Privacy Policy | CareLoop

1. Operating Entity & Scope

This service is operated by SudoX LLC. In providing managed customer support desks, CareLoop operates predominantly as a Data Processor on behalf of our corporate clients who act as Data Controllers under GDPR, CCPA, and applicable global privacy statutes.

2. Information We Collect

Direct Inquiries: When you request a quote or contact us via our website, we collect your name, business email address, company name, and support volume requirements.

Helpdesk Operations: When operating customer support for our clients, our specialists access client helpdesks (such as Zendesk, Intercom, or email) under strict client-controlled credentials. We do not extract, sell, or aggregate end-user personal information outside client-authorized runbooks.

3. Role-Based Access Control & Security

All specialist access to client tools is gated behind mandatory two-factor authentication (2FA), dedicated managed devices, and zero-trust VPN configurations. Customer databases are queried solely on a read-only principle where authorized by client runbooks.

4. Data Retention

We retain prospect inquiry records only as long as necessary to provide service proposals and fulfill legal audit requirements. Customer support logs reside natively inside the client's chosen helpdesk platform and are governed by the client's retention schedule.

5. Contact & Data Protection Officer

For privacy inquiries, Data Protection Agreements (DPAs), or GDPR data subject access requests, contact our legal desk at [email protected].