live, you may have the right to access the personal data we hold about you, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent where we rely on consent. To exercise any of these rights, email [email protected] from the address on your account. We will reply within 30 days. You can also complain to your local data protection authority.

California residents. Under the CCPA you can ask what personal information we collect, use and disclose, ask us to delete or correct it, and not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you.

8. Children

The Service is for businesses and professionals and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you submit texts written by students or minors, you are responsible for having a lawful basis to do so, as described in our Data Processing Addendum.

9. Cookies

We use only the cookies needed to keep you signed in and to protect forms. See our Cookie Policy.

10. Changes to this policy

We will post any change here with a new date. If a change materially affects how we use your personal data, we will tell account holders by email before it takes effect.

Contact

eSolutions 88, LLC
390 Northeast 191st Street, Miami, FL 33179, United States
[email protected]