Privacy

Your profile, your CV file and any personal AI key stay in your browser. Alfred’s server keeps your account (name, email, a hashed password and your credit balance) and a log of what you spent credits on. When you ask Alfred to write something, the text it needs goes to an AI provider to be written, and isn’t kept afterwards. We don’t sell data, show ads, or track you across sites.

• Your profile: contact details, work history, education, links, skills and saved answers.
• The CV file you upload, and the text read from it.
• Tailored CVs and cover letters Alfred prepared for you.
• Your settings, and your own AI provider key if you add one.

• Your account: name, email address, a scrypt hash of your password, whether you verified your email, and when you last signed in.
• Your credit balance and a ledger of each change: starter credits, refunds, admin adjustments and which kind of AI task used credits.
• An activity log of sign-ins and AI tasks (the task name and whether it worked, never its content).
• Short-lived sign-in codes and rate-limit counters, which delete themselves.

Alfred asks your permission for each site the first time you use it there, and only reads a page when you open its side panel on it. You can remove a site at any time from your browser’s extension settings. It reads the form’s questions and the job’s title, company and description, so it can match them to your profile. Page content is sent off your device only when you ask for an AI task, and then only the job details that task needs.

When you use Alfred credits, the request (the relevant parts of your profile and the job description) goes through Alfred’s server to DeepSeek, which writes the result. Alfred doesn’t store the request or the result on its server.

When you use your own key, the extension sends the request straight from your browser to the provider you chose (DeepSeek, Anthropic, OpenAI, Google or another compatible service), under that provider’s terms. Alfred’s server never sees it.

• Resend delivers sign-in and password-reset codes to your email address.
• A MongoDB database host stores the account data listed above.

You can edit or clear your profile in the extension at any time; removing the extension deletes everything kept in your browser. To delete your account and its history from Alfred’s server, email hello@alfreed.space from the address on the account and we’ll do it within 30 days.

Alfred’s use of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements. Data is used only to provide Alfred’s single purpose: helping you fill in job applications and prepare documents for them.

If this policy changes, the date below changes with it, and anything significant is announced in the extension.