Loom is an async screen-and-webcam recording and video-messaging app, acquired by Atlassian (Nasdaq: TEAM) in November 2023 and now governed by Atlassian's group-wide privacy policy (loom.com/privacy redirects to atlassian.com/legal/privacy-policy). That policy discloses Loom-specific usage telemetry (the type of Loom videos created and view counts) alongside broader third-party advertising/analytics cookies, and states user content may be used for "development, training, or fine-tuning of machine learning and artificial intelligence models." Its published sub-processor list, which explicitly covers Loom, is infrastructure-only (cloud hosting) under a Data Processing Addendum with stated annual compliance reviews. Ownership is traceable both through the privacy policy, which names "Loom, Inc." as a U.S. subsidiary adhering to the EU-U.S. Data Privacy Framework, and through Atlassian's FY2024 Form 10-K, which confirms the November 2023 acquisition. The App Store privacy label (id1474480829) discloses data linked to identity in five categories: Contact Info, User Content, Identifiers, Usage Data, and Diagnostics. No confirmed past security incident specific to Loom was found in the fetched SEC filing; its risk-factor language on breaches is forward-looking ("could result in"), not an admission of a past event.
TIMELINE
NO ENTRIES ON FILE YET.
ULTIMATE PARENT
TOOLS WE RECOMMEND
PLUS
RECEIPTS
11 ON FILE
COLLECTION
Loom's App Store privacy nutrition label (id1474480829) discloses that data in five categories — Contact Info, User Content, Identifiers, Usage Data, and Diagnostics — may be collected and linked to the user's identity.
Atlassian's group privacy policy, which now governs Loom, states it collects product-specific usage telemetry including the type of Loom videos a user creates and the number of views those videos receive, alongside broader usage data like search terms and Jira ticket interactions.
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the service allow you to permanently delete your personal data? — Yes, by contacting someone.
Atlassian's privacy policy names Loom, Inc. directly as one of Atlassian, Inc.'s U.S. subsidiaries that adheres to the EU-U.S. Data Privacy Framework Principles, confirming Loom's status as an Atlassian-owned legal entity.
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy outline the service's general security practices? — Somewhat.
Atlassian Corporation's Form 10-K for the fiscal year ended June 30, 2024, filed with the SEC, confirms that Loom is one of Atlassian's primary products, acquired in November 2023 for asynchronous video collaboration.
Atlassian's privacy policy states that user information (which, for Loom, includes recorded video and audio content) may be used to repair and improve the Services, including for development, training, or fine-tuning of machine learning and artificial intelligence models.
Atlassian's published sub-processors page, whose scope explicitly lists Loom among the covered products, states that Atlassian carries out annual compliance reviews of its sub-processors and conducts Transfer Impact Assessments for cross-border data transfers under its Data Processing Addendum; listed sub-processors are cloud hosting/infrastructure vendors rather than named advertising partners.
As assessed by PrivacySpy on 2020-06-24 (see PrivacySpy's rubric entry for this product for the per-claim citation): Does the policy allow personally-targeted or behavioral marketing? — Yes.
Atlassian's FY2024 Form 10-K risk factors describe security-breach risk in forward-looking, hypothetical terms rather than confirming a specific past incident affecting Loom or Atlassian's products.
The Atlassian group privacy policy governing Loom states that Atlassian and third-party advertising and analytics partners use cookies and other tracking technologies (web beacons, device identifiers, pixels) to recognize users across different Atlassian services and devices.