Privacy Policy

This policy explains how Algorabia LLC (“we”, “us”) handles personal data when you visit www.zakadev.com (the “Site”), book a call, buy a package or work with us.

The short version: we collect only what we need to sell and deliver your project. There’s no database on this Site, no ad trackers and no analytics cookies. We don’t sell or share your personal data for advertising.

1. Who’s responsible

The data controller is Algorabia LLC, a Wyoming limited liability company (Wyoming Secretary of State ID 2025-001770306) at 5830 E 2nd St, Ste 7000 #28603, Casper, WY 82609, USA. Contact for privacy questions: [email protected].

The business is operated from Morocco, so your data is accessed from Morocco as well as stored with the providers listed below.

When we work inside your systems and handle your customers’ personal data, you’re the controller and we act as your processor under our Terms of Service (Section 11). This policy covers only the data we handle for our own business.

2. What we collect

When you browse the Site

Technical data that our hosting and network providers log automatically: IP address, browser and device type, pages requested, referrer, and date and time. It’s used for security and to keep the Site running.
The Site itself sets no cookies and uses no analytics or advertising trackers.

When you book a call

Your name, email, the time you pick, and anything you write in the booking form. Cal.com collects this when you use the booking page or its embedded calendar.

When you buy a package

Checkout data collected by Stripe: name, email, billing address and country, and payment details. We never see or store your full card number. Stripe tells us the payment status and the last digits and brand of the card.
Order details stored in Stripe with your payment: package, tier, add-ons, delivery days, price, order status, and a short summary of your intake answers.
Intake form: your name, email, answers and files (up to 4 MB in total) or links you share. They’re sent to our business email inbox, with a copy to you, and a summary goes to our private Slack channel for orders. The Site doesn’t keep them.

When we work together

Messages, files, links and call notes you share in our Slack workspace or by email.
Account access you give us to your tools. We use it only for your project.

We don’t knowingly collect sensitive data (health, biometric, government ID, political or religious views and similar). Please don’t send it unless we’ve agreed how it will be handled.

To take payment, deliver your order, run the project and support you: performance of our contract with you.
To send receipts, the intake link, Slack invite and project updates: performance of contract.
To keep tax, accounting and payment records: legal obligation.
To secure the Site, prevent fraud and misuse of checkout, and handle disputes, chargebacks and legal claims: our legitimate interests.
To answer messages and booking requests before you buy: steps you ask for before a contract, or our legitimate interests.
To mention your project anonymously in our portfolio: legitimate interests. We name you or use your logo or quotes only with your consent, which you can withdraw at any time.

We don’t use your data for automated decisions that have legal or similarly significant effects on you, and we don’t send marketing emails unless you opt in.

We use these providers (processors or independent controllers) to run the business. Each gets only what it needs:

Stripe (payments, receipts, order records, fraud prevention)
Resend (sending order, intake and confirmation emails)
Zoho Mail (our business inbox, where intake answers and files arrive)
Slack (project communication and order notifications)
Vercel (hosting the Site and its server functions, with short-lived server logs)
Cloudflare (DNS, security and traffic delivery)
Cal.com (call booking)
GitHub and the tools you choose for your project (for example n8n, Make, OpenAI, Anthropic, Supabase), only when needed to deliver your work, and usually on your own accounts

We may also share data with professional advisers (accountants, lawyers), with authorities when the law requires it, to protect our rights in a dispute, or with a buyer or successor if the business is reorganised or sold, under this policy.

We don’t sell your personal data, and we don’t “share” it for cross-context behavioural advertising (as those terms are used in California law).

Some providers (Stripe in particular) also process data as independent controllers under their own privacy policies, for example for fraud prevention and legal compliance.

5. International transfers

Algorabia LLC is a US company run from Morocco, and our providers are mostly in the United States. So your data may be transferred to and accessed from countries outside the EU, UK or your own country, which may have different data protection laws.

Where we transfer personal data from the EU, UK or Switzerland, we rely on safeguards such as the European Commission’s Standard Contractual Clauses (and the UK Addendum) offered in our providers’ data processing terms, the EU-US Data Privacy Framework where a provider is certified, or, where needed, the transfer being necessary to perform our contract with you. You can ask us for more information.

6. How long we keep it

Accounting and tax records (payments, invoices, order records in Stripe): 7 years, or longer only if a law requires it.
Other order, intake and communication data (intake emails and files, Slack channels and messages, order details not needed for accounting): 90 days after the project closes, unless you ask us to keep them longer, or we need them for an open dispute or legal claim.
Booking data: as long as Cal.com keeps it under our account settings, and no longer than we need it.
Server and security logs: for the short periods set by Vercel and Cloudflare.

When we no longer need data, we delete or anonymise it.

7. Security

We use reputable providers, encrypted connections (HTTPS), signed private intake links, least-privilege access and deletion of client access when a project ends. No method is 100% secure, so we can’t guarantee absolute security. Please share account access through invites or limited keys, never by pasting passwords into forms, and rotate shared keys after handover.

8. Your rights

EU, UK and similar laws. You can ask to access, correct, delete, restrict or object to our use of your data, and ask for a copy in a portable format. Where we rely on consent, you can withdraw it at any time. You can also complain to your local data protection authority, but please contact us first so we can try to fix it.

California and other US states. Where these laws apply to us, you can ask to know what personal information we collect, use and disclose; to access, correct or delete it; and to not be discriminated against for using these rights. We don’t sell or share personal information, and we don’t use sensitive personal information to infer characteristics.

How to ask. Email [email protected]. We may need to confirm your identity (for example, by replying from the email used at checkout). We’ll reply within 30 days (or the time your law requires). An authorised agent can ask on your behalf with proof of authorisation.

What deletion covers. We delete the intake emails and files, your Slack channel and messages, and the order details in Stripe that aren’t needed for records. We keep what tax, accounting or anti-fraud laws require, or what we need for an open legal claim, and delete it when that period ends.

9. Cookies

This Site sets no cookies of its own and uses no analytics, advertising or tracking tools.
Stripe Checkout runs on Stripe’s own domain (checkout.stripe.com) and uses cookies needed for payment and fraud prevention. See Stripe’s cookie policy.
Cal.com booking calendar: on the Book a call page, the Cal.com calendar loads only when you choose to open it. Cal.com may then set cookies needed for booking. See Cal.com’s privacy policy.
Cloudflare may set strictly necessary security cookies to protect the Site from bots and attacks.

Because we only use strictly necessary cookies, we don’t show a cookie banner. If we ever add analytics or other non-essential cookies, we’ll update this policy and ask for consent first where the law requires it.

10. Children

The Site and services aren’t meant for anyone under 18, and we don’t knowingly collect children’s data.

11. Changes

We’ll update this policy when our practices or providers change, and update the “Last updated” date. Big changes will be flagged on the Site, or emailed to active clients.

12. Contact

Algorabia LLC · 5830 E 2nd St, Ste 7000 #28603, Casper, WY 82609, USA · [email protected]