Operator and data controller: TOPOTRADE LLC FZ Company location: Meydan Free Zone, Dubai, United Arab Emirates Support and privacy contact: vloopsupport@gmail.com Effective: 25 October 2026 Version: 2026-10-25-feedback-edits-v6

These Terms set out the agreement between TOPOTRADE LLC FZ ("Vloop", "we", "us" or "our") and a person using Vloop ("you"). TOPOTRADE LLC FZ is a limited liability company registered in Meydan Free Zone, Dubai, United Arab Emirates. Our support and privacy contact is vloopsupport@gmail.com.

Vloop accounts are available only to people aged 18 or over. Publishing these Terms does not activate payments or create a prize competition.

1. Acceptance and scope

You must read and accept these Terms before creating an account. The Privacy Policy explains how we handle personal information; acknowledging that policy is not blanket consent to every use of your information. Where a particular activity requires separate consent, we will request it separately.

These Terms govern your use of the Vloop website, project listings, feedback competitions, testing, feedback, account features and related support. Specific checkout terms also apply to the relevant offer. Enabled feedback competitions follow Schedule 1 and require separate acceptance of the displayed price and rules. The Privacy Policy governs personal-information handling. Mandatory rights under applicable law take priority over conflicting wording in these Terms.

2. Eligibility and adult purchases

You must be at least 18 years old and have the legal capacity to enter this agreement to create an account, list a project or participate as a tester. Accounts for people under 18 are not permitted, even with a parent's permission. You must provide your real age and must not misrepresent it or bypass an eligibility restriction.

Before collecting account details, the signup screen asks for your age. An age under 18 is rejected. You can correct a typing mistake, but a corrected entry must still be truthful. This self-declaration does not independently verify your identity or age. The service records an adult eligibility result, screening time and screening version rather than retaining your exact age or date of birth.

Purchases, paid project-owner agreements and any subscription must be entered into by an adult who has the legal capacity and authority to make them. Do not use another person's payment method without their authorisation.

We may restrict access while an eligibility concern is investigated and may request proportionate evidence when appropriate. We will explain any additional verification information, its purpose and handling before collecting it. Report a suspected underage account to vloopsupport@gmail.com.

3. Accounts and security

Provide an email address you control and accurate account information. Choose a display name that does not expose sensitive information or impersonate another person. Keep your password and verification codes confidential. Do not share, sell or lend an account, or create additional accounts to obtain repeat introductory offers, manipulate rankings or evade restrictions.

Where enabled, sign-up and sign-in require an emailed verification code in addition to a password. Codes and password-reset links expire. You are responsible for authorised activity through your account, but these Terms do not make you responsible for a security failure caused by us. Tell support promptly if you suspect unauthorised access.

4. What Vloop provides

Vloop lets project owners submit games, websites and apps for review and invite testers to provide structured feedback. Testers can explore approved projects, submit feedback and participate in available feedback competitions under their displayed rules. Owners can view feedback and, where available, AI-generated summaries.

We do not operate the projects linked from Vloop. A listing's approval is permission to display it, not a certification that the external project is safe, lawful, successful or suitable for every user. We do not guarantee positive feedback, a particular number of daily visitors, sales, or a testing completion date.

5. Project-owner responsibilities

You must have permission to submit the project, use its name and content, and provide the link. Descriptions, platform information, update dates and claims about the project must be accurate. The "last updated" date is supplied by the owner; Vloop does not independently verify an external game's update history.

Disclose access requirements, downloads, account requirements, age restrictions, material risks and any charges a tester would encounter. Do not require testers to buy something, disclose credentials, give sensitive personal information, or perform an unsafe action to complete a Vloop test. Never instruct testers to violate another platform's rules.

Do not list malware, phishing pages, scams, illegal content, exploitative or sexual content involving minors, or content that promotes harassment, violence or unlawful discrimination. We may reject other content unsuitable for the audience or inconsistent with the service.

6. Review, reports and appeals

New projects must be approved before appearing in Browse. Material changes to a project's name, link, category, platform or description require another review. We do not promise a review deadline.

Users can report a project from its project page or contact support. Reports should be honest and include enough detail to identify the concern. Do not use reporting to harass a person or suppress legitimate criticism.

We may request corrections, reject or remove a listing, pause testing, restrict an account, preserve relevant evidence, or contact appropriate authorities when necessary or legally required. Where appropriate, we will provide a reason and an opportunity to ask support for a human review. We may withhold details that would compromise another person's privacy, security or an investigation.

Paid entitlements do not disappear merely because a project is awaiting review. If a paid project cannot resume, contact support to resolve the purchase or request an appropriate remedy under section 9.

