Privacy Policy

1. Who is responsible for your data

The controller of the personal data described here is Alfred AI Lda, established in Portugal. You can reach us about anything in this policy, and about your rights over your data, at legal@usealfred.ai.

2. What we collect

When you visit the site

Our pages are served through Cloudflare, which processes technical data such as your IP address and browser type in order to deliver the site and protect it from abuse. We keep no analytics profile of you from these pages beyond that.

When you subscribe

• your name and email address;
• your company name and billing address;
• a tax identification number, where you give one;
• the plan, billing period and currency you chose.

Card details are entered inside Paddle's checkout and never reach us. See section 7.

When we work for you

• what you tell us about your business, goals, market and competitors;
• material you send us: brand assets, texts, product information, customer lists where you choose to provide them;
• our correspondence with you, including email and messaging.

3. Data in the accounts you connect

To run campaigns and measure them, you give us access to accounts that belong to you: advertising accounts, analytics, social profiles, your website. Through that access we can see the data those platforms hold, which may include performance metrics, audience segments and, in some configurations, personal data about your own customers.

Where that happens, you are the controller of that data and we act as your processor: we use it only to perform the service you asked for, under your instructions. If the law that applies to you requires a written data processing agreement, write to us and we will put one in place.

We do not sell this data, we do not use it to build advertising audiences for other clients, and we do not merge it with any other client's data.

4. Why we use it, and on what legal basis

• To provide the service you subscribed to, including planning, producing and publishing marketing work. Legal basis: performance of our contract with you.
• To bill you and keep accounting records. Legal basis: performance of the contract, and our legal obligations.
• To support you, answer questions and resolve problems. Legal basis: performance of the contract.
• To improve and secure the service, including preventing abuse. Legal basis: our legitimate interest in running a safe and functioning service.
• To send you service messages, such as receipts and notices about changes. Legal basis: performance of the contract. Marketing emails, if we send any, go out only with your consent and you can withdraw it at any time.

5. Your data and artificial intelligence

Alfred produces work using artificial intelligence models, some of which are operated by third-party providers. To generate marketing material for you, information about your business is sent to those models.

We use providers under terms that do not permit your data to be used to train their models. We ask you not to send us personal data you do not need us to have, and in particular not to send special categories of data, such as health information, unless it is genuinely necessary and we have agreed how to handle it.

No decision producing legal effects about you is made solely by automated means.

6. Who we share it with

We share personal data only with parties that help us run the service, and only as far as they need it:

• Paddle, as merchant of record, for payment, invoicing and tax;
• Advertising and analytics platforms such as Google, Meta, TikTok and LinkedIn, when we act inside the accounts you connected;
• AI providers, as described in section 5;
• Cloudflare, for hosting and site security;
• Email and productivity providers we use to correspond with you;
• Professional advisers and authorities, where the law requires it.

We do not sell personal data, and we do not share it for other companies' advertising.

7. Payments

Payments are handled by Paddle.com Market Limited, which is the merchant of record for the sale. Paddle collects and processes the payment data, including your card details, and is an independent controller of that data under its own privacy policy. Alfred receives confirmation of the transaction and the billing details needed for our records, but never the card number.

8. Cookies and browser storage

This site sets no advertising or tracking cookies. It does use your browser's local storage for three small preferences, which stay on your device and are never sent to us:

• the language you picked;
• the currency you picked;
• the email address you last typed into the checkout, so you do not have to type it again.

Clearing your browser data removes all three. Paddle's checkout and Cloudflare may set cookies that are strictly necessary for payment and security, under their own policies.

9. International transfers

We and our providers operate in more than one country, so your data may be processed outside the country where you live, including outside the European Economic Area. Where that happens we rely on an adequacy decision, or on the European Commission's standard contractual clauses, or on an equivalent safeguard recognised by the law that applies to you.

10. How long we keep it

• Account and subscription data: while you are a client, and afterwards for as long as we may need it to defend a legal claim.
• Invoices and accounting records: for the period the tax law that applies to us requires.
• Work we produced for you: normally 365 days after the subscription ends, after which we delete it. Ask us earlier and we will delete it earlier.
• Data inside your connected accounts: we hold no copy beyond what the work requires; access ends when you withdraw it.

11. Your rights

Depending on where you live, you have some or all of the following rights: to know what data we hold about you and get a copy; to have it corrected; to have it deleted; to restrict or object to how we use it; to receive it in a portable format; and to withdraw consent where our use is based on consent.

Under the GDPR you may also complain to the supervisory authority of the country where you live. Under Brazil's LGPD you have equivalent rights and may complain to the ANPD.

To exercise any of this, write to legal@usealfred.ai. We answer within the period the applicable law sets, and within one month at the latest. We do not charge for it, and we will not treat you differently for asking.

12. Security

We use access controls, encryption in transit and the principle of least privilege for the accounts we are given. No system is perfectly secure, and we do not claim otherwise. If a breach affects your personal data and is likely to present a risk to you, we will notify you and the relevant authority within the time the law requires.

13. Children

Alfred is a service for businesses and is not directed at children. We do not knowingly collect data from anyone under 18. If you believe a child's data has reached us, tell us and we will delete it.

14. Changes to this policy

We may update this policy. If a change materially affects how we handle your data, we will tell you before it takes effect. The date at the top of this page shows when it was last changed.

15. Contact

For anything about this policy or your data, write to legal@usealfred.ai. For anything else, including support and billing, help@usealfred.ai.

This document is published in English. Translations, where offered, are provided for convenience; the English version is the one that applies.