Privacy Policy

Introduction

At alfred_ (operated by Knowledge Butler, Inc., "we", "us", "our"), your privacy is fundamental to how we build our platform. This policy explains exactly what data we collect, how we use it, who we share it with, and how you can control it.

We believe in complete transparency. This document describes our actual practices, not aspirational statements, but what our software actually does.

Information We Collect

Account Information

When you create an account, we collect your email address and display name. If you sign up via Google or Microsoft OAuth, we receive your email and profile name from those services. Passwords are hashed and managed by our authentication provider.

Payment Information

Payment processing is handled entirely by our third-party payment processor. We do not collect, store, or have access to your full credit card number, CVV, or billing address.

Email Data (When Connected)

When you connect Gmail or Outlook, we access:

• • Email subjects, sender/recipient addresses, and preview snippets
• • Email body content (for triage, briefings, draft responses, and search)
• • Thread IDs and message metadata
• • Unread status and timestamps

We use this data to analyze priority, extract action items, detect follow-ups, and generate draft responses. Email content is processed by third-party AI services.

Calendar Data (When Connected)

When you connect Google Calendar or Outlook Calendar, we access:

• • Event titles, start/end times, and locations
• • Attendee names, emails, and response status
• • Organizer information
• • Virtual meeting URLs

About a week of upcoming events is cached in our database to provide schedule analysis and reduce API calls; longer ranges are fetched live from your provider.

Contact Data

When you look up a recipient, we query your Google or Microsoft contacts live and request only names and email addresses. We do not copy your provider address book into our database.

Separately, alfred_ keeps a contact book of its own, built from contacts you save and from the people you email. It stores what you or your mail put in it: names, email addresses, phone numbers, company and role, postal addresses, links, your own notes, and how often and how recently you have been in touch.

Tasks, Notes, and User-Created Content

We store all tasks you create (manually or auto-extracted from emails), notes, kanban boards, and whiteboard content in our database.

Text Messages

If you use alfred_ over SMS, we store those conversations: the messages you send, the replies alfred_ sends, your phone number, delivery and read status, and any photos or files you text us.

Chat Conversations

Your conversations with alfred_ in the app are stored so you can pick up where you left off, along with any files you attach.

Voice

Your voice never reaches our servers. When you talk to alfred_, speech recognition runs on your own device, and only the resulting text is sent to us. We do not receive, process, or store recordings of your voice. A voice turn is saved as text in your chat history, exactly like a typed one. When alfred_ speaks back, the audio is streamed to your device and never stored.

Cloud Files (When Connected)

When you connect Google Drive or Microsoft OneDrive, alfred_ can read files you point it at and create files you ask for. We store extracted text and references, never copies of your original files.

Slack (When Connected)

alfred_ works with Slack in two ways, and you choose each one.

alfred_ in Slack. When you add the alfred_ app, it sees the messages you send it in your direct message with it. When you @mention it in a channel it has been added to, it reads that thread, or the few messages above your question, so it can answer. It does not read a channel on its own. We keep your messages to alfred_ and its answers so it can follow the conversation, the same way we keep your chats with it in the app.

Your Slack conversations in alfred_. When you connect your Slack account to alfred_'s Chat page, we read the conversations you are a member of: channels, private channels, direct messages and group messages. For each message from the last 30 days we keep who wrote it, when, its text, its reactions, and the names and links of any files. We keep the names and profile photos of the people in those conversations, and your workspace's name. We do not copy the files themselves: a picture preview is fetched from Slack when you open it and is not stored. alfred_ sends, edits, deletes, reacts, or starts and leaves conversations only when you press the button to do it.

How we use it. Only to show you your own conversations and to answer your questions about them. Relevant messages are sent to our AI providers, listed under Subprocessors, for that purpose only. We do not use Slack data to train AI models, we do not sell it or use it for advertising, and we do not use one organization's Slack data for another organization.

How long we keep it, and how to remove it. Slack messages and reactions older than 30 days are deleted every night. When you disconnect Slack in alfred_, we revoke our access immediately and delete your conversations and messages from that workspace within a day. Your messages with the alfred_ app are deleted when you delete them or your account. To have anything removed sooner, write to connor@get-alfred.ai.

OAuth Tokens

When you connect email, calendar, or Slack accounts, we store OAuth access tokens and refresh tokens in our database. These tokens allow us to access your accounts on your behalf. We never see or store your actual passwords.

Email Indexing and Search

To answer questions about your mail and to write briefings that reference the right message, alfred_ keeps a searchable index of your email. This applies to subscribers on an active or trial plan.