7. Tester responsibilities and feedback validation

Use the project before reviewing it and submit honest, relevant feedback in your own words. Negative opinions are welcome. Do not copy another person's answers, fabricate testing, submit automated or purchased feedback, coordinate fake helpfulness votes, or manipulate report reviews or validation results.

A tester may submit feedback only once per project, including across later competitions or updates. Starting a test without submitting feedback does not by itself count as a completed submission. The service may impose minimum testing time, reservation limits and other disclosed checks.

Only feedback accepted as valid counts toward a competition's minimum number of testers. Signups and invalid responses do not count. Previous purchases retain their original testing-capacity rules. Feedback can be flagged for review by programmatic or AI checks. If you believe a classification is wrong, contact support with the project and relevant submission information for human review. Automated checks cannot prove that a person actually played a game or establish the truth of every answer.

Participation does not create employment, an agency relationship or a promise of payment for each test. Most participants may receive no prize.

8. Feedback competitions and previous purchases

New paid testing uses the feedback competition format in Schedule 1: the project owner chooses a total USD payment, a deadline and a minimum of at least 10 valid testers. Vloop’s share is 20% and the remainder funds prizes before winner transfer fees. Saving a draft does not take payment or start a competition. Funded checkout requires an approved project and the displayed price and rules to be accepted.

Previously confirmed orders retain their agreed price and testing capacity. They are not repriced or converted into new competitions. Existing introductory testing allocations remain separate and create no cash-prize entitlement. Testing capacity is not guaranteed attendance or a promised completion date.

The minimum competition purchase is $12 USD. PayPal receiving availability and applicable payout charges are disclosed before entry and prize payment. Mandatory rights and remedies for existing purchases remain unaffected.

9. Payments, order problems and refunds

Stripe processes checkout when payments are enabled. An order is fulfilled after the payment is confirmed; returning to Vloop from checkout alone is not proof of payment. Do not repeatedly pay if you are unsure whether a charge succeeded. Contact support with the order reference so we can investigate.

For a refund or service complaint, email vloopsupport@gmail.com from the purchasing account and provide the order reference and reason. Never email a full card number, password or verification code.

No change-of-mind refunds, except where required by applicable law. Competition cancellation refunds in Schedule 1 and mandatory legal refunds still apply. Featured subscriptions and previous testing purchases retain their applicable purchase terms. You retain statutory cancellation, refund, repair, replacement or other rights that apply to the transaction, including any applicable withdrawal rights. For order problems or service failures, we consider the amount paid, unused testing places, feedback already delivered, the reason testing stopped and applicable consumer law. We will explain the decision and any remedy required by law.

Approved refunds are normally returned through Stripe to the original payment method. Processing times depend on the payment provider and bank. A refund or dispute may pause the affected competition or previous testing purchase while its remaining entitlement is reconciled. A dispute does not by itself forfeit an unrelated statutory right.

10. Featured subscriptions

Where enabled, Featured placement costs $4.99 USD per month, per project and renews monthly until canceled. The price, billing interval and any additional charges are shown before confirmation in Stripe checkout. Public subscriptions use live Stripe checkout; private sandbox purchases do not create public entitlements.

After payment is verified, an approved Featured project appears ahead of ordinary projects matching the same Browse filters. It is labeled Featured · paid placement. Positions among matching Featured projects rotate daily, so no project is promised a unique first position. The subscription includes no testing places and guarantees no tests, feedback, positive reviews, visitors or sales. It does not bypass project review.

Use Stop renewal in that project's dashboard to cancel future renewal. A confirmed cancellation keeps eligible placement until the end of the verified paid billing period and does not create a new monthly charge. An unfinished checkout can be canceled there too. A pending cancellation message means the payment provider has not yet confirmed it; refresh status or contact vloopsupport@gmail.com promptly if confirmation remains pending. You cannot begin another subscription for the same project while an existing one remains open.

If the project is removed, archived, or submitted for a new content review, it loses placement and we request that renewal stop. A failed or unverified payment, refund, credit or dispute can pause placement; contact support about correction or an appropriate remedy. Cancellation is separate from a refund request. Section 9 and mandatory legal rights continue to apply; these Terms do not impose a blanket no-refund rule.

11. Feedback competitions

Each competition selects its winners using the quality of eligible feedback reports reviewed for that project. Enabled competitions use pending PayPal prize balances. The competition format, including eligibility, scoring, ties, extensions and cancellation refunds, appears in Schedule 1.

