Sloop Access Assistant Privacy Policy

This page is intended for the Sloop demo website and the related Custom GPT Action integration. It describes what information may be processed when someone browses products, applies for access, or completes a Stripe checkout in the demo environment.

Effective date: April 26, 2026

What this policy covers

This policy applies to the Sloop Access Assistant demo, including the public website, the demo application flows, and the Custom GPT Action that sends requests to the Sloop API hosted at sloop-agent-poc.vercel.app.

Information we process

Depending on how you use the demo, we may process shopping queries, product selections, contact details, postcode, employment information, affordability inputs, application status, verification metadata, transaction identifiers, and technical request data such as timestamps, IP-derived logs, browser information, and request diagnostics.

How information is used

We use information to return product results, compare purchase and access options, run the verification flow, create Stripe checkout sessions, confirm checkout completion, operate and secure the demo, and troubleshoot or improve the proof-of-concept.

Third-party services

This demo may share data with service providers that support the flow: OpenAI when a user interacts through the Custom GPT, Vercel and related infrastructure providers for hosting, the configured database provider for application storage, Stripe for payment checkout, and APLYiD when a live identity verification path is enabled. In simulated verification mode, no live biometric verification is submitted to APLYiD.

Payments and identity verification

Payment card details are handled by Stripe on Stripe-hosted checkout pages and are not stored directly by this application. If live identity verification is enabled, identity-check information is handled through APLYiD and related return metadata may be stored in the application to track verification state.

Retention

Because this is a demonstration environment, information you submit may be retained in application storage, logs, and third-party service dashboards for as long as needed to operate, review, debug, or reset the demo environment, unless a shorter retention period is required by law or platform policy.

Your choices

Do not submit sensitive real-world information unless you are comfortable using it in a demo environment. When possible, use test details for demonstrations. If you need information removed from a controlled demo deployment, contact the publisher or operator of the GPT or site where this policy is posted.

International processing

The services used by this demo may process data in countries other than your own, depending on where hosting, AI, payment, and identity providers operate their infrastructure.

Policy updates

This policy may be updated as the demo changes. The effective date on this page reflects the latest revision.