Privacy Policy

Last updated: April 26, 2026

This privacy policy applies to the products listed at alveyautomation.com/tools and the Alvey Tools sub-brand of Alvey Automation.

What this site does

This is a marketing site. It does not require an account, does not run analytics that personally identify you, and does not set advertising cookies. Standard server logs (IP address, user agent, request path, timestamp) may be retained for operational and security purposes for up to 30 days.

Per-product data handling

Each product has its own data-handling story. The summary below describes the marketing site only. For per-product specifics, see the product page or the product's documentation.

Marketplace apps (QuickBooks, Shopify, Stripe)

• We connect to your account via the marketplace's OAuth flow and store only the tokens necessary to perform the documented function.
• OAuth tokens are encrypted at rest using Fernet (AES-128) with keys rotated independently of the database backup schedule.
• We persist only the aggregates needed for alerts (e.g., per-vendor rolling medians, per-SKU velocity numbers, per-recovery state). We do not persist customer PII from your accounts.
• On cancellation we purge your data within 7 days and confirm by email when purge completes.

Open-source MCP servers

• These run locally on your machine. There is no Alvey-hosted backend. Your credentials never leave your environment.
• We do not collect telemetry from the MCP servers. The repos contain no analytics or "phone home" hooks.

One-time downloads (methodology pack, security stack, scaffold)

• Purchases are processed by Gumroad, who handles payment data according to their own privacy policy.
• Email addresses provided at purchase are used solely to deliver the product and notify you of free updates. We do not sell or share your email.

Email contact

If you email us at brett@alveyautomation.com we will retain the conversation for as long as necessary to support you. We do not add you to any marketing list without explicit consent.

Your rights

You can request access to, correction of, or deletion of any personal data we hold by emailing brett@alveyautomation.com. We will respond within 14 days.

Changes to this policy

We may update this policy as products evolve. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced via product update emails to existing customers.

Contact

Questions about this policy: brett@alveyautomation.com.