12. Your content and our permission to use it

You keep ownership of the content you submit. You grant Vloop a non-exclusive permission to host, store, reproduce and display that content to the extent necessary to operate the service, review projects, share feedback with the relevant owner, provide enabled summaries, investigate reports and maintain permitted backups or records. This permission is not a transfer of ownership or permission to sell your content for unrelated purposes.

Project listings and display names may be public. Feedback is shared with the relevant project owner. If you include someone else's personal information, you must have a lawful reason to share it; do not include unnecessary personal or sensitive information. After account closure, retained information and the duration of this permission are limited by the Privacy Policy and applicable law.

Project owners may use the feedback they receive to evaluate and improve their projects. They must not use it to identify, harass or contact testers outside the service, publish testers' personal information, or reuse it for an unrelated purpose without an appropriate lawful basis.

13. AI-assisted features

Where enabled, AI may group feedback into themes, check relevance or effort, or assist a reviewer in assessing submitted listing text and a limited public webpage sample. AI can be inaccurate, incomplete or unfair. It is not professional advice, and owners should refer to original feedback before acting on a summary.

AI-assisted project checks inspect submitted text, not the external game, website or app. Human approval is required for publication. You can request human review of a disputed feedback classification or moderation decision through support. Personal-information handling for AI features is explained in the Privacy Policy.

14. External platforms and prohibited use

Vloop is independent of Roblox, YouTube and other linked platforms and is not endorsed by them merely because a project uses their services. External services have their own rules, privacy practices and age requirements. Do not share your Vloop password with an external project.

You must not attack the service, bypass access controls, extract private records, upload malicious material, impersonate staff, infringe intellectual-property rights, make deceptive claims, or use Vloop for unlawful activity. Do not solicit minors' private contact details or direct them into private off-platform contact.

15. Service changes, suspension and closure

We may maintain, update or temporarily interrupt the service. We may restrict access for safety, abuse, unlawful activity, payment issues or a material breach of these Terms. Where appropriate, we will explain the reason and how to request a review. Restrictions will not automatically cancel a remedy owed for an unfulfilled paid service.

You may stop using Vloop and request account deletion. The current self-service deletion flow requires active competitions, previous testing allocations and recent pending checkout to be resolved and any open Featured renewal or unfinished Featured checkout to be canceled first. An unresolved claimed prize can also require support handling rather than immediate self-service deletion. Support can handle a closure and privacy request while those matters are being addressed, and a timely prize claim is not forfeited merely because you ask for account closure. Data-protection rights are not conditional on completing a purchase or competition.

If we permanently discontinue a paid service, we will address undelivered entitlements and any required refunds rather than treating closure as permission to retain payment without providing a remedy.

16. Responsibility and limits

We will exercise reasonable care in providing Vloop. We do not guarantee uninterrupted access, error-free AI output or the results of using an external project. Feedback is an individual's opinion and is not a warranty about a project's performance.

To the extent permitted by applicable law, we are not responsible for indirect business losses, lost profits or losses arising solely from an external provider's independent conduct. These exclusions do not remove responsibility that cannot lawfully be excluded, including liability for fraud, wilful misconduct, applicable gross negligence, or mandatory consumer and data-protection rights. Nothing requires you to waive a legal right merely by accepting these Terms.

17. Complaints, applicable law and disputes

Send complaints to vloopsupport@gmail.com, identifying the account or order and explaining the outcome you seek. We will consider the issue and respond without requiring you to disclose credentials.

These Terms are governed by the applicable laws of the United Arab Emirates. Subject to mandatory jurisdiction rules, disputes may be brought before the competent courts in Dubai, UAE. If you are a consumer, this choice does not remove mandatory protections or a right to use a court, regulator or complaint mechanism available to you under applicable law. No compulsory private arbitration is imposed by these Terms.

18. Changes to these Terms

We will publish the effective date of a revised version and give appropriate notice of material changes. Where required, we will obtain renewed agreement. A change will not retroactively reduce an existing paid entitlement or a prize already earned under published rules. If you do not accept a material change, contact support about account closure and any outstanding service.

If a provision is unenforceable, the remaining provisions continue to apply to the extent legally permitted. Failure to enforce a rule immediately does not waive it. Contact vloopsupport@gmail.com with questions about these Terms.

Schedule 1 — Feedback competitions

Availability: An approved project can open a competition only when checkout is enabled and Stripe confirms its payment. Saving a draft does not take payment or promise prizes. The company's launch approval does not represent specific approval of this model by Stripe. Previous testing purchases and introductory allocations remain separate.

