Privacy Policy
This notice explains what personal data AlgoBuzz collects, why, who we share it with and the rights you have under India's Digital Personal Data Protection Act, 2023. It covers the AlgoBuzz website and the AlgoBuzz platform.
Draft for legal review. Items in square brackets are placeholders to be confirmed before launch.
1. Who we are
AlgoBuzz is operated by Algoroot Private Limited (CIN [CIN]), with its registered office at [REGISTERED ADDRESS], [CITY], [STATE] [PIN] ("AlgoBuzz", "we", "us"). For your account data and the data you create on the platform, we are the data fiduciary under the Digital Personal Data Protection Act, 2023 ("DPDP Act").
Questions about this notice go to info@algorootglobal.com. Our Grievance Officer is named in the section "Grievance Officer and the Data Protection Board".
2. Scope: your data and your customers' data
This notice covers two kinds of people. First, you: the business owner, marketer or team member who creates a AlgoBuzz account. Second, your customers: the people who comment on your posts, message your connected accounts or submit a lead that lands in your AlgoBuzz inbox.
For your customers' data we act as a data processor on your instructions. You decide what to collect and how long to keep it, and you remain responsible for giving them notice under the DPDP Act. We process it only to provide the service to you and never for our own marketing.
3. Personal data we collect
- Account data: your name, email address, mobile number, password (stored hashed) and, if you sign in with Google or another provider, the profile fields that provider shares.
- Business data: your business name, website, brand assets, product descriptions, tone of voice and anything else you add to your brand profile.
- Connected accounts: the access tokens, page and account identifiers that the social platforms issue when you connect Instagram, Facebook, LinkedIn, YouTube, X, TikTok, Threads or Pinterest. We store them encrypted and use them only to publish, read insights and fetch conversations for your workspace.
- Content you create: posts, reels, designs, campaign briefs, scripts and the prompts you give our AI features.
- Your customers' messages and leads: comments, direct messages, names, phone numbers and other details that arrive through your connected accounts or lead forms.
- Usage and device data: pages visited, features used, approximate location from IP address, browser and device type, and error logs, used to keep the service working and secure.
- Demo and contact requests: the name, mobile number, email and message you submit on our website.
We do not knowingly collect sensitive personal data such as financial account numbers, health data, biometrics or caste or religious information, and we ask you not to add it to the platform.
4. Why we use it and on what basis
- To provide the service you signed up for: creating content, publishing to your channels, running campaigns, managing your inbox and producing reports.
- To run your account: sign-in, security alerts, billing and GST invoicing, support.
- To improve the product: understanding which features are used and fixing errors, using aggregated or de-identified data wherever possible.
- To tell you about the product: only with your separate, optional consent, which you can withdraw at any time.
- To meet legal obligations: tax law, court orders and lawful requests from Indian authorities.
Our lawful basis is your consent, given when you create an account and when you connect each channel, plus the "legitimate uses" the DPDP Act allows under section 7, such as data you provide voluntarily for a specified purpose and compliance with law. You can withdraw consent at any time from your account settings or by writing to info@algorootglobal.com; withdrawal does not affect processing that already happened and may mean we cannot provide parts of the service.
5. How our AI features use your data
AlgoBuzz uses third-party AI models to draft text, images, scripts and voiceovers from the brand profile, briefs and prompts you give it. The content you send to these features, and only that content, is passed to the AI providers listed under "Sub-processors". We instruct them not to use your data to train their models.
AI output is a draft for you to review. We do not use AI to make decisions about you that have a legal or similarly significant effect, and we do not profile your customers.
8. Transfers outside India
Some sub-processors, in particular the AI model providers and the social platforms, process data outside India. Section 16 of the DPDP Act permits transfers to any country the Central Government has not restricted. We keep data in India wherever the service allows and require every provider to protect your data to at least the standard in this notice.
9. How long we keep it
- Account and business data: for as long as your account is active and for 90 days after you close it, so you can change your mind.
- Connected-account tokens: until you disconnect the channel or close the account, whichever is first.
- Your customers' conversations and leads: for as long as you keep them in your workspace. You can delete them at any time.
- Demo and contact requests: 12 months.
- Logs and security records: at least one year, as required for security and legal compliance.
After these periods we delete or irreversibly de-identify the data, unless the law requires us to keep it longer.
10. How we protect it
We use encryption in transit and at rest, hashed passwords, role-based access inside each workspace, access logging, and regular reviews of who on our team can reach production data. No system is perfectly secure, so please use a strong password and remove team members who leave.
11. Your rights
Under the DPDP Act you may:
- Ask what personal data we hold about you and how we use it.
- Correct, complete or update it.
- Ask us to erase it, unless we must keep it by law.
- Withdraw consent at any time.
- Nominate a person to exercise these rights for you if you are unable to.
- Raise a grievance with us and, if unresolved, with the Data Protection Board of India.
Most of this you can do yourself in your account settings. For anything else, write to info@algorootglobal.com with the email address on your account. We respond within 30 days, and sooner where the law requires it.
12. Children
AlgoBuzz is a business tool for people aged 18 and over. We do not knowingly create accounts for children and we do not track, profile or target advertising at anyone we know to be under 18. If you believe a child has given us personal data, write to info@algorootglobal.com and we will delete it.
13. If something goes wrong
If a personal data breach affects you, we will tell you and the Data Protection Board of India without delay, explain what happened and what we are doing about it, and give you a contact for questions, as the DPDP Act and Rules require.
14. Grievance Officer and the Data Protection Board
Grievance Officer: Harish Singh, info@algorootglobal.com, [GRIEVANCE PHONE], [REGISTERED ADDRESS], [CITY], [STATE] [PIN].
We acknowledge grievances within 48 hours and aim to resolve them within 30 days. If you are not satisfied, you may complain to the Data Protection Board of India.
15. Changes to this notice
When we change this notice we will update the date at the top and, for material changes, tell you by email or inside the product before they take effect.
16. Contact
Algoroot Private Limited, [REGISTERED ADDRESS], [CITY], [STATE] [PIN]. Email: info@algorootglobal.com.