Privacy Policy

1. Information we collect

We collect account and workspace information that you provide, such as your name, email address, organization, project details and content instructions. When you choose to connect a social account — a Facebook Page, an Instagram professional account or a YouTube channel — we receive only what the permissions you approve on that platform’s own authorization screen make available. Depending on those permissions this can include: the account, Page or channel identifier and its public profile details; the name and profile picture of the person authorizing the connection; the list of Facebook Pages that person manages, so you can choose which one to connect; the posts, videos and Reels published by the connected account, with their captions, links and thumbnails; performance and audience metrics for those posts and for the account as a whole; comments left on the connected account’s own posts; posts that visitors publish to a connected Facebook Page; and, for Instagram professional accounts, the direct-message conversations sent to that account so you can answer them inside Algoo.

We also collect limited technical and usage information needed to secure, maintain and improve Algoo, such as device information, authentication events and feature usage.

Mobile app information and permissions

The Algoo client application (com.algoo.xscade) collects the account information you submit; workspace profiles, brand details and optional addresses; project chat messages and attachments; videos, photos, logos, face references, scripts and designs you upload or create; service orders, payment status and wallet history; and the social-account information described above. Device notification tokens, app/device details and operational logs support notifications, call delivery, reliability and security. Payment processors handle checkout credentials; Algoo stores order and transaction references and status.

Camera and photo access are used when you choose to capture or select media or scan a workspace invitation. Microphone and speech-recognition access support calls and dictation. Dictation may be processed by your device’s speech-recognition provider. Optional location access helps find your city; you may enter it manually instead. We do not request background location. You can change permissions in your device settings; declining an optional permission does not prevent use of unrelated features.

Project calls are recorded using LiveKit and stored in private object storage. Calls are between a customer and the assigned account manager. Account managers and administrators can review recordings and may explicitly share them with the assigned editor for the project. Do not join a recorded call if you do not agree to recording; use project chat or contact support instead.

2. How we use information

We use information to authenticate users; provide social-account connections; display insights; support content planning; generate context-aware assistance; prepare and publish content at an authorized user’s request; coordinate editing and video production; provide support; protect the service; and comply with legal obligations.

Algoo AI may use information from your workspace and connected accounts to provide recommendations relevant to your business. We do not use one client’s private workspace information to provide another client’s recommendations.

3. Social-platform information

Social connections use the official authorization process provided by the relevant platform. Algoo does not ask for or store your social-media password. Access is limited to the permissions shown during authorization. You may disconnect an account to stop future access.

Algoo does not sell Platform Data. We do not use connected-account information for unrelated advertising, and we do not share it except with service providers acting on our instructions, when you direct us to do so, or when required by law.

Information obtained from Meta’s platforms is used only to provide the features you asked for, to the customer who connected that account: showing how the account and its posts are performing, informing the content recommendations Algoo AI makes for that customer, letting the customer read, reply to, hide, like or delete comments on their own posts, letting them answer Instagram direct messages sent to their own account, and publishing content they have written and approved. Comments and messages are read to be shown and answered inside Algoo; they are not used to train models, are not combined across customers, and are not transferred to data brokers. Meta information is deleted when you disconnect the account, when your Algoo account is deleted, and when Meta sends us a data-deletion callback.

AI data sharing

When you enable AI processing, Algoo may send your prompts, selected media and face references, relevant project messages, brand and workspace context, and connected-account insights to Google Gemini, OpenAI or Moonshot AI (Kimi) to generate, refine, moderate or retrieve content, and project chat messages and revision notes may be sent to TypeSafe to check them for contact details, suggest next steps and give feedback on revision notes. Depending on the feature and configured provider, scripts may be sent to Fish Audio or ElevenLabs for generated speech and relevant search queries may be sent to Brave, Exa or Google for research. Algoo asks for permission before the client initiates this processing. You can withdraw permission in the app’s Privacy and support settings. Withdrawing permission stops new AI requests initiated by this client; already submitted jobs may still finish. Contact us to request deletion of previously submitted data or to stop ongoing processing.

Only upload media and personal information you have permission to use, including permission from people whose likeness appears in face references. AI results can be inaccurate and should be reviewed before use. Report unsafe output through the in-app report control. We do not sell your private workspace content or use it to provide another customer’s results. Provider processing and retention must follow the settings and contractual terms applicable to the services we use.

4. Service providers and transfers

We use Supabase for authentication and database services, Cloudflare R2 for object storage, Apple Push Notification service and Google Firebase Cloud Messaging for notification delivery, LiveKit for project calls and recordings, Google Gemini, OpenAI, Moonshot AI (Kimi) and TypeSafe for AI processing, Fish Audio and ElevenLabs for generated speech, Brave, Exa and Google for research search, and Razorpay for eligible physical-goods and service payments. Meta and Google operate the social integrations you authorize. These providers may process information only to perform services for us and are subject to appropriate confidentiality and security obligations. Information may be processed in countries other than your own where our providers operate.

5. Retention and security

We retain account and workspace information while needed to provide your service. You can request permanent account deletion inside the app or from our Data Deletion page. Verified requests are completed within 30 days. We may retain limited transaction records required for accounting and tax, and narrowly necessary dispute or security records, for the applicable required period; these are restricted to those purposes. Backup copies expire through the backup retention cycle. Contact us for the retention period applicable to a particular record. Social authorization credentials are encrypted before storage, are never returned to the mobile or web applications, and are used only by our server-side integration. Disconnecting an account deletes the stored credentials along with the performance history and publishing history held for it. No system is completely secure, but we use reasonable organizational and technical safeguards appropriate to the information we handle.

6. Your choices and rights

You can review or update certain account information in Algoo, disconnect a connected social account at any time from Settings → Social accounts in the Algoo mobile application, and request access, correction or deletion of your information. Depending on your location, you may have additional privacy rights. We may need to verify your identity before completing a request.

For deletion instructions, visit our Data Deletion page.

7. Children

Algoo is a business service and is not directed to children. We do not knowingly collect personal information from children.

8. Changes to this policy

We may update this policy as Algoo evolves. We will post the revised version here and update the date above. Material changes may also be communicated through the service.

9. Contact

Questions, concerns and privacy requests can be sent to hello@algoo.app.