1. Your competition

The creator chooses a total USD payment, an original deadline shown in UTC and at least 10 different valid testers. This minimum is a target, not guaranteed attendance. Only eligible people with accepted, genuine feedback count. Signups, duplicate accounts, copied or fake reports do not count. People may independently find the same issue. One test per person per project applies, including past tests.

2. Payment and Vloop's share

Vloop takes 20% of the total payment, rounded once to the nearest cent. The remainder funds the cash-prize pool before winner payout fees. The current minimum purchase is $12 USD, with the exact quote shown before checkout. Processing and platform costs come from Vloop's share; this share is not all profit. The payment, original deadline, minimum and accepted rules cannot be edited after funding. Extensions do not create another daily or weekly charge. Testing outside a funded competition and Featured placement are separate; neither creates a prize entitlement.

3. Deadline, extensions and full refund

Reaching the minimum before the original deadline does not close the competition early. If the minimum is unmet at that deadline, the competition extends one day at a time for no more than seven additional days. During an extension it closes as soon as the minimum is reached. If the target remains unmet at the final limit, the competition is canceled without prizes and the creator is entitled to a full refund of the original payment, including Vloop's share. Vloop bears processing costs not returned by Stripe. Refunds go to the original payment method; a pending refund is not a completed refund. Provider processing times vary. Late payment confirmation after the original deadline does not open a competition; a full refund is arranged.

4. Tester eligibility

Testers must be at least 18, verify their email and accept these rules before entering. Participation as a tester is free and does not guarantee a prize. Company Owner accounts and the project's creator cannot win. A supported PayPal receiving country must be declared before cash entry; an actual account is not required yet. Worldwide website access does not mean every country or individual account is eligible for PayPal payment. A winner must eventually provide their own eligible PayPal account with USD receiving capability. Do not use someone else's account or create additional Vloop accounts to enter again.

5. Report scoring and human review

Each report receives a quality rating out of 100 based equally on specificity and clarity, evidence or reproduction details, usefulness and relevance. Praise, length or writing fluency do not guarantee a higher score. AI can suggest scores; an authorised Vloop owner must review and confirm every eligible score before results are final. Missing or unreliable AI scores require human scoring. Fake or copied reports can be excluded with a reviewable reason; independently finding the same issue is not cheating. Participants can open their result in Pending prizes and request human review within seven days of first opening it. Support is also available for disputed classifications. Relevant unresolved reviews pause unpaid awards; they do not silently erase them.

6. Prize allocation

The highest three distinct eligible score levels receive 50%, 30% and 20% of the pool. Testers tied at a score level share that place's amount. With only two levels the pool is divided in the ratio 50:30; with one level the group shares the whole pool. Whole cents are allocated deterministically so the total equals the pool. Most participants may receive no prize. There are no game credits, subscriptions or other non-cash prizes.

7. Pending prizes and PayPal payment

Confirmed awards are money owed by TOPOTRADE LLC FZ, shown in the winner's pending prize balance. They cannot be bought, deposited, spent on Vloop or transferred between members. A prize does not expire merely because the winner has not set up PayPal. There is no 30-day PayPal setup forfeiture for this programme. Add your own PayPal email and supported account country through the secure prize page when ready; the company checks receiving eligibility.

The company aims to review results within seven days of closure. After eligibility and necessary details are confirmed, the exact payout fee deduction and net USD amount are shown for the winner's acceptance. The payment target is 14 days after those requirements and fee acceptance are met, subject to unresolved reviews. Actual sending fees are deducted from the gross award as disclosed; separate PayPal currency conversion or withdrawal charges may apply. No upfront payment is required to claim. If fees would consume an award, it stays owed while a workable payment is arranged.

The company makes the payout through its PayPal Business Payouts account and records the checked payout-item status in Vloop. Recording a transfer does not itself send money. Pending, unclaimed, held or failed transfers are not treated as paid. Only checked successful recipient credit reduces the pending balance; this does not confirm a bank withdrawal. A returned or refunded payout reopens the amount owed and may require secure resubmission of recipient details.

8. Existing rights and support

These rules do not reprice existing purchases. Historical practice entries do not create a cash entitlement. The no-change-of-mind refund policy does not override section 3 or applicable mandatory rights. Financial holds, disputes and refunds are investigated before affected prizes are paid. Contact vloopsupport@gmail.com for order problems, human reviews or privacy requests. Do not send bank details, identity documents, passwords or verification codes by ordinary email.

Operator and data controller: TOPOTRADE LLC FZ Company location: Meydan Free Zone, Dubai, United Arab Emirates Support and privacy contact: vloopsupport@gmail.com Effective: 25 October 2026 Version: 2026-10-25-feedback-edits-v6

TOPOTRADE LLC FZ ("Vloop", "we", "us" or "our") operates Vloop and determines how personal information is used for its accounts, project listings, testing service and related administration. This policy explains the information involved, its purposes, who receives it, retention, and your choices and rights.

