Privacy Policy

1. Who operates Alfred

Alfred Hermes is a private assistant operated by Mike Matusevich for personal, household, and owner-authorized business use. It is not offered as a public service.

2. Information accessed

Depending on the permissions granted and the user's request, Alfred may access:

• Google Drive files, folders, Docs, Sheets, and related metadata;
• Gmail messages and metadata needed to search, summarize, draft, or send email;
• Google Calendar events and related metadata;
• Google Analytics and Google Ads reporting data;
• basic Google account identity information used for authorization.

3. How information is used

Information is used only to perform tasks requested by an authorized user, maintain task context, generate requested summaries or documents, and keep the private service reliable and secure. Google user data is not used for advertising, audience profiling, credit decisions, or sale to third parties.

4. AI processing and disclosure

To complete a requested task, the minimum necessary content may be processed by the AI model API selected for that task. Such processing is limited to providing or improving the user-facing function requested by the authorized user. Alfred does not sell Google user data or disclose it for advertising purposes.

5. Storage and retention

Credentials and private operational data are stored in the isolated Alfred environment. Task history and generated results may be retained to provide continuity until the owner deletes them or requests deletion. OAuth tokens are stored separately from public content and are not committed to public source repositories.

6. Security

Alfred uses access controls, separate secret storage, encrypted transport, restricted service permissions, and approval requirements for sensitive external actions. No system can guarantee absolute security, but access is limited to authorized users and services.

7. User control and deletion

Users can revoke Google access at any time in their Google Account security settings. They may also request deletion of stored Google-derived data by contacting the operator. Revoking access stops future access but does not automatically remove results the user intentionally saved elsewhere.

8. Google API Services User Data Policy

Alfred's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

9. Contact

Questions or deletion requests: m.matusevich@me.com.