Legal
Privacy Policy
Last updated: April 13, 2026
Fred ("we", "our", or "us") operates https://fred.assistant.co.ke and the Fred platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use our Service.
By accessing or using Fred, you agree to this policy. If you do not agree, please do not use the Service.
1. Information We Collect
1.1 Account Information
When you register, we collect your name, work email address, and password (stored as a secure hash). If you sign in via Google OAuth, we receive your name, email, and profile photo from Google.
1.2 Google Workspace Data
To operate the Service you grant Fred access to your Google Workspace domain through a Google Service Account with domain-wide delegation. We access only the scopes you explicitly authorize, which may include:
- Directory information (users, groups, org units)
- License assignments
- Security and device policies
- Audit log events
We read this data to fulfill your commands, enforce your policies, and produce audit reports. We do not sell or share this data with third parties for advertising or marketing purposes.
1.3 Usage Data
We automatically collect log data including your IP address, browser type, pages visited, timestamps, and actions taken within the product. We use Google Analytics (GA4) to measure aggregate usage patterns.
1.4 Communications
If you contact us by email or submit a support request, we retain those communications to respond to you and improve the Service.
2. How We Use Your Information
- Provision and operate the Service
- Execute natural-language commands against your Google Workspace
- Enforce policy rules and automated workflows you configure
- Generate audit logs and compliance reports for your organization
- Send transactional emails (onboarding, billing, security alerts)
- Improve, debug, and develop new features
- Comply with legal obligations
We use AI models (powered by Google Gemini and/or Anthropic Claude) to interpret your natural-language instructions. Queries are sent to these providers over encrypted channels subject to their respective privacy and data-processing terms. We do not permit these providers to use your data to train their models.
3. Data Storage & Retention
Your data is stored on MongoDB Atlas clusters hosted in Google Cloud regions. We retain your account and workspace data for as long as your account is active. You may request deletion at any time (see Section 7). Audit logs are retained for a minimum of 12 months to support compliance requirements, unless you request earlier deletion.
4. Sharing & Disclosure
We do not sell your personal information. We share data only in the following circumstances:
- Service providers: Subprocessors such as MongoDB Atlas (database), Google Cloud (infrastructure), Anthropic / Google DeepMind (AI inference), and Resend (transactional email) that help us operate the Service under confidentiality obligations.
- Legal requirements: When required by applicable law, court order, or government authority.
- Business transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
- With your consent: For any other purpose with your explicit consent.
5. Security
We implement industry-standard safeguards including TLS encryption in transit, AES-256 encryption at rest, least-privilege access controls, and regular security reviews. No method of transmission or storage is 100% secure; if you discover a security issue, please report it to hello@assistant.co.ke.
6. Cookies & Tracking
We use essential cookies to maintain your session. We use Google Analytics cookies to understand aggregate usage. You can disable non-essential cookies in your browser settings; doing so may limit some functionality.
7. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data; restrict or object to processing; or withdraw consent. To exercise these rights, email us at hello@assistant.co.ke. We will respond within 30 days.
To delete your account and associated data, go to Settings → Account → Delete Account or email us directly.
8. Children's Privacy
The Service is not directed at individuals under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us data, contact us and we will delete it promptly.
9. International Transfers
Fred is operated from Kenya. If you access the Service from outside Kenya, your information may be transferred to and processed in Kenya or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.
11. Contact
Questions or concerns about this policy? Reach us at:
Fred
Nairobi, Kenya