Privacy policy
1. Who We Are
This policy covers the processing of personal data by Algopera.
- Name: LLC Algopera
- Legal entity ID: 406552706
- Address: Georgia, Tbilisi, Isani district, Vazisubani IV microdistrict, Block I, Building 8, Floor 7, Apt. 126
- Email: privacy@algopera.ai
We are the party responsible for processing your personal data.
2. What Data We Collect
Account data. First name, last name, email, mobile phone number, password (in encrypted form). For organisation registration — company name and legal entity ID. For individual registration — personal ID number.
Verification. The SMS code sent to confirm your mobile number.
Third-party sign-in. When you sign in with Google or Facebook, we receive your name and email from those services. We do not process your password in this case.
Usage data. The questions you ask and your conversation history. We store history only with your consent — you give consent in the chat and can delete a single session or all sessions at any time.
Technical data. IP address, device, browser, system logs.
Payment data. Card payments are processed through an external payment provider — we neither store nor see full card details. For bank transfers we process the payer's name and bank details. We keep a record of the payment, the amount, the date and the status.
Contact form. Name, email and the text of your message.
Newsletter. Email — only if you subscribe yourself.
3. Why We Process It (Legal Basis)
| Purpose | Legal basis |
|---|---|
| Creating your account and providing the service | Performance of a contract |
| Processing payments and accounting | Performance of a contract and legal obligation |
| Security, fraud prevention and abuse prevention | Our legitimate interest |
| Improving the service and fixing defects | Our legitimate interest |
| Storing conversation history | Your consent only |
| Sending news and offers | Your consent only |
| Marketing cookies | Your consent only |
| Complying with statutory requirements | Legal obligation |
Where processing is based on consent, you can withdraw that consent at any time. Withdrawal does not affect processing carried out before it.
4. Data and Model Training
We do not use your data to train artificial intelligence (AI) models. Our models run on the Google Cloud platform, which under its enterprise terms does not use transmitted data to train Google's models. Your questions are not made public, are not indexed, and are not shown to other users.
5. Where Data Is Stored and How We Protect It
Data is stored in the EU, on Google Cloud infrastructure (region europe-west1). It is encrypted in transit (TLS) and at rest (AES-256).
External service providers assist us in delivering the service — hosting, payment processing and SMS verification. They process data only on our instructions and within the scope of this policy.
6. Who We Share It With
We do not sell your data.
We share it only with:
- our sub-processors — providers of hosting, payments and SMS verification, within the scope of service delivery;
- our professional advisers (lawyer, auditor, accountant) — as needed and under a duty of confidentiality;
- state authorities — only in cases provided for by law and after verifying the lawfulness of the request;
- a legal successor, in the event of reorganisation, merger or sale of the company, with the terms of this policy preserved.
We do not pass data to third parties for advertising purposes, except where you yourself give consent to marketing cookies (see Section 10).
Transfers outside the EU and Georgia. The parent companies of our sub-processors are registered in the USA. Where data is transferred to those countries, this takes place only on the basis of appropriate legal safeguards.
7. Retention Periods
| Data | Period |
|---|---|
| Account data | For as long as the account is active + 30 days after deletion |
| Conversation history | Until you delete it; deleted together with the account |
| System logs | 12 months |
| Contact form messages | 24 months |
| Newsletter subscriber email | Until you unsubscribe |
| Cookie consent record | 12 months |
Accounting and tax-related records are kept for the period required by law.
Once the period expires, we delete or de-personalise the data.
8. Your Rights
Under the Law of Georgia on Personal Data Protection, you have the right to:
- be informed about what data we process and why;
- request a copy of your data (export);
- request correction or updating of inaccurate data;
- request deletion of your data;
- request suspension or blocking of processing;
- withdraw consent, where processing is based on consent;
- object to direct marketing — at any time, without giving reasons.
How: write to privacy@algopera.ai. We will reply within 10 business days. We may ask for additional information to verify your identity. We do not charge a fee for handling requests.
If our response does not satisfy you, you have the right to apply to the Personal Data Protection Service or to the courts.
9. Incident Response
We log every data security incident. If an incident could cause significant harm to your rights, we notify the Personal Data Protection Service within 72 hours of discovering it, and you as well where necessary.
10. Cookies
We use two categories of cookies:
- Essential — required for the site to work properly (authentication, security, remembering your settings). These cannot be switched off.
- Marketing — used to offer you products and services tailored to you. These are switched on only with your consent.
You can change or withdraw your consent at any time from the "Manage" button on the cookie banner.
11. Automated Decision-Making
Algopera provides you with information about tax legislation. The system does not make automated decisions about you that affect your rights or legal position. The final decision is always yours.
12. Changes
If we update this policy, we will publish the revised version on this page and update the date. We will notify you by email of material changes at least 14 days in advance.
13. Contact
For privacy matters: privacy@algopera.ai