What the index holds:

• • Message text with quoted replies, signatures, and disclaimers stripped out, plus subject, sender, and recipients
• • Numeric representations of that text (embeddings) that let alfred_ search by meaning rather than keywords
• • Text extracted from attachments, and references to them. We do not store copies of your attachments in the index
• • Details from your calendar events, so schedule questions can be answered the same way

How it is protected: the index lives in our encrypted database under the same row-level security as the rest of your data, so it is reachable only by your account. It is never used to train AI models, yours or anyone else's, and it is never shared for advertising or analytics.

Scope and lifetime: when indexing begins we look back about 30 days, and index new mail from then on. Indexing stops when your subscription ends or when you disconnect an account. Indexed data is deleted when you delete your alfred_ account, and we will delete it sooner if you ask us at connor@get-alfred.ai.

Information We Derive

alfred_ also creates information about you rather than collecting it directly, and stores it to make the product work better for you:

• • Which messages and people matter most to you, and how often you interact with them
• • Preferences alfred_ has learned from how you work, so it stops asking you the same things
• • A working profile summarising your role, projects, and priorities, assembled from your mail and calendar
• • Summaries of past conversations, so alfred_ can remember context without re-reading everything

You can ask us what alfred_ has inferred about you, and ask us to correct or delete it. It is deleted with your account.

Information About People Who Do Not Use alfred_

Your email, calendar, and contacts necessarily contain information about other people. We use that information only to provide alfred_ to you: to show you your mail, answer your questions, and suggest recipients. We never use it to contact, market to, or advertise to those people, and we never sell it.

Cookies and Local Storage

alfred_ uses cookies and browser storage technologies to operate and improve the Service:

• • Authentication: We use localStorage and sessionStorage to maintain your login session.
• • Usage tracking: We use cookies and local storage to track feature usage and preferences.
• • Analytics: Third-party analytics services set cookies to help us understand how users interact with alfred_.
• • Communication tracking: We use cookies to track interactions with our communications.
• • Advertising measurement: Our public marketing pages load Google's advertising tag so we can tell which ads bring people to alfred_. We do not use your email, calendar, or other account content for advertising.

You can clear cookies and local storage through your browser settings at any time.

Do Not Track: alfred_ does not currently respond to "Do Not Track" (DNT) browser signals.

AI Processing

alfred_'s AI capabilities are powered by third-party AI services. When generating email drafts, analyzing your schedule, or creating daily briefings, we send relevant data to these services:

• • Email subjects, snippets, and body content (for draft generation)
• • Calendar event summaries
• • Slack messages, when you ask alfred_ about your Slack conversations
• • Task metadata

Important: We do not use your data to train or fine-tune AI models. Your data is processed for inference only. Our AI providers are contractually prohibited from using your data for model training.

Analytics and Usage Tracking

We use third-party analytics services to understand how people use alfred_. These services collect page views, feature usage, session duration, and device information. Analytics data is used solely to improve alfred_ and is not sold to third parties.

How We Use Your Information

• • Analyze your email to identify priority messages and extract action items
• • Generate draft email responses for your review and approval
• • Analyze your calendar to calculate available focus time and identify conflicts
• • Create and sync tasks across your devices
• • Generate daily briefings summarizing what needs your attention
• • Track recipient interactions for better autocomplete suggestions
• • Provide customer support
• • Improve alfred_ based on usage patterns
• • Process payments and manage subscriptions

Actions and Automations

alfred_ works in two modes: actions you confirm in the moment, and automations you set up yourself.

• • Drafts always need you. alfred_ prepares email drafts, but a draft is only sent when you approve it.
• • Automations you create run on their own. Email rules (such as filing, labeling, or forwarding), workflows, and scheduled sends run without asking each time, because you configured them to. Email is only ever sent from your account by an automation you created, and you can review, pause, or delete any automation in Settings.
• • Inbox organization follows your settings. By default alfred_ files low-priority mail out of your inbox for you and handles routine calendar responses; you can switch to suggest-only mode at any time.
• • You get a record. alfred_ emails you a recap of the autonomous actions it took, and actions are visible in the app.

Information Sharing and Disclosure

We do not sell your personal information. We share data only with:

Service Providers

• • Cloud infrastructure: Database hosting, authentication, and server-side processing
• • AI services: Third-party AI processing for email drafts and analysis (inference only)
• • Analytics services: Product analytics and usage tracking
• • Payment processing: Subscription billing and payment handling

These providers process data on our behalf under contractual obligations to protect it. They may not use it for their own purposes.

