What we hold, why, and who can see it.

What we collect

Your name, email address, country and — if you give it — your VAT number. The matters you open, the documents you upload, the letters that arrive at a matter’s address, messages exchanged with your professional, and the payments made and received. For professionals: identity and credential documents, and the details needed to pay you.

Why

To perform the contract you have with us and enable the one you have with your professional; to meet legal obligations, including tax and invoicing law and checks required of an intermediary handling money; and, in our legitimate interest, to keep the service secure and to prevent fraud. Your country and VAT number are used to determine the correct tax on Alfred’s fee, and for nothing else.

How documents and letters are protected

Every matter has its own encryption key. Documents, letter bodies and anything Alfred writes about them are encrypted with it at rest. When a matter is purged, that key is destroyed, which makes the content unrecoverable. Alfred’s staff do not read your documents in the ordinary course of operating the service. There is one moment when a letter’s text leaves that envelope: while Alfred reads your post for you, as described below.

The matter’s email address

Letters sent to a matter’s address are stored on that matter. We record the sending domain’s authentication result so you can tell whether a letter really came from where it claims. A letter from a sender who has not written before is held for your review before any AI assistant you have connected can read it.

Who sees what

The professional engaged on a matter sees the documents and correspondence on that matter — they need them to do the work — and nothing on your other matters. Alfred does not sell or share your data for advertising.

AI assistants

Only if you create a key. A key lets the assistant you connect read your matters; it is read-only and can never send, pay, approve or delete. Every read is logged against the key, and you can revoke it at any time. Text written by third parties is marked as such when handed to an assistant. This section is about an assistant of your own; Alfred’s own reading of your post is described in the next section and is controlled separately.

Alfred reading your post

When a letter arrives at a matter’s address, Alfred reads it and writes a short summary, what the sender appears to be asking for, and any date the letter mentions. To do that, the text of the letter is sent to OpenRouter, which passes it to a language model and returns the reading. We send the letter’s text and nothing else: no name, no email address, no matter title, no account number. We require routing to providers that do not retain what is sent and do not train on it, and we do not turn that requirement off — if no such provider is available, the letter simply stays unread. The letter’s own text may name you or quote your reference numbers — we send it as it arrived and add nothing to it.

The reading is a machine’s reading of a letter, not advice and not a fact. It changes nothing on your matter: no date is entered, no message is sent and no payment is made because of it. A date Alfred spots is a suggestion until you or your professional confirms it. A letter held for your review is not sent to the model either. This is on by default, and you can turn it off on your own details page. Each Alfred address covers one set of affairs, so turning the reading off there stops it for every matter under that address.

If you ask Alfred to draft a matter from your own description, that description is sent the same way, and is used only to propose a title, a profession and a list of documents. Nothing is created until you confirm it.

Processors

Stripe processes payments and holds card details — Alfred never sees your card number. Cloudflare delivers email. OpenRouter is our model provider: when Alfred reads a letter, OpenRouter receives that letter’s text and nothing else about you, and we require it to route only to model providers that do not retain or train on it. Our servers are hosted in the European Union; OpenRouter and the model providers it routes to may process a letter’s text outside it under Standard Contractual Clauses. Where we use a certified invoicing provider, it receives the details needed to issue an invoice.

Retention

Account details are kept while your account is open. Matter contents are kept until you purge the matter or close your account; financial records are kept for the period Portuguese tax law requires, which is currently ten years. Held letters that you never release are purged with the matter.

Your rights

Under the GDPR you may access, correct, export or erase your data, restrict or object to processing, and complain to a supervisory authority — in Portugal, the CNPD. Write to us and we will act within one month. Some records cannot be erased while a legal retention period runs.

Transfers

Your data stays in the European Union except where a processor above operates elsewhere under Standard Contractual Clauses.

Children

Alfred is for adults handling their own affairs and is not offered to anyone under 18.

Changes

We will notify you by email of any material change to this notice before it takes effect.