This policy describes Vloop's adult-only account service. Users must be at least 18 years old. It does not introduce registration for younger users.

A short explanation in plain language

We need your email to manage your account and send login codes. Choose a display name that does not reveal private information. A project owner can read feedback you submit about their project. If AI is enabled, some of that text is sent to an AI provider, so do not put your address, school, phone number, passwords or private details in it. We do not sell your information. You can email vloopsupport@gmail.com to ask what we hold, correct it, request deletion or report a problem. Closing an account does not instantly remove every order, feedback record or backup; section 10 explains this. If a project makes you uncomfortable or asks for private information, stop and report it.

1. Information you give us

Depending on the features you use, we process:

• Account information: email address, display name, account identifier, password hash, email-verification status, account creation date, the recorded version of accepted Terms, and an adult age-screen result, screening time and screening version. We do not retain the exact age or date of birth entered for this screen.
• Project information: project name, link, category, platform, description, verification question and answer, and an owner-supplied update date.
• Testing information: test-session references and start/expiry times, submitted ratings and written answers, reported bugs, validation status and reasons, historical points records from the retired programme, an owner's helpfulness marking, and AI-assisted or human-reviewed project quality scores and reasons.
• Reports and moderation: report reason and description, reporter account reference, a copy of reported listing details, decisions, reviewer notes and action history.
• Orders and Featured subscriptions: competition, previous testing purchase or placement offer, amount, currency, payment mode, order, invoice, subscription, customer and payment references, payment status, verified paid period, cancellation status, refund or dispute information and linked entitlement. Vloop does not store full payment-card numbers or card security codes.
• Competition and prize records: selected payment amount, deadline, minimum testers, revision and timestamps, and rule acceptance, country eligibility, scores, notices, appeals, pending awards, secure PayPal recipient details and checked payment records. See section 14.
• Support messages: information you choose to send when requesting help, reporting a concern or exercising a privacy right.

Do not submit passwords, card details, government identification, home addresses, private contact details, medical information or other sensitive information in project descriptions, verification questions, feedback or reports. Avoid including another person's personal information. We may process personal information present in text even when it was not requested.

2. Technical information, cookies and browser storage

Your browser and our infrastructure process technical request information, which can include IP address, request time, browser information and the requested resource. The application uses IP-derived or account-linked counters to limit abusive requests. Hosting and payment providers may maintain their own operational or security logs.

The current application uses an essential sign-in cookie named __Host-loopback_session in production. It carries a session token, is not available to normal page scripts, and has a seven-day expiry. Server-side session validity controls whether the token is accepted. Signing out removes the current session; account deletion or a password reset invalidates relevant account sessions. A browser may retain cached page assets under its own settings.

The application does not contain advertising pixels or optional analytics trackers. That statement does not mean external font requests or infrastructure logs collect no technical information. If optional advertising or analytics tracking is introduced, we will update this policy and obtain any consent required before using it. Browser cookie controls can disable cookies, but signing in may then fail.

Optional feedback reports: Testers may submit a comment, bug or suggestion with a description, location, screenshot and PDF or text attachment. These uploads are private to the submitting tester, the relevant project creator and authorized Vloop reviewers. Written descriptions and locations may be included in enabled AI review; uploaded image and document contents are not automatically sent to AI. Files are retained with the feedback; active uploaded copies are removed when the submitting tester closes their account. Backup retention and requests to remove personal information follow section 10. Do not upload credentials, payment details or unnecessary personal information.

3. Why we use information

We use the information necessary to:

1. Create, authenticate, protect and administer accounts; send requested codes and password-reset messages.
2. Review and display projects, reserve tests, receive and validate feedback, deliver owner reports and review competition results.
3. Process and reconcile enabled purchases, subscriptions, refunds and disputes; administer an opened project feedback prize programme, notify winners, handle human reviews and claims, arrange approved PayPal payments and reconcile their status.
4. Investigate reports, prevent spam, fraud and harmful content, and review disputed decisions.
5. Generate enabled AI summaries and assist with feedback or project-text checks.
6. Provide support, respond to privacy requests, maintain backups and recover the service.
7. Meet applicable legal obligations and establish, exercise or defend legal claims.

We do not sell personal information. The service does not use account email addresses to send an advertising newsletter. Account and security emails are not subscriptions to marketing. We will not add a new marketing purpose simply because you agreed to the Terms.

