Legal

AlgoDriven Group Privacy Policy

This policy does not cover DriveExpert. A copy of the DriveExpert privacy policy can be found here.

Effective date: 19 December 2025  ·  Last updated: 28 September 2026

This Privacy Policy explains how the AlgoDriven group of companies ("AlgoDriven", "we", "us", "our") collects, uses, stores and discloses personal information across all AlgoDriven products, platforms and services (together, the "Services").

This policy is intended to align with applicable privacy and data protection laws in jurisdictions where AlgoDriven operates, including Australia, the United Arab Emirates, Hong Kong and the United States.

1. Who we are

AlgoDriven operates through multiple related entities globally. The entity you contract with will be identified in your customer agreement or order form.

Key entities include (non-exhaustive):

  • AlgoDriven Limited (Hong Kong) - 50 Stanley St, Central, Hong Kong
  • AlgoDriven DMCC (United Arab Emirates) – Cluster F, JLT, Dubai
  • AlgoDriven Pty Ltd (Australia) – PO Box 910, Paddington, Qld, 4064
  • AlgoDriven America Inc. (United States)

Privacy Officer: privacy@algodriven.xyz

2. Scope of this policy

This policy applies to all AlgoDriven Services, including but not limited to EvalExpert and other current or future software products, APIs, mobile applications, web portals, integrations and support services.

3. What personal information we collect

Depending on the Service and context, we may collect the following categories of information:

A. Customer and account information

  • Name, email address, phone number (including a mobile number you provide for SMS verification and password reset codes)
  • Business name, role and contact details
  • Account credentials and authentication data

B. Vehicle and inspection data (e.g. EvalExpert)

  • Vehicle identification number (VIN)
  • Registration or plate number
  • Vehicle make, model, year and condition data
  • Vehicle photos and inspection images

C. End-customer information (where provided by customers)

  • Customer contact details
  • Transaction or appraisal-related information

D. Usage, analytics and technical data

  • IP address and device identifiers
  • Browser and operating system information
  • Application usage, logs, diagnostics and analytics

E. Communications

  • Support requests, emails and correspondence

We do not intentionally collect sensitive personal information unless required for a specific product feature and supported by appropriate notices and safeguards.

4. How we collect personal information

We collect personal information directly from customers and users, automatically through use of our Services, from customers who input data into our platforms, and through integrations enabled by customers.

5. How we use personal information

We use personal information to:

  • Provide, operate and improve our Services
  • Manage customer relationships and support
  • Perform analytics and product development
  • Maintain security, audit trails and fraud prevention, including sending one-time passcodes and password reset codes by SMS
  • Comply with legal and regulatory obligations

6. Disclosure of personal information

We may disclose personal information to service providers, professional advisers, related companies within the AlgoDriven group, government authorities where required, and parties involved in corporate transactions. Mobile numbers and SMS opt-in data are not shared with third parties or affiliates for marketing or promotional purposes (see section 11). The above excludes text messaging originator opt-in data and consent; this information will not be shared with any third parties.

When you connect your AlgoDriven account to a third-party AI assistant (for example, Claude), we share the specific records you request with the provider of that assistant so that it can generate your response. These providers currently include Anthropic, PBC; OpenAI, L.L.C.; Groq, Inc.; and Anysphere, Inc. (maker of Cursor), each located in the United States; each receives the data directly and processes it in accordance with its own privacy policy and terms, which we encourage you to review. Any such connection uses your own AlgoDriven credentials and access permissions and does not extend them, and you may disconnect it at any time through the assistant’s settings or by revoking access in your AlgoDriven account.

7. International data transfers

AlgoDriven operates internationally. Personal information may be stored in, processed in, or accessed from jurisdictions outside the country in which it was collected.

Relevant jurisdictions include:

  • Australia
  • United Arab Emirates
  • Egypt
  • Philippines
  • Hong Kong
  • United States

Where required, we implement contractual and technical safeguards designed to ensure personal information is protected in accordance with applicable laws, including the Australian Privacy Act, UAE Federal Decree-Law No. 45 of 2021 (PDPL), US state privacy laws (such as the CCPA/CPRA where applicable), and Hong Kong’s Personal Data (Privacy) Ordinance.

8. Data security and retention

We take reasonable technical and organisational measures to protect personal information, including encryption, access controls, logging and monitoring.

Personal information is retained only for as long as necessary for the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

9. Your rights

Depending on your jurisdiction, you may have rights to request access to, correction of, or deletion of your personal information, and to object to or restrict certain processing.

Requests can be made by contacting our Privacy Officer at privacy@algodriven.xyz. We may need to verify your identity before responding.

10. Complaints

If you believe we have breached applicable privacy laws, you may lodge a complaint by contacting us at privacy@algodriven.xyz. We aim to acknowledge complaints within 7 days and resolve them within 30 days.

11. SMS text messaging (United States)

AlgoDriven America Inc. sends SMS text messages to mobile numbers in the United States solely for account security: one-time passcodes (OTP) to verify your identity when you sign in, and codes or links to reset a forgotten password. We do not send marketing or promotional text messages.

  • What we collect: the mobile number you provide, your consent to receive SMS messages (including the time of consent and the number and account it relates to), your STOP/START/HELP replies, and delivery status and metadata for messages sent to you.
  • How you opt in: by entering your mobile number on the AlgoDriven sign-in, account security or password reset screens and requesting a code by text message, after being shown the SMS disclosure described in our SMS Terms. Consent to SMS is not a condition of purchase.
  • Message frequency and costs: message frequency varies and depends on your sign-in and password reset activity. Message and data rates may apply.
  • How to opt out or get help: reply STOP to any message to opt out, or HELP for help. You can also contact privacy@algodriven.xyz. See our SMS Terms.
  • Sharing: no mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. We use Twilio Inc., a messaging service provider, to deliver SMS messages on our behalf, and it may process your mobile number and message content only for that purpose. We may also disclose information where required by law.
  • Retention: we retain SMS consent records and message logs for as long as necessary for security, audit and legal compliance purposes, in line with section 8.

The full terms of our SMS program are in our SMS Terms & Messaging Policy.

12. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be published on our websites and platforms.