AVIATION, REIMAGINED
Privacy & data
What stays in your browser, what reaches our services, and the choices you control.
Updated 21 October 2026
Who to contact
For Avia Loom privacy questions, access, correction or deletion requests, contact [email protected]. Explain the affected feature and account email or public page URL. Do not send passwords, authentication codes or confidential documents. We verify control before changing private records and consider applicable privacy rights and retention requirements.
Accounts, cookies and security
Accounts store your name, email, account ID and creation date. Email/password accounts store a salted hash protected by a separate server secret, not your password. Google sign-in stores your Google identifier, name and email; it does not request Gmail or Drive access. Google processes sign-in under its own privacy policy.
A Secure, HttpOnly session cookie supports sign-in for up to seven days, with 24-hour idle expiry. A short-lived nonce cookie verifies Google sign-in. Security events are retained for 30 days; expired sessions and hashed attempt counters are cleaned up by scheduled jobs. Cloudflare processes network information needed to deliver and protect the service, such as IP addresses and request metadata. These service/security functions are separate from advertising.
Browser-local work
Saved lessons, saved tools, local workspaces and manual document tools use browser storage or memory unless a workspace explicitly offers hosted processing or publishing. They are not automatically synchronized to your account. Clearing browser data or switching devices can remove or hide local work. Export important work independently.
Hosted document tools and AI
When you confirm a hosted Office action, selected extracted text, questions, instructions or HTML are sent to Cloudflare Workers AI or Browser Rendering as described by that tool. Hosted translation, quiz, document questions and audio process the selected document text. AI outputs may be inaccurate. Browser HTML rendering blocks external page requests and scripts.
The signed-in AI workflow planner sends your instructions and file names to Cloudflare Workers AI to choose tools; document contents are not sent to that planning model. Originals and outputs are stored privately in Cloudflare R2, associated with your account and workflow records in D1. Browser conversions require the page to remain open. Interrupted work can retain originals and partial outputs.
Private workflow files remain until you delete the workflow. Access is removed immediately when you delete; failed storage deletions are retried. Current limits include 100 MB per account, 20 MB per file, five source files/50 MB per request, 50 saved workflows and 20 AI workflow requests a day. Manual local tools do not automatically save files to this library.
Shared PDFs
Creating a share uploads your PDF to Cloudflare R2 and stores its filename, size, hash, expiry and sharing event records in D1. Anyone holding its recipient link can download it until it expires or is revoked. Treat the link as private access. Shares last one or seven days; scheduled cleanup removes expired files and associated records. Revocation immediately blocks access and removes the stored object. Downloads already made by recipients cannot be recalled. Email signature requests are not offered in this release.
Loom Labs publishing, forms and bookings
Canvas, Projects and Tables are local workspaces unless an interface explicitly says otherwise. Publishing a Form or Bookings page stores its title, description, configuration and timestamps in Cloudflare D1. The page configuration is public to anyone with its URL. Form answers and booking names, emails, notes and times are stored for the page owner to manage. They are not listed in the public page response.
A private management key in the creator's browser controls editing and responses; the server stores its hash. It is not an account-synchronized recovery method. Owners can close pages to new responses, delete individual entries or delete the published page and entries. Closed pages retain prior data until deletion. A form creator controls the purpose of collecting answers and must give participants appropriate information. Avoid sensitive information in public forms. Contact the creator first for a response request, or contact Avia Loom with the page URL if necessary.
Providers, delivery and retention
Cloudflare hosts the website, account/database services, stored documents and opt-in hosted processing. Google Identity Services provides optional Google sign-in. Google Fonts may receive network information when a font is loaded; some document tools load libraries from jsDelivr. These providers operate globally, so processing may take place outside your country. Their own privacy and service terms also apply.
We use data to provide the functions you request, maintain security, respond to support and operate the platform. For account and requested tool functions, processing is needed to deliver the service you ask for. Security and abuse prevention protect users and the platform. Optional hosted processing happens when you confirm the relevant action. Applicable legal bases and rights depend on the processing and your jurisdiction. Avia Loom does not currently deploy an advertising tracker. Provider request/security logs and owner-controlled backups may have separate retention. Backups are restricted to recovery and must not be used to republish deleted content. The public status page measures service availability, not individual user activity.
Requests, removal and limits
Delete private Office workflows from your dashboard and Labs entries/pages using their owner controls. For account removal or other privacy requests, use the contact page. We may need the account email, page URL and proof of control, but never your password or private management key by email. A deletion request must cover associated accounts, private files and published resources you identify. Copies lawfully retained for recovery or security are restricted and handled under the retention process. We cannot delete recipients' downloaded copies or work saved only on a device we do not control.
Email verification and automatic password recovery are not connected. Depending on your location, you may have rights to access, correct, erase, restrict or object to processing and complain to the relevant privacy authority. Contact us to exercise applicable rights. This notice will be updated as features change.