Privacy Policy

This policy is written to be read, not skimmed past. It covers the almor.app website, your account, the dashboard, and the Almor agent service. The browser extension has its own policy, scoped to exactly what the extension does on your machine.

The short version

Your logins, cookies and sessions stay in your browser. We never receive them.
The page content the agent reasons over is sent encrypted, used to do the task you asked, and not stored. What we do keep is your chat with the agent and a log of what it has done for you, because that is your history: you can see it in the dashboard and it is deleted with your account.
Our servers hold only what the service needs to run: your account, the working knowledge your agent builds for you, and usage records for billing.
We do not sell your data, and there is no ad tracking.

Who we are

Almor is built and operated by Ludovico Pagano, based in Italy, who is the data controller for the personal data described here. For anything in this policy, write to hello@almor.app.

What we collect, and why

Early access list (legacy)

Before launch we collected email addresses on a waitlist. If yours is among them we keep it only to tell you about access, and you can ask off the list at any time. New signups create an account instead; no list is collected anymore.

Onboarding

When you get access, we ask a short set of questions about your goals and how you write, so your agent starts out sounding like you. If you paste writing samples, they are used once to set up your voice profile and then deleted. We keep the profile, not the samples.

Your account

We store your account profile and your plan, because that is how the service knows who you are and what you have paid for.

Your agent's working knowledge

As your agent works for you it builds up working knowledge on our servers, so it can pick up where it left off:

Skills, memory and routines: what it has learned about your voice, your audience, and the tasks you have set up.
Your chat history: what you asked and what the agent answered. The raw page content the agent read along the way is not part of this history.
Drafts awaiting your approval, and the decision you made on each one.
An interaction log: which posts and profiles the agent has already replied to, followed or visited on your behalf, so it does not repeat itself. This log holds public handles and links, nothing more.

All of it is yours, it is used only to run your agent, and it is deleted when your account is.

Usage and billing

We meter usage as token counts per model and keep a ledger of your credits, so billing is accurate and abuse is detectable. Payments are processed by Stripe. Your card details go to Stripe directly and never touch our servers.

Extension tokens

The extension authenticates to our backend with a token. We store only a hash of it. The plaintext token exists in your browser, not in our database.

What we never receive

Your passwords, cookies and login sessions stay in your browser. Almor works inside the sessions you are already logged into, so there is nothing to hand over and we have built it so there is no way to. Card numbers go to Stripe, not to us.

Page content and AI processing

When you give your agent a task, the extension sends the relevant page content and your instruction to our backend over an encrypted connection (TLS). Our backend passes it to Anthropic's API, the AI service that does the reasoning. This content is processed to complete your task and is not stored in our database. Anthropic processes this content as our processor, on our instructions. Under their commercial terms they do not train their models on it, and they delete API inputs and outputs within 30 days, unless their safety systems flag the content or the law requires them to keep it. In the Chrome Web Store build, page text also goes through a local redaction step on your device before it is sent, described in the extension policy.

You direct where it goes

Almor goes where you send it. You choose the sites and accounts it works on. If you direct it to a place that contains sensitive or third-party information, such as your email inbox, that is your choice and its consequences are yours. Almor will process what you pointed it at, to do the task you asked, and nothing more.

Legal bases

Under the GDPR, we process your data on three bases:

Contract, for everything needed to provide the service: your account, your agent's working knowledge, billing.
Legitimate interest, for security, usage metering and abuse prevention.
Consent, for the legacy early access list and any email you have opted into. You can withdraw it at any time.

How long we keep things

Legacy early access email: until you get access, unsubscribe, or ask us to remove it.
Pasted writing samples: deleted right after your voice profile is set up.
Account profile and agent knowledge: for the life of your account, deleted with it.
Chat history, interaction log, drafts and approvals: for the life of your account, deleted with it.
Usage and credit records: deleted with your account. Invoices live in Stripe, which keeps them for as long as tax law requires.
Hashed extension tokens: until revoked or expired.
Page content sent for reasoning: not stored by us; deleted by Anthropic within 30 days.

Who processes data for us

We use a small set of processors, each for one job, each bound by a data processing agreement:

Supabase (database, hosted in the EU): your account and your agent's working knowledge.
Anthropic (US): AI processing of the content your agent reasons over. Not stored by us. Anthropic does not train on it and deletes it within 30 days, with narrow exceptions for safety-flagged content.
Stripe (US): payments. For payment data Stripe acts as its own controller under its own privacy policy.
Resend (US): transactional email, such as the confirmation when you delete your account.
Vercel (US): website hosting.
Railway (US): backend compute.
Google: only if you choose to sign in with Google. We receive your name and email address from your Google account; we never see your password.

None of them may use your data for their own purposes. We do not sell your data, and nothing is shared with advertisers, data brokers, or anyone else.

International transfers

Our database is hosted in the EU. Some of our processors are based in the United States: Anthropic, Stripe, Vercel, Railway and Resend. Every transfer out of the EU is covered by the European Commission's Standard Contractual Clauses, built into each provider's data processing agreement. Stripe, Vercel, Resend and Google are additionally certified under the EU-US Data Privacy Framework.

Tracking

The site runs no ad tracking and no third-party analytics scripts. Our hosting provider keeps standard server logs, as all hosting providers do.

Your rights

You can delete your account yourself, from the dashboard settings. It cancels any subscription, erases your data from our database, and removes your login. You do not have to email anyone or wait for anyone.

You can ask for a copy of your data, ask us to correct it, delete it, or hand it over in a portable format, and you can object to or restrict processing. Email hello@almor.app and we will act on it. You also have the right to complain to your data protection authority. In Italy that is the Garante per la protezione dei dati personali.

Changes

If this policy changes in a way that matters, we will tell you by email or with a notice on the site before the change takes effect.