Privacy.

What we collect

We collect the minimum needed to operate the service: account email, organization, and the memory records and source documents you choose to send us. We do not sell, and we do not train external models on your data.

How we use it

Memory records are processed only to fulfill API requests on your account. Operational metrics (latency, error rates, usage counts) are aggregated and never tied to individual records.

Retention

Memory you write stays as long as you keep it. Deletion is immediate; cryptographic erasure follows within 24 hours. Audit log entries are retained per your plan’s retention policy.

Your rights

You can request export, deletion, or a list of subprocessors at any time at [email protected]. We respond within 30 days.

Subprocessors

Full list at /legal/subprocessors. We notify customers 30 days before adding a subprocessor.