4. Grounds for processing and consent

The appropriate legal ground depends on the activity and the law that applies. It can include processing necessary to provide a requested service or perform an agreement, compliance with a legal obligation, valid consent, and lawful interests in service security or operation where that ground is permitted and appropriately balanced against your rights.

Acceptance of the Terms is not a substitute for consent where consent is required. We will explain a separate consent request and how to withdraw it. Withdrawing consent does not make earlier lawful processing unlawful, but it can prevent us from continuing a feature that depends on that consent. We do not use a contractual label to bypass special protections for children or other mandatory rights.

If information is necessary to provide an account, authenticate a login or fulfil an order, declining to provide it can prevent that activity. Information in optional free-text fields should be limited to what the task needs.

5. Visibility to visitors, owners and reviewers

Approved project information can be visible to visitors. Pending projects are available to their owner and authorised reviewers. Written feedback is available to the relevant project owner; the fact that feedback is not publicly listed does not make its contents anonymous.

Authorised staff and reviewers can access information needed for support, moderation, security and administration. The application does not disclose a reporter's account identifier to the reported project's owner. However, details in a report can themselves reveal identity, and we may need to disclose information when lawfully required.

Project owners receive feedback to evaluate and improve their projects. Their use of any personal information in that feedback must have an appropriate lawful basis. Do not assume another person's deletion request can be resolved merely by removing their display name.

6. Service providers and other recipients

We use the following providers for the purposes described:

Some providers act on our instructions for particular activities and may also process information for independent purposes under their own terms and privacy notices. Their processing is not fully controlled by Vloop.

We may disclose necessary information to advisers, auditors or authorities for a legitimate administrative or legal purpose, or where disclosure is required by law. In a merger or transfer of the service, necessary information may be transferred subject to applicable legal safeguards and notice requirements; a business transfer does not cancel existing privacy rights.

External games, websites and apps are separate services. Following a project link can expose technical information to that service and its providers. This policy does not govern their processing. We do not send them your Vloop password or verification code.

7. AI processing and human review

When an AI feature is enabled, Vloop sends selected text to OpenAI to group feedback themes, assess relevance or effort, or help a reviewer identify concerns in submitted listing text and a limited public webpage sample. Link checks make bounded public requests without a Vloop session or customer credentials; the destination can receive our server IP address and the requested URL. Summary requests also include internal response identifiers so themes can be checked against the original submissions. We do not deliberately include account email addresses, password hashes, payment details or reporter identities in these requests.

The application attempts to remove recognisable email addresses and certain secret-like strings from text, but this is not a complete anonymisation process. Names, private facts and other personal information written into a response can still be transmitted. Do not add them unnecessarily.

AI text-generation requests currently use store:false. This does not mean the provider retains no data. OpenAI's API documentation states that API information is not used for model training by default unless data sharing is opted into; default abuse-monitoring records can retain content for up to 30 days, subject to exceptions and account arrangements. Vloop does not claim that its account has Zero Data Retention. See OpenAI's API data controls.

Vloop stores generated theme summaries, assisted project-review results and relevant classification status in its database. Automated checks validate a submitted public project URL, its public network destination and up to three redirects, and may send a limited readable webpage sample to OpenAI for review. Scripts, downloads and games are not executed, and this is not a malware scan or safety guarantee. AI never automatically approves a project for listing. Human project approval is required. Feedback classification can use programmatic and AI checks and can affect whether a response qualifies as valid feedback and counts toward a competition’s tester target. Contact vloopsupport@gmail.com to request a human review or contest a result. AI can suggest competition report scores, with bounded requests; every eligible score needs human confirmation before awards. You can request human review of a disputed result or classification.

8. Age screening and underage accounts

Vloop accounts are available only to people aged 18 and over. Before account details are requested, the signup screen asks for an age in whole years. An entry under 18 shows a notification and does not open the account-details form. The entry remains editable to correct a typing mistake; users must enter their real age. The server also rejects signup requests that do not declare an eligible adult age.

The age entered is used to determine eligibility. For an eligible account, we record only the adult age band, screening time and screening version. We do not retain the exact age or date of birth in the account or email-verification record. This is a self-declaration, not independently verified age assurance. No identity-document or biometric age-verification service is used for this signup screen.

The service does not offer accounts to under-18 users or operate a parental-consent signup process. A parent, guardian or user can report a suspected underage account or ask about a young person's information at vloopsupport@gmail.com. We may request proportionate information to establish the requester's authority rather than unnecessary identity documents. We will restrict an ineligible account and assess deletion of its information, subject to lawful retention needs. An account discovered during preview is not permitted merely because it was previously used.

