← Back to ALO AI

Legal & privacy

Privacy Policy

1. Introduction

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how information is collected, used, stored, and shared when you visit this website, contact us, use our services, or interact with an AI-powered telephone assistant operated for one of our clients.

2. Information We Collect

Depending on how you interact with us, we may collect:

Website and contact information

  • Name
  • Email address
  • Telephone number
  • Company or business name
  • Information included in messages, forms, or support requests
  • Device, browser, IP address, and basic website-usage information

AI telephone-assistant information

When you call a business using our AI telephone technology, we may process:

  • Caller telephone number
  • Name, when provided
  • Selected language
  • Order or reservation details
  • Delivery or pickup information
  • Delivery address
  • Special instructions
  • Date, time, and duration of the call
  • Call outcome and structured summary
  • Human-transfer information

Call audio may need to be processed in real time so the assistant can understand and respond. Calls are not recorded by default. If call recording or transcript storage is enabled, callers should be notified where required.

We do not intentionally collect payment-card information through AI telephone calls.

3. How We Use Information

We may use personal data to:

  • Operate and maintain the website and services
  • Respond to inquiries and support requests
  • Provide AI telephone-assistant functionality
  • Process food-order and reservation requests
  • Send approved order or reservation notifications
  • Transfer callers to human staff
  • Provide information about menus, prices, opening hours, and services
  • Detect errors, misuse, fraud, and security incidents
  • Monitor service reliability and performance
  • Comply with legal obligations
  • Establish, exercise, or defend legal claims

We do not use caller information for unrelated marketing without an appropriate legal basis or consent.

4. AI Processing

Our services may use artificial intelligence, speech recognition, text-to-speech, and language-processing technology.

The AI assistant is designed to use information approved by the relevant business. It should not independently confirm unavailable products, table availability, or orders requiring staff approval.

Important decisions, including accepting or rejecting an order or reservation, may require review by authorized staff.

5. Role of Client Businesses

When an AI assistant operates on behalf of a restaurant, café, or another client, that business generally determines why customer information is collected and how it is used.

We may process that information as a service provider on the client’s instructions. The relevant business may have its own privacy policy that also applies to the caller.

Information collected for one client is not made available to unrelated clients.

6. Legal Bases for Processing

Depending on the circumstances, personal data may be processed because:

  • It is necessary to provide a requested service
  • It is necessary to perform or prepare a contract
  • We or our clients have a legitimate business interest
  • Consent has been provided
  • Processing is required by law
  • Processing is necessary to protect legal rights or prevent misuse

Where consent is required, it may be withdrawn, although this will not affect processing that occurred before withdrawal.

7. Sharing of Information

Personal data may be shared with:

  • The business that the caller contacted
  • Hosting and database providers
  • Telephony and voice-service providers
  • Speech-recognition and text-to-speech providers
  • SMS and notification providers
  • Security, monitoring, and technical-support providers
  • Professional advisers
  • Public authorities when legally required

Providers may access information only as necessary to deliver their services and should be subject to appropriate contractual and security obligations.

We do not sell personal data.

8. International Data Transfers

Some technology providers may process data outside North Macedonia. Where international transfers occur, reasonable legal, contractual, and technical safeguards will be used as required.

The selected providers and transfer safeguards should be reviewed before the AI telephone service is publicly launched.

9. Data Retention

Personal data is retained only for as long as reasonably necessary to:

  • Provide the requested service
  • Complete an order or reservation
  • Support the relevant client
  • Resolve disputes
  • Maintain security
  • Meet legal or accounting obligations

Retention periods may vary according to the type of information, client instructions, and legal requirements.

When information is no longer required, it will be deleted, anonymized, or securely restricted.

10. Data Security

Reasonable technical and organizational measures are used to protect personal data, including:

  • Access controls
  • Authentication
  • Tenant and client separation
  • Encrypted network connections
  • Audit records
  • Secure credential management
  • Restricted staff access
  • Monitoring and backup procedures

No system is completely secure, but appropriate steps are taken to reduce unauthorized access, loss, alteration, or disclosure.

11. Your Rights

Subject to applicable law, you may have the right to:

  • Receive information about data processing
  • Request access to your personal data
  • Correct inaccurate information
  • Request deletion
  • Restrict certain processing
  • Object to certain processing
  • Request data portability
  • Withdraw consent
  • Object to solely automated decisions where applicable
  • Submit a complaint to the Personal Data Protection Agency

Requests may be submitted using the contact method provided on this website. Identity verification may be required before completing a request.

12. Cookies

The website may use essential cookies required for security, navigation, and functionality.

Analytics, advertising, or other optional cookies should only be used in accordance with applicable consent requirements. Browser settings may also be used to block or delete cookies.

13. Children’s Privacy

The services are not designed to intentionally collect personal data directly from children. If information relating to a child is identified as having been collected improperly, appropriate steps will be taken to delete or restrict it.

14. Third-Party Links

The website may contain links to external websites or services. We are not responsible for their privacy practices, content, or security. Visitors should review the privacy policies of those services separately.

15. Changes to This Policy

This Privacy Policy may be updated when services, providers, technology, or legal requirements change. The updated version will be published on this website with a revised date.

16. Contact

Questions, concerns, or data-protection requests may be submitted through the contact method available on this website.