Privacy policy

This Privacy Policy explains how AltWise ("we", "us"), the company behind the Altfy product, handles personal data collected through the Altfy website, application, and MCP server. It applies to visitors of the website and to account holders.

Account: your e-mail address, your name if you provide one, an authentication identifier (or the identifier your Google sign-in returns), and the team your account belongs to. We never see your password: authentication is handled by our provider.

What you create in the Service: your theses and their pillars, assumptions and scenarios you run, cases, canvas boards, notes, and the companies you follow.

Usage: which tools your agent calls and when, so we can enforce the limits of your plan, bill correctly, and keep the Service running. Your MCP tokens are stored as irreversible hashes.

Billing: if you subscribe to a paid plan, Stripe collects and holds your payment details. We receive from Stripe only what we need to run the subscription (customer and subscription identifiers, plan, status, and invoice history). We never receive your full card number.

Communications: e-mails we send you (transactional messages such as sign-up confirmation, password reset, and the daily digest you opted into) and whether you unsubscribed.

Technical logs: standard server logs (such as IP address, request time, and requested page) for security and operation. This website also uses Google Analytics to measure audience — how many people visit, which pages they read, and where they arrive from — with Google acting as our processor. We do not use advertising trackers, and the application you sign into carries no audience measurement at all.

To provide the Service (run your research, keep your theses, connect your agent), to enforce plan limits, to bill you, to send transactional e-mails and the alerts you asked for, to support you when you write to us, to keep the Service secure, and to comply with legal obligations. We do not sell personal data and we do not use it for third-party advertising.

We do not use your private content (your theses, assumptions, or notes) to train models offered to other customers.

Account, content, usage, and billing data are processed because they are necessary to perform the contract between us (LGPD art. 7, V; GDPR art. 6(1)(b) where it applies). Marketing e-mails and optional alerts rely on your consent, which you may withdraw at any time. Security logs and fraud prevention rely on our legitimate interest. Tax and accounting records are kept to comply with a legal obligation.

The website may use a single functional cookie, storing your language preference if you choose one, plus Google Analytics cookies used only to count visits and see which pages are read. The application uses cookies strictly necessary to keep you signed in, and no analytics cookies. There are no advertising cookies anywhere. You can refuse Google Analytics in any browser with Google's opt-out add-on at tools.google.com/dlpage/gaoptout.

We share personal data only with the providers that make the Service work, acting on our behalf and under contractual safeguards: our cloud infrastructure and database providers (hosting and authentication), Stripe (payments), our e-mail delivery provider (transactional messages and digests), and Google Analytics (audience measurement on this public website only). Data may also be disclosed if required by law or by a competent authority.

When your agent calls Altfy, the answer goes to the AI application you connected. What that application does with it is governed by its own terms and privacy policy, not by ours.

Account and content data are kept while your account exists. If you delete your account, or ask us to delete it, we remove your content and your account data within 30 days, except for what we must keep by law (billing and tax records) and for security logs, which rotate on short periods typical of infrastructure operation. Aggregated statistics that no longer identify you may be kept.

Our infrastructure and payment providers may store or process data outside your country, including outside Brazil. Where that happens, transfers rely on the safeguards provided by applicable data-protection law (LGPD ch. V; GDPR ch. V where it applies).

Under the LGPD, and the GDPR where it applies, you may request confirmation of processing, access, correction, deletion, and portability of your personal data, information about sharing, and you may withdraw consent at any time. To exercise any of these rights, write to contact@altwise.ai; we will respond within the legal deadlines. You may also lodge a complaint with the ANPD (Brazil's data-protection authority) or your local supervisory authority.

The Service is not directed to people under 18, and we do not knowingly collect their personal data. If you believe a minor has created an account, write to us and we will remove it.

We may update this policy. The current version, with its effective date, is always published on this page. Material changes will be communicated to the e-mail registered on your account before they take effect.

Data controller: AltWise. For any privacy request or question: contact@altwise.ai.