9. International processing

Vloop is operated from the UAE. Hosting, email, payment, font and AI providers may process information in the United States or other countries outside your country of residence. Your country's protections may differ from those in the processing country.

Where applicable law requires a particular transfer condition or safeguard, it must be satisfied for that processing. We assess provider arrangements, hosting regions and required contractual or other safeguards before opening a new launch region or processing arrangement. We will not open processing in a region where a required transfer condition has not been satisfied. This policy does not assert that every country has approved Vloop's transfers, or that all data stays in the UAE. Contact our privacy address for information about the relevant recipients and transfer arrangements.

10. Retention

We retain information according to its purpose, whether your account, competition or earlier testing purchase is active, the need to investigate abuse or resolve an order, and applicable legal or accounting requirements. We do not promise that every record disappears when an account is closed.

The current application behaves as follows:

The financial-record minimum follows Article 56 of UAE Federal Decree-Law No. 47 of 2022 on Corporate Tax and applies to relevant Free Zone records too. The Federal Tax Authority Corporate Tax General Guide, section 10.7.2 explains the seven-year rule. For example, records for a tax period ending 31 December 2026 must be retained through 31 December 2033, or longer where legally required. This period runs from the tax period's end, not the purchase date. Operational database backups with a 30-day cleanup policy are not a substitute for this financial archive. Necessary retained records must not be used for unrelated purposes merely because they remain in a backup, archive or database.

Deletion from a live database is not immediate deletion from a backup. If a backup is restored, prior deletion requests need to be reapplied. We will consider what additional redaction or removal is required for personal information embedded in free text rather than assuming that replacing an account name anonymises it.

11. Account closure and privacy requests

The account page offers deletion after active competitions, previous testing allocations and recent pending checkout have been resolved and any open Featured renewal or unfinished Featured checkout has been canceled. An unresolved claimed prize may also require support handling before self-service account deletion. If self-service deletion is blocked, contact support; you can still make a privacy request while an order, subscription or prize is being addressed. Requesting deletion does not itself forfeit an owed prize.

The current deletion flow replaces the active account's email and display name, disables its password, invalidates sessions, removes historical points records, hides owned projects and removes specified AI records. It does not automatically erase every project description, feedback answer, test reference, order, report or backup. Those retained records can contain personal information and are not necessarily anonymous. Explain any such information you want reviewed in your request.

Depending on applicable law and your circumstances, you may request information or access, correction, deletion, restriction, objection, withdrawal of consent, or a portable copy of qualifying data. You may also ask for human review of a significant automated result. Not every right applies to every record or legal ground. We will explain any lawful restriction or refusal rather than saying the website's technical design cancels your rights.

Send requests to vloopsupport@gmail.com. We may verify identity and authority using proportionate information. We will respond within the period required by the applicable law. You can complain to a competent data-protection authority or other applicable regulator; contacting Vloop first is not a condition that removes that right.

12. Security and incidents

Measures in the application include password hashing, HTTPS in production, restricted session cookies, request limiting, access checks for owners and moderators, database backups, encryption of private PayPal recipient identifiers, and password confirmation before authorised owner access to those identifiers. No online service or safeguard guarantees complete security.

Report suspected exposure or misuse promptly to vloopsupport@gmail.com. If a personal-data incident occurs, we will assess it, take appropriate steps and make notifications required by applicable law. Do not send passwords, verification codes or full payment-card details in an incident report.

13. Changes and contact

We will identify the effective date of updates, give appropriate notice of material changes and obtain additional consent where required. New age-verification providers, advertising tracking, prize-payment processing or other materially different uses require corresponding disclosures before those activities begin.

For privacy questions, access requests, corrections, deletion, guardian concerns or complaints, contact TOPOTRADE LLC FZ, Meydan Free Zone, Dubai, United Arab Emirates, at vloopsupport@gmail.com.

Feedback edits, withdrawal and personal summaries

You can add up to ten separate comments, bugs or suggestions to one test. An accepted response can be edited or withdrawn before the competition’s original deadline, unless it has already been scored. Other feedback may be edited while it is eligible for editing. Withdrawal stops it counting as accepted feedback and prevents another test of the same project; it does not erase historical records. Contact support about privacy or deletion requests.

We keep previous text revisions, internal account references and edit dates with retained feedback for review, disputes and result integrity, under the existing feedback and backup retention rules. Replacing an upload replaces its current stored file; active uploads and filenames are removed when the submitting account is closed, subject to existing backup retention and applicable lawful exceptions. An aggregate count of submitted tester reports can be shown to testers without exposing other testers’ answers or identities.

