Privacy Policy

1. Who is responsible

Algohorse is the data controller for personal data processed through the Service. For any privacy question, or to exercise the rights below, email hello@algohorse.com — that address reaches the person responsible for data protection here. You can also use our contact page.

We are not required to appoint a statutory Data Protection Officer and have not appointed one; we say so plainly rather than implying otherwise.

2. What we collect

• Account data — email, password (hashed), plan and billing status.
• Usage data — pages viewed, tips opened, device/browser info.
• Payment data — handled by our payment processor; we don't store full card details.
• Communications — messages you send us.

2a. How long we keep it

• Account data — for as long as you have an account, then 12 months after you close it, so we can handle any billing or dispute that follows.
• Billing records — 6 years from the end of the tax year they relate to, because HMRC requires it.
• Usage analytics — 26 months, in aggregate form.
• Support messages — 24 months from the last message in the thread.
• Marketing consent and unsubscribe records — kept for as long as we send marketing, plus 2 years, so we can prove we honoured your choice.

2b. Where your data goes

Some of the providers we use to run the Service — authentication, payments, transactional email, hosting and error monitoring — process data outside the UK, including in the United States. Where that happens we rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or on UK adequacy regulations where they apply, and we require appropriate technical and organisational safeguards. You can ask us for details of the transfer mechanism for any specific provider at hello@algohorse.com.

3. How we use it

To provide and improve the Service, process payments, send service and (with consent) marketing messages, ensure security, and comply with legal obligations.

4. Legal bases (UK GDPR)

Contract (to provide the Service), legitimate interests (to secure and improve it), consent (analytics & marketing), and legal obligation (records).

5. Sharing

We share data only with processors who help us run the Service (e.g. hosting, payments, email, analytics), under appropriate agreements — never sold.

6. Retention

We keep personal data only as long as needed for the purposes above or as required by law, then delete or anonymise it.

7. Your rights

You can access, correct, delete or port your data, object to or restrict processing, and withdraw consent at any time. To exercise these, contact us. You may also complain to the ICO (ico.org.uk).

8. Cookies

See our Cookie Policy for what we set and how to manage consent.

9. Changes

We'll post updates here and, where significant, notify you directly.