Privacy Policy

Algoreach (algoreach.ai) is a product of AI Empowerment Limited, trading as Algominds, a company registered in England and Wales (company number 15515185) with its registered office at 124 City Road, London EC1V 2NX, United Kingdom. For the purposes of UK data protection law (the UK GDPR and the Data Protection Act 2018), AI Empowerment Limited is the controller of the personal data described in this policy.

You can contact us about anything in this policy at eddie@algominds.ai.

We collect and process the following categories of personal data:

• Account data — your email address, authentication identifiers, and your subscription and billing status.
• Profile data you submit — the LinkedIn profile URL you paste into Algoreach and the publicly available profile information we retrieve from it (such as your name, headline, work history and education), together with the outreach goal you tell us about.
• Third-party professional contact data — business contact information about prospective recipients of your outreach (such as name, job title, employer, publicly available professional profile information and business email address), which we obtain from public sources and the data providers listed in section 4 and process on your behalf and on your instructions.
• Connected account data — if you connect a Gmail, Outlook or LinkedIn sending account, we store the credentials needed to send the messages you approve and to detect replies to your outreach (encrypted at rest). We access your connected mailbox only to send your outreach and to read replies to those threads — never to read, search or use the rest of your inbox.
• Usage and technical data — IP address (stored in salted-hash form for abuse prevention), browser and device information, and product usage events.
• Payment data — payments are processed by Stripe. We never see or store your full card number.

Under Article 6 of the UK GDPR, we rely on the following lawful bases:

• Performance of a contract (Article 6(1)(b)) — to create and run your account, retrieve and analyse the profile data you submit, generate your outreach, and provide the service you signed up for.
• Legitimate interests (Article 6(1)(f)) — to process third-party professional contact data so that we can identify relevant decision-makers and deliver business-to-business outreach on your behalf; and to prevent abuse of the service, keep it secure, and improve it. We have assessed that this processing, which concerns professional (not private) data used for relevant B2B contact, does not override the rights and interests of the individuals concerned, who can object at any time (see section 7).
• Consent (Article 6(1)(a)) — where you choose to connect a Google or LinkedIn account, and for any optional marketing communications. You can withdraw consent at any time.
• Legal obligation (Article 6(1)(c)) — to keep records we are required to keep, for example for tax and accounting purposes.

We use a small number of service providers (processors and sub-processors) to run Algoreach. Each processes personal data only on our instructions and under contractual data-protection terms:

• Supabase (hosted on AWS, eu-west-2 / London) — database, authentication and backend functions.
• Stripe — payment processing and billing.
• Bright Data — retrieval of publicly available professional profile information.
• Exa — search for relevant people and companies.
• Anthropic — AI drafting of your outreach copy.
• Findymail — discovery and verification of business email addresses.
• Resend — transactional emails from us to you.
• Outreach delivery infrastructure — securely sending your outreach from your own connected email and LinkedIn accounts, and detecting replies, on your behalf.
• Vercel — website hosting.

Algoreach's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We do not sell personal data, and we do not share it with anyone other than the providers above except where the law requires.

• Anonymous preview data — if you try Algoreach without an account, the profile preview we generate is cached for 7 days and then deleted.
• Account data — kept for as long as your account is active, and deleted when you delete your account or ask us to.
• Records we must keep — some records (for example billing records) are retained for longer where the law requires.

Some of the providers in section 4 process data outside the United Kingdom, including in the United States. Where personal data leaves the UK, we rely on UK adequacy regulations where they apply, and otherwise on the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, together with appropriate supplementary safeguards.

Under the UK GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict our processing of your data;
• object to processing based on legitimate interests — including, if you have been contacted through Algoreach and would prefer not to be, asking us to suppress your details from future outreach;
• receive a copy of data you provided to us in a portable format; and
• withdraw any consent you have given, at any time.

To exercise any of these rights, email eddie@algominds.ai. We respond within one month. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or, if you are outside the UK, to your local supervisory authority.

All data is encrypted in transit. Connected-account credentials are encrypted at rest. Access to production systems is restricted, and our backend enforces per-user data isolation so that one user can never read another user's data.

Algoreach is a professional tool intended for users aged 18 or over. We do not knowingly collect personal data from children.

We will post any changes to this policy on this page and update the date at the top. If a change materially affects how we process your data, we will notify you by email before it takes effect.