ALGORA SA

PRIVACY POLICY

Version of 28/10/2026

1. Who we are

This privacy policy explains how ALGORA SA, whose registered office is located at 2, Rue du Fort Wallis, L-2714 Gare Luxembourg, G-D de Luxembourg and registered with the RCS under number B288571 ("Algora", "we"), handles personal data when you use the Algora platform at app.algora.lu (the "Platform") and the Algora Sync add-in for Microsoft Excel ("Algora Sync"). Algora is the controller of this personal data within the meaning of the General Data Protection Regulation (EU) 2016/679 ("GDPR").

2. The Platform

2.1. We process the data you give us when you use the Platform: your name, work email address, company, and the content you upload or create (files, chats, workflows and their results).

2.2. We also process technical data needed to run the service securely: sign-in records, the date and time of actions, and error logs.

2.3. We use this data to provide the Platform, keep it secure, support you, and meet our legal obligations. The legal basis is the performance of the contract with you or your employer (Article 6(1)(b) GDPR) and our legitimate interest in operating a secure service (Article 6(1)(f) GDPR).

3. Algora Sync for Excel

3.1. Algora Sync keeps an Excel workbook and a file in your Algora account equal, in both directions. It only works with a file you choose to link, using a one-time code you create in the Platform.

3.2. When you use Algora Sync, we process:

  • the content of the linked workbook, which the add-in sends to your Algora account and which replaces the linked file there;
  • a copy of the last version sent from Excel, used only to work out which cells changed in Algora since then;
  • the one-time link code, which expires after 15 minutes or once it is used;
  • a device token that identifies the linked Excel. We store only a one-way hash of it; the token itself stays on your computer, in Excel's add-in storage;
  • the date and time of the link and of the last sync.

3.3. Algora Sync does not read other workbooks, does not collect your Microsoft account details, and contains no advertising, analytics or tracking.

3.4. The workbook stores a random link identifier in its own settings so the add-in can recognise it. This identifier contains no personal data.

3.5. Algora Sync data is used only to keep the linked file in sync. The legal basis is the performance of the contract (Article 6(1)(b) GDPR).

4. Where the data is stored

4.1. Data is hosted on Google Cloud in the European Union (region europe-west1, Belgium). Google acts as our processor under a data processing agreement.

4.2. We do not sell personal data and do not share it with third parties for their own purposes. We disclose it only to our processors, under contract, or where the law requires it.

5. How long we keep it

5.1. We keep account data and content for as long as your account is active, then delete it within a reasonable period unless the law requires us to keep it longer.

5.2. For Algora Sync: unlinking the workbook in the Platform deletes the link and the device token hash at once. The copy of the last version sent from Excel is kept while the linked file exists in your Algora account. You can also remove the add-in from Excel at any time.

6. Your rights

6.1. You may ask for access to, correction or deletion of your personal data, restriction of or objection to its processing, and a copy of it in a portable format.

6.2. To exercise these rights, write to info@algora.lu. You may also lodge a complaint with the Commission nationale pour la protection des données (CNPD), Luxembourg (cnpd.public.lu).

7. Security

We protect personal data with encryption in transit (HTTPS) and at rest, access controls, and regular reviews of our systems.

8. Changes

We may update this policy. The version date at the top shows when it last changed. Significant changes are announced in the Platform.

9. Contact

ALGORA SA, 2, Rue du Fort Wallis, L-2714 Gare Luxembourg, G-D de Luxembourg - info@algora.lu