Privacy Notice

1. Who we are

Algomy is operated by Garrett Lucas, an individual sole proprietor. For the purposes of applicable data-protection law, Garrett Lucas is the data controller of personal data collected through the Service.

2. Personal data we collect

• Account data: name, email address, hashed password, and login provider identifiers (e.g. Google OAuth ID).
• Workspace and content data: assistants, knowledge documents, conversations, and other content you upload or generate.
• Support communications: messages you send us, including attachments.
• Usage and telemetry: logs of API calls, feature usage, error reports, approximate location derived from IP address, and device/browser identifiers.
• Billing data: collected by our payment provider (see "Sharing" below). We store subscription status, plan, and a customer identifier. We do not store full card details.

3. Why we use it

• To create and manage your account and provide the Service (contract performance).
• To process AI requests you make (contract performance).
• To secure the Service and prevent fraud or abuse (legitimate interests).
• To improve the product, debug issues, and analyze aggregate usage (legitimate interests).
• To respond to support requests (contract performance / legitimate interests).
• To comply with legal, tax, and accounting obligations (legal obligation).
• To send transactional email (contract performance) and, only with your consent, marketing email.

4. Who we share it with

We share personal data only with the following categories of recipients:

• Paddle: our reseller and Merchant of Record for payments, subscription management, tax compliance, and invoicing.
• Infrastructure and subprocessors: cloud hosting, database, storage, email delivery, and AI-model providers used to operate the Service.
• Professional advisers: legal, accounting, and tax advisers where reasonably necessary.
• Authorities: where disclosure is required by law or to protect our rights, users, or the public.

We do not sell your personal data.

5. Retention

We keep personal data for as long as needed to provide the Service and to meet legal, tax, or accounting obligations. When it is no longer needed, we delete or anonymize it. You can request deletion of your account and associated data at any time.

6. Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict, or port your personal data, to object to processing, and to withdraw consent where processing is based on consent. If you are in the UK/EEA, you also have the right to lodge a complaint with your local data-protection authority. To exercise these rights, email privacy@algomy.ai.

7. International transfers

Data may be processed by service providers located outside your country. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

8. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and audit logging. No system is perfectly secure; please protect your credentials.

9. Cookies

We use essential cookies to sign you in and remember your preferences. If we add analytics or marketing cookies later, we will ask for your consent where required.

10. Contact

For privacy questions, contact privacy@algomy.ai.