When you request a personal AI summary, the written feedback fields and optional written reports entered in the form are supplied to our AI provider under section 7. Uploaded document and screenshot contents are not supplied to this summary. Cached summaries are removed when feedback is edited or withdrawn, or the submitting account is closed. AI summaries are advisory; report-entry counts are calculated from your entries and do not prove the number of unique or verified bugs.

Custom questions, testing devices and feedback downloads

Creators may add up to three optional written questions. We store those questions and each tester’s answers with their feedback so later question edits do not alter an old response. Answers are visible to that tester, the relevant creator and authorised reviewers. They may be supplied to the feedback-review AI under section 7. Do not request or provide passwords or unnecessary private information.

Creators can restrict a project to a testing device. Testers choose their device when reserving a place; this is a self-declaration, not device verification. We retain it with the test session and associated feedback records. Browse device choices filter projects; they do not inspect the physical device. Device and question changes require review again and stay fixed during a funded competition.

Creators can download their project’s accepted feedback as a CSV file, including questions, answers, ratings, device declarations, dates and feedback status. The export excludes tester emails and private payment details. A creator must protect downloaded copies and use them only for the purposes described in section 12 of the Terms. Downloaded copies are outside Vloop’s direct storage and backup controls. Existing feedback and privacy-request retention rules continue to apply.

Project screenshots, saved projects and update notifications

Feature information added 13 October 2026. Uploaded screenshots, captions and creator update messages form part of project information and can be visible when a project is approved. Added screenshots are available to the creator and authorised reviewers while approval is pending. Avoid including private information in images. Screenshots are stored with the project in our hosted database and backups.

We store which projects you save, when you save them, notifications addressed to your account and whether you mark them as read, to provide your private saved list and in-account updates. Saving a project follows future creator-published updates; removing it stops future update notices. Creator changes to the status or note on your own valid feedback can also produce an in-account notification. These features do not send marketing emails or request desktop notification permission. Current notification history is limited to the latest 200 notices per account. Saved lists and notification history are removed from the current database when that account is closed. Creator screenshots and update messages are removed from the current database when the creator closes their account; backup retention remains as described in section 10. Feedback and necessary associated records remain subject to the existing retention rules.

Support messages and mailbox connection

Vloop bug reports can also include the selected Vloop screen, what happened, steps to reproduce the issue and an optional expected result. These are support messages in the same owner inbox; they do not automatically send email or collect a screenshot, browsing history or private URL.

Messages submitted through Contact support are stored with a contact email, message text and, when signed in, an internal account reference. They are available only to verified company Owner accounts for handling complaints and support. Do not include passwords, codes or payment documents. Necessary support records are retained while needed to resolve the matter and related disputes; there is no general automatic expiry currently configured. Privacy requests are assessed according to applicable rights.

When the company connects its dedicated vloopsupport@gmail.com mailbox through Google, verified Owner accounts can read received support emails and send replies from that mailbox in Vloop. Gmail authorisation tokens are stored encrypted. Email text is displayed without executing email HTML, attachments or remote images. Mailbox contents and complaints are not supplied to the project-review AI. Vloop requests Gmail read and send access only for the dedicated company mailbox; personal customer mailboxes are not connected. Direct emails remain in Gmail until that connection is completed. Google processes email under its own privacy terms.

14. Competition and PayPal prize information

We store competition payment quotes, amounts, original and extended deadlines, tester targets, revisions, accepted rules and country declarations, qualifying feedback references, scores and review reasons, results, notices and their first-open time, appeals, awards, fee acceptance, and checked payout status history. These records administer competitions, refunds, eligibility, human reviews and money owed. Email notices do not contain private PayPal recipient identifiers.

When a winner is ready, we collect their own PayPal email, account country and ownership confirmation. Recipient details are encrypted in the database and accessible only to verified company Owner accounts with password confirmation and an access record. Details are supplied to the company PayPal payout service for the requested payment; they are not sent to the feedback-review AI, other customers or project creators. Vloop does not request a PayPal password, a customer bank account number or identity documents through this form.

Recipient details are retained while needed for an unpaid claim and removed from the current database after checked successful recipient credit. A failed or returned payment leaves the award owed; a return after deletion may require secure resubmission. No automatic expiry applies merely because PayPal is not ready. Necessary financial, acceptance and status records follow section 10; the seven-year financial rule does not automatically apply to all recipient details or feedback. Backups have the separate retention in section 10. Any old practice recipient records keep their original safeguards and are not reused for new competitions. Contact support to request access, correction or erasure; an unpaid prize does not remove privacy rights or silently disappear upon a privacy request.