Mandat for Alexa+ privacy

This is a hackathon demo. It uses PayPal sandbox test money only; no real payment is ever made.

What Mandat keeps

Your household's budgets, settings, orders and the preferences you ask it to remember.
The details you allow in the Alexa app (name, email, address), only to greet you, send receipts and book at your address.
Hashes of the access and refresh tokens Alexa uses; never your Amazon password.

Products are real products and prices from US online stores (through Channel3). Mandat never places an order with a store.
Local businesses are real businesses near the household (Google Maps or OpenStreetMap). Their price is an estimate, and a booking is only a request that this demo does not send. Mandat never contacts them.
Demo partners are simulated merchant agents, the only ones that negotiate.

To learn whether and how the demo is used, Mandat logs anonymous events: the time, what was opened or said (the sentence, with e-mail addresses and numbers masked, at most 200 characters), the tools it called, the device and language chosen, your browser and system family, and the site you came from.
No IP address is stored: a visitor is a salted one-way hash of the IP address and browser, which cannot be turned back into either.
No password, token, name, e-mail or address is ever logged. The log is kept 120 days, then deleted automatically, and only the project owner can read it. It is never shared or sold.

Sell or share your data. Merchants' agents receive only what a quote needs (a day, a time, a number of guests).
Spend above the rules you set, or move money without a yes when your settings ask for one.

Unlink in the Alexa app: every token is revoked at once.
Turn a permission off: Mandat deletes that detail.
Say “Alexa, delete my Mandat data”: open holds are voided, then the whole household is erased.

Contact: the project page on Devpost (Mandat for Alexa+).