Subprocessors

The following third parties may process user data on our behalf:

• • Supabase, Inc. database, authentication, and file storage
• • Cloudflare, Inc. content delivery network and DNS
• • Railway Corp. application hosting
• • Vercel Inc. web application hosting
• • PostHog, Inc. product analytics
• • Stripe, Inc. payment processing
• • Resend transactional email delivery
• • Linq SMS delivery
• • Anthropic, OpenAI, Google, and Amazon Web Services (Bedrock) AI inference for drafting, analysis, briefings, search indexing, and speech

We may update this list as our infrastructure evolves. Material changes will be reflected here.

Other Circumstances

• • When required by law or legal process
• • To protect our rights, safety, or the safety of our users
• • In connection with a merger, acquisition, or sale of assets (with notice)

Data Security

• • All data encrypted in transit using TLS 1.2+
• • Data encrypted at rest in our database
• • OAuth tokens stored securely (we never see your passwords)
• • Row-level security policies ensure you can only access your own data
• • Regular security reviews and updates

No system is 100% secure. We will notify you promptly if we detect a breach affecting your data.

Google API Limited-Use Compliance

alfred_ accesses Google user data only to provide the features you explicitly enable. We:

• • Only access data necessary to provide email analysis, calendar management, contact autocomplete, and the file features you use
• • Store indexed message text and embeddings solely to power features you see, such as search, recall, and briefings
• • Do not use Google Workspace data to train or improve generalized AI/ML models
• • Do not sell or share Google data with advertisers or data brokers
• • Allow you to revoke access at any time through your Google account settings

These practices comply with Google's API Services User Data Policy, including its Limited Use requirements.

Microsoft API Compliance

alfred_ accesses Microsoft user data through the Microsoft Graph API only to provide the features you explicitly enable. We:

• • Only access data necessary to provide email analysis, calendar management, and contact autocomplete
• • Do not use Microsoft data to train or improve generalized AI/ML models
• • Do not sell or share Microsoft data with advertisers or data brokers
• • Delete Microsoft data when you close your account or upon your request; disconnecting an account immediately stops all access to it
• • Allow you to revoke access at any time

Data Retention

While your account is active, alfred_ keeps what it needs to work. Here is what that means for each kind of data, and what removes it:

• • Email search index: Kept while you are a subscriber and until you delete your account, or sooner on request. Indexing stops when your subscription ends or an account is disconnected
• • Chat and SMS conversations: Kept until you delete them or delete your account
• • Voice: No recordings are kept, because none reach us. Transcripts follow the rule for chat, above
• • Tasks, notes, boards, and contacts: Kept until you delete them or delete your account
• • What alfred_ has learned about you: Kept while your account is active and deleted with it. Inferences we have not seen supported in a while fade on their own
• • Calendar cache: About a week of upcoming events; longer ranges are fetched live from your provider
• • Account deletion: Your data is held for 14 days so you can change your mind, and you can cancel the deletion during that window. After that it is permanently deleted. We keep an inert, anonymized record that the account existed, with no personal data in it, plus a log that the deletion happened
• • Slack: Messages and reactions from the last 30 days; older ones are deleted nightly. Disconnecting Slack deletes your conversations and messages from that workspace within a day
• • Disconnecting an account: We delete that account's credentials immediately and stop all access to it. Data alfred_ already stored is removed when you delete your account or ask us to remove it
• • Inactive accounts: Accounts inactive for 12+ months may be deleted with 30 days notice
• • Aggregated analytics: May be retained longer in anonymized form

If you want something gone sooner than these rules provide, write to us at connor@get-alfred.ai and we will delete it.

Your Privacy Rights

• • Access: View your data through your account settings
• • Correction: Update inaccurate information
• • Deletion: Delete your account and all associated data
• • Disconnect: Revoke email/calendar access at any time
• • Export: Download your profile, notes, tasks, boards, and reminders from Account Settings. For a copy of anything else we hold, write to us and we will put it together for you
• • Communications: Unsubscribe from product update emails at any time

To exercise these rights, use the tools in your account settings or contact us at connor@get-alfred.ai.

International Users

alfred_ is based in the United States. Your account data is stored in the United States, and may also be processed in other countries where our service providers operate. By using the Service, you consent to the transfer and processing of your data in the United States.

Children's Data

alfred_ is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA:

• • Right to Know: You may request what personal information we have collected about you
• • Right to Delete: You may request deletion of your personal information
• • Right to Opt-Out of Sale: We do not sell your personal information
• • Right to Non-Discrimination: We will not discriminate against you for exercising your rights

Contact us at connor@get-alfred.ai. We will respond within 45 days as required by law.

Third-Party Links

alfred_ may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices of these third parties.

Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. We'll notify you of significant changes via email or through alfred_.

Contact Us