Legal Document
This policy explains exactly what data Algorei collects, who it is shared with, and how long it is kept.
Table of Contents
Algorei is an AI-powered automation and CRM platform for service businesses, operated from Istanbul, Turkey. When you use Algorei as an account holder, we are the data controller for your personal data. When your clients submit information through tools you deploy using Algorei - such as a booking page or embeddable contact form - we process that data as a data processor on your behalf. Section 4 explains this distinction in detail.
This policy applies to all visitors to algorei.com and to all registered Algorei accounts. If you have questions, contact us at contact@algorei.com.
Account information. When you create an account we collect your first name, last name, and email address, and optionally your company name.
Profile and settings. Once you have an account you may configure a sender name, custom sending email address and domain, booking page settings, and third-party integration credentials. These are stored in your account record.
CRM and contact data. When you add contacts to the CRM, we store the name, email, phone, company, notes, and status you provide. This data is associated with your account only.
Booking data. When someone books a meeting through your Algorei booking page, we collect their name, email, phone (optional), chosen date and time, and any notes they provide. A meeting link is generated and a confirmation email is sent.
Invoice data. The invoice tool stores client name, email, company, address, your business details, and the line items, amounts, and payment terms you enter.
Email outreach. When you send outreach emails through the platform, we record which contacts received which templates and the delivery status returned (delivered, bounced, or spam complaint).
Contact form submissions. When someone submits the public contact form at algorei.com/contact, we collect their first name, last name, email, company (optional), subject, and message. This is forwarded to us by email and is not stored in the database.
Embeddable form submissions. If you embed Algorei's lead capture form on your website, submissions include name, email, phone (optional), company (optional), and message. These are stored as contacts in your account and may trigger automated follow-ups you have configured.
AI receptionist call data. Enterprise clients with the AI Receptionist feature enabled have inbound calls handled and transcribed automatically. This produces call recordings, full transcripts, and extracted data such as the caller's name, phone number, and the purpose of their call. This data is stored in your account. You are responsible for informing callers that their call is being recorded and processed by an AI system.
SMS follow-ups. Enterprise clients who enable SMS follow-ups send messages to contact phone numbers. Recipient numbers and message content are processed by our SMS delivery partner to complete the send.
Session and security data. When you are logged in, we record your session including IP address, browser user agent, and last active time. We also maintain a security log of significant events such as login attempts and administrative actions.
Anonymous visitor analytics. For every page request to algorei.com, our server records the URL visited, referrer, IP address, and browser user agent. This occurs regardless of cookie preferences and is used for internal analytics and security monitoring.
AI chat widget. The AI assistant on the Algorei website is available to any visitor. Conversation messages are sent to our AI provider to generate responses. We do not permanently store chat conversations in our database.
We do not sell your data. We do not sell, rent, or share your personal data with advertisers or use it to build advertising profiles.
We do not train AI on your data. Your contact data, messages, and business information are not used to train any AI model.
When your clients submit information through tools you deploy using Algorei - such as a booking page or an embedded contact form - Algorei processes that personal data on your behalf. In that context, you are the data controller and Algorei is the data processor.
As processor, we handle end-customer data only as necessary to operate the features you have configured. We do not use your clients' data for our own purposes.
As controller, you are responsible for having a valid lawful basis to collect your clients' data, for informing them of how their data will be used, and for responding to any data subject rights requests they raise with you.
Clients who need a formal Data Processing Agreement (DPA) may request one at contact@algorei.com.
We keep data only as long as needed to operate the service or comply with legal obligations.
| Data Type | Retention Period |
|---|---|
| Account and profile data | While your account is active. Deleted within 30 days of account closure on request. |
| Contact records, bookings, invoices | While your account is active. Deleted 30 days after account termination. |
| Call recordings and transcripts | While your account is active. Deleted 30 days after account termination. |
| Security logs and session records | 12 months |
| Anonymous visitor analytics | Up to 12 months |
| Outreach campaign records | While your account is active. |
| Contact form submissions | Not stored in database. Forwarded by email only. |
To request deletion of your data, contact contact@algorei.com. We will respond within 30 days.
We honour the following rights for all users regardless of jurisdiction.
KVKK (Turkey - Law No. 6698). You have the right to know whether your personal data is being processed, request information about processing, know the purpose and whether it is being used as intended, know whether data is transferred abroad, request correction of inaccurate data, request deletion or destruction, object to automated processing outcomes that are to your detriment, and seek compensation for unlawful processing.
GDPR (EU and UK). You have the right to access, correct, and erase your personal data; restrict or object to processing; data portability; and to withdraw consent where processing is consent-based.
CCPA (California). You have the right to know what data we collect and how it is used, request deletion, and opt out of the sale of personal data. Algorei does not sell personal data.
How to exercise your rights. Email contact@algorei.com with your name, registered email, and a description of the right you wish to exercise. We will respond within 30 days and may ask you to verify your identity before acting.
Right to complain. If you believe we have not handled your data correctly, you may lodge a complaint with the data protection authority in your jurisdiction.
Algorei is based in Turkey. The third-party infrastructure and service providers we use to operate the platform are primarily based in the United States. Where data is transferred from the European Economic Area or the United Kingdom, we rely on our providers' standard contractual clauses or other approved transfer mechanisms. You can request information about specific transfer mechanisms by contacting contact@algorei.com.
Algorei is a business platform intended for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, contact contact@algorei.com and we will delete it promptly.
We will update this policy as our practices change. For material changes - such as adding a new category of third-party service that receives personal data - we will notify registered users by email before the change takes effect. The effective date at the top of this page always reflects the most recent update.
Continued use of the platform after a material change constitutes acceptance of the updated policy. If you do not accept a change, you may close your account by contacting us.
For privacy questions, data subject rights requests, or to request a Data Processing Agreement:
© 2026 Algorei. All rights reserved.