AlfredPrivacy notice
Last updated: 26 October 2026. This is a translation; the Italian version prevails.
This notice explains how personal data is processed when using the app Alfred (a sales assistant for computers) and when visiting this site, under Regulation (EU) 2016/679 (GDPR).
1. Who the controller is
Carlo Filippi, Via Roma 45, 37063 Isola della Scala (VR), Italy · VAT IT05131670233 · [email protected].
For the data of the clients and contacts that a business manages with Alfred, the controller is the business using Alfred; Carlo Filippi acts as processor when providing installation and support, under a written agreement (Art. 28 GDPR).
2. How Alfred works, in short
Alfred is an application installed on the user's computer. It reads messages from the channels the user connects (Gmail, WhatsApp, Google Calendar, recordings), prepares replies, summaries and reminders, and sends a message only after the user's approval. Data is stored on the user's computer, in an encrypted archive whose key is kept in the operating system's keychain. Alfred has no central server holding users' data.
3. Which data, and where it goes
| Data | Why | Where it goes |
|---|---|---|
| Emails, calendar events | Reading client requests, preparing replies as drafts or sending them on approval, adding appointments to the «Alfred» calendar | Google (Gmail and Calendar APIs), with the consent given by the user on Google's page |
| WhatsApp messages | Receiving and sending messages from the business's WhatsApp Business number | Meta (WhatsApp Business Platform). Incoming messages pass, encrypted, through a receiving service on Cloudflare and are deleted as soon as the user's app has downloaded them |
| Text of messages, transcripts and documents needed for the task at hand | Understanding messages, writing drafts, summaries and documents | Anthropic (Claude models), only the part needed for the single task |
| Voice recordings | Transcribing them | No one: transcription happens on the user's computer |
| Contacts, notes, projects | Keeping the CRM and every client's diary up to date | No one: they stay on the user's computer and in the user's folders |
Legal basis: performance of the contract with the user (Art. 6.1.b) and, for the data of the user's clients, the business's legitimate interest in managing its commercial relationships (Art. 6.1.f). Alfred does not sell data, does not use it for advertising and does not send statistics containing content.
The use and transfer to other apps of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
4. Transfers outside the European Union
Google, Meta, Anthropic and Cloudflare may also process data outside the EU. They do so on the basis of the safeguards provided by the GDPR (adequacy decisions, including the EU-US Data Privacy Framework, or standard contractual clauses), as stated in their respective privacy notices.
5. How long
Data stays on the user's computer until the user keeps or deletes it. The WhatsApp receiving service keeps it only until delivery to the app, and in any case no longer than 7 days. Copies held by Google and Meta follow the settings of the user's account with those services.
6. How to delete data
- From the app: Settings → «Delete everything» removes Alfred's archive from the computer. You can also uninstall the app.
- Connections: Settings → «Disconnect Google» and «Disconnect WhatsApp» revoke access; access to Google can also be revoked from myaccount.google.com/permissions.
- On request: write to [email protected] with the subject «Data deletion»: within 30 days we delete any data we may hold (for example messages not yet delivered by the receiving service) and confirm it by email.
7. Your rights
You can request access, rectification, erasure, restriction, data portability and object to processing (Arts. 15–22 GDPR) by writing to [email protected]. You can also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
8. This site
This site uses no cookies, has no analytics tools and collects no data through forms. The provider hosting it (Cloudflare) may log technical access data for security reasons.
9. Changes
Any changes will be published on this page with the new update date.