Privacy
What Alwen collects, why, where it's kept, and what you can do about it.
Who we are
Alwen runs this service. Questions about privacy go to [email protected].
What we collect
- Account: your name, email address and picture from Google, or your GitHub username, email address and avatar, depending on how you sign in.
- Your vault: your notes, rules and decisions. If your vault is in your GitHub, they stay there. If Alwen keeps it for you, they're in a private repository in Alwen's own GitHub organization that only Alwen's systems can open. Either way we keep a search index of them and the records of jobs @alwen runs.
- Connections: tokens for the tools you connect, keys you give Alwen for your agents, and tokens for addresses you ask Alwen to read numbers from, all stored encrypted.
- Chat apps: in Slack, Telegram and Discord, messages that mention @alwen, reply to it, or are sent to it directly, and what you save with its commands. Nothing else in a channel or group: Telegram sends Alwen every message in a group it's in, and Alwen drops the ones that aren't for it at once, without keeping them.
- Reminders and messages you ask for: what to say, to whom or where, and when, kept until a reminder has gone out or you cancel it. Your time zone, if you tell us or Slack does.
- Teams: if you're in a team, your role and when you joined, and invites (with an email when the person inviting gives one). The team's owner and admins see the members' names and emails, and the team's log: what Alwen saved to the team's shared vaults and through which tool, its answers in team channels, the work it handed to agents, and who joined, left or changed what. Your own vault and private chats aren't in it.
- Your own tools (Business): the name you give each and the address Alwen calls when there's work for it; its key and that call's secret are kept only as a hash and encrypted.
- Usage: which features you use and technical logs, to keep the service running and fix errors.
- Billing: your plan, your orders and payment status. Card details go to our payment provider, not to us.
- Support: what you send us when you write to us.
How we use it
To run Alwen for you: answer your tools, run the tidy-up, carry out @alwen's jobs, bill you and help when you write to us. We don't sell your data and we don't use your notes for advertising.
AI processing
To understand your messages to @alwen, answer them, decide and tidy up, Alwen sends those messages and the notes it needs to Claude through Anthropic's commercial API. Under those terms, inputs and outputs aren't used to train models by default. Alwen doesn't train models on your notes.
Who we share it with
Only the companies that help us run Alwen, and only for that purpose:
- Cloud hosting in the United States: runs the service, the database and its backups.
- AI models from Anthropic: the notes a request needs, to answer and tidy up.
- GitHub: sign-in, your vault in your own account, and vaults Alwen keeps for people in Alwen's GitHub organization.
- Google: sign-in, if you continue with Google (your name, email and picture).
- Slack, Telegram and Discord, if you connect them: the messages meant for @alwen, as above.
- The agents you choose, like Cursor, Devin or Claude Code, if you give Alwen their keys: each job's task, with the notes and rules it needs.
- Addresses you ask Alwen to read numbers from: your token for that address, sent only there.
- Your own tools, on Business: a task's request, at the address you gave.
- Email delivery: digests and receipts.
- Error tracking: technical details when something breaks.
- Payments: billing details, handled by our payment provider.
Want the names of every company on this list? Ask at [email protected] and we'll send them.
Where it's stored
Alwen's servers and their encrypted backups are in the United States. Your vault itself is in your GitHub account, or, if Alwen keeps it for you, with GitHub in Alwen's organization.
How long we keep it
As long as your account is open. When you delete your account on its Account page, Alwen deletes what it stores about you at once; if you ask us to at [email protected], within 30 days. Copies in our backups are gone within 30 days after that. A vault in your GitHub stays there until you delete it. A vault Alwen keeps for you is deleted with your account, so download a copy first.
Your choices
- See and export what we store about you — your notes are already yours, in plain text.
- Correct it, or ask us to delete it.
- Disconnect any tool, or Alwen entirely, at any time.
- Write to [email protected] for anything else.
Children
Alwen isn't meant for anyone under 16, and we don't knowingly collect their data.
Changes
If we change this policy in a way that matters, we'll tell you by email before it applies.