What we hold, why, and who can see it.
The controller is SURFING DOG, LDA, NIF 517113325, Portugal. Draft for legal review. This describes what Alfred actually stores and does — no more.
Last updated 1 September 2026. Draft pending review by counsel.
What we collect
Your name, email address, country and — if you give it — your VAT number. The matters you open, the documents you upload, the letters that arrive at a matter’s address, messages exchanged with your professional, and the payments made and received. For professionals: identity and credential documents, and the details needed to pay you.
Why
To perform the contract you have with us and enable the one you have with your professional; to meet legal obligations, including tax and invoicing law and checks required of an intermediary handling money; and, in our legitimate interest, to keep the service secure and to prevent fraud. Your country and VAT number are used to determine the correct tax on Alfred’s fee, and for nothing else.
How documents and letters are protected
Every matter has its own encryption key. Documents and letter bodies are encrypted with it at rest. When a matter is purged, that key is destroyed, which makes the content unrecoverable. Alfred’s staff do not read your documents in the ordinary course of operating the service.
The matter’s email address
Letters sent to a matter’s address are stored on that matter. We record the sending domain’s authentication result so you can tell whether a letter really came from where it claims. A letter from a sender who has not written before is held for your review before any AI assistant you have connected can read it.
Who sees what
The professional engaged on a matter sees the documents and correspondence on that matter — they need them to do the work — and nothing on your other matters. Alfred does not sell or share your data for advertising.
AI assistants
Only if you create a key. A key lets the assistant you connect read your matters; it is read-only and can never send, pay, approve or delete. Every read is logged against the key, and you can revoke it at any time. Text written by third parties is marked as such when handed to an assistant.
Processors
Stripe processes payments and holds card details — Alfred never sees your card number. Cloudflare delivers email. Our servers are hosted in the European Union. Where we use a certified invoicing provider, it receives the details needed to issue an invoice.
Retention
Account details are kept while your account is open. Matter contents are kept until you purge the matter or close your account; financial records are kept for the period Portuguese tax law requires, which is currently ten years. Held letters that you never release are purged with the matter.
Your rights
Under the GDPR you may access, correct, export or erase your data, restrict or object to processing, and complain to a supervisory authority — in Portugal, the CNPD. Write to us and we will act within one month. Some records cannot be erased while a legal retention period runs.
Transfers
Your data stays in the European Union except where a processor above operates elsewhere under Standard Contractual Clauses.
Children
Alfred is for adults handling their own affairs and is not offered to anyone under 18.
Changes
We will notify you by email of any material change to this notice before it takes effect.
Privacy questions and rights requests: hello@alfredproctor.com.