Privacy Policy

Who we are

Alex the Keeper (“we”, “us”) is operated by Alex the Keeper. We provide a collaborative, versioned workspace for a team’s notes and documentation. For any privacy question, contact us at privacy@alexthekeeper.com.

Information we collect

• Account information. When you sign in (for example, through Google), we receive your name, email address, and profile identifier from the provider.
• Workspace content. The notes, documents, uploads, comments, and version history you and your team create or import, along with the metadata needed to organize them (teams, members, timestamps).
• Billing information. Your subscription tier and status. Payments are handled by Stripe; we do not receive or store full card numbers (see “Payments” below).
• Integration data. If you connect Google Calendar or Google Docs/Drive, we access only the data needed to provide the feature you enabled, using tokens stored encrypted at rest.
• Usage and device data. Basic logs (such as IP address, browser type, and actions taken) used to operate, secure, and improve the service.

How we use information

• To provide, maintain, and secure the service and your workspace.
• To authenticate you and enforce team access and permissions.
• To process subscriptions and comply with tax and legal obligations.
• To power optional AI features (for example, “Ask Alex”): relevant content you submit is sent to our AI provider to generate a response. It is not used to train third-party models.
• To communicate with you about your account, security, and service changes.

Service providers (processors)

We share data with vendors only to run the service, under contract:

• Supabase — database, authentication, and file storage hosting.
• Stripe — payment processing and subscription management, including Managed Payments, where Stripe acts as merchant of record and handles payment data and indirect-tax compliance.
• Google — sign-in and, if you enable them, Calendar and Docs/Drive integrations.
• Anthropic — the AI model behind “Ask Alex”, for requests you choose to make.

Payments

Card details are collected and processed directly by Stripe on its own hosted pages; they never pass through our servers. Stripe’s handling of that data is governed by its own privacy policy.

Cookies

We use strictly necessary cookies to keep you signed in and to remember preferences such as light/dark theme. We do not use advertising cookies.

Data retention

We keep workspace content for as long as your account or team is active. You can delete content, and you may request deletion of your account; we will remove or anonymize personal data except where we must retain it for legal, tax, or security reasons.

Security

Access to team data is enforced server-side by row-level security, integration tokens are encrypted at rest, and payment card data is isolated to Stripe. No system is perfectly secure, but we work to protect your information.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these, contact privacy@alexthekeeper.com.

International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

Children

Alex the Keeper is not directed to children under 16, and we do not knowingly collect their personal data.

Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, provide a more prominent notice.

Contact

Questions or requests: privacy@alexthekeeper.com, Alex the Keeper, Vancouver, BC, Canada.