← Back to Alec
Privacy Policy
Last updated: February 19, 2026

Who We Are

Alec ("we", "us", "our") is an AI-powered business consulting service operated by Alec Inc. at heyalec.com. For privacy inquiries, contact us at [email protected].

What Alec Is

Alec is an AI system — not a human consultant. You are interacting with artificial intelligence technology when you use our service. Alec is designed to provide business insights and pattern recognition, not professional therapy, medical advice, legal counsel, or financial advice.

What Data We Collect

When you use Alec, we collect:

We do not collect your email, phone number, IP address for tracking purposes, payment card details (payments are handled outside the platform), or any data beyond what you voluntarily share in conversation.

Why We Collect It

We process your data for one purpose: to provide you with the Alec consulting service. Specifically:

Legal basis: contractual necessity (you purchase a service, we deliver it) and legitimate interest (improving the quality of the service you paid for).

Who Has Access to Your Data

Your conversations are processed using Alec's AI technology to generate responses. The AI processing infrastructure does not retain or use your conversations for training purposes.

Vercel — our hosting provider. Account data is stored on Vercel's infrastructure. See Vercel's Privacy Policy.

We do not sell, share, or transfer your data to any other third party. We do not use your conversations for advertising, marketing to third parties, or any purpose other than delivering the service to you.

Anonymous Conversation Review

To continuously improve Alec's consulting quality, we may review anonymized conversation data. This means:

This is enabled by default. You can opt out at any time by toggling the "Help improve Alec" setting in your session history panel, or by emailing [email protected].

Where Your Data Is Stored

Your data is stored on secure cloud infrastructure. Transfers outside the EU are covered by appropriate safeguards including Standard Contractual Clauses where applicable.

How Long We Keep It

We retain your data for as long as your account is active. If your account is inactive for 12 months (no messages sent), we may delete your data automatically.

When you choose to delete — whether a single conversation or your entire account — that data is permanently erased from our servers. We don't keep backups, we don't archive, and we don't have a "just in case" copy. Once deleted, nobody can ever access it again.

Your Rights

Under GDPR and applicable privacy laws, you have the right to:

To exercise any of these rights, email [email protected] with your access token. We will respond within 30 days.

You also have the right to delete your account and all data directly from the Alec interface at any time.

Data Security

Your data is encrypted in transit (HTTPS/TLS) and at rest. Access tokens are used for authentication. Your API key and admin credentials are stored server-side and never exposed to the frontend. We do not store passwords or payment information.

Cookies

Alec does not use cookies, tracking pixels, analytics scripts, or any form of behavioral tracking. We do not use Google Analytics or similar services.

Children

Alec is not intended f