Privacy

Data we collect

When you use the hosted service we process:

• Account data. Email, hashed password (or OAuth subject id), display name, and the organization the account belongs to.
• Project content. Turns, memories, rules, skills, claims, reviews, and any other content you record through the API, MCP, or CLI. We do not read your project content for any purpose other than operating the service (storage, search, and the live broadcast).
• Embeddings. Vector representations derived from your project content, used for semantic search. Embeddings are generated by Cloudflare Workers AI (model @cf/baai/bge-large-en-v1.5) and stored in Cloudflare Vectorize.
• Operational logs. Request metadata (IP, user agent, response status, latency) for rate-limiting, abuse prevention, and debugging. Retained 30 days.
• Billing data. If you subscribe to a paid plan, Stripe holds your payment details; Memoturn stores the customer id and metered-usage counters, never the card.

Sub-processors

The hosted service runs on the following sub-processors:

• Cloudflare (Workers, Durable Objects, Vectorize, Workers AI, KV, Hyperdrive). Hosts the edge worker, the per-project coordinator, the embeddings index, and the API-key store.
• Neon (managed Postgres). Stores account, project, turn, memory, rule, and skill rows.
• Stripe. Used only for paid plans to handle checkout, billing, and metered usage.
• Google and GitHub. OAuth providers; used only if you sign in via OAuth, in which case the provider sees the sign-in flow and returns a subject id we store against your account.

Retention and deletion

Project content is retained for the lifetime of the project. Operational logs are retained 30 days. Billing records are retained for the period required by tax and accounting law, typically seven years.

Deletion of an entire project, organization, or account currently runs through the privacy contact below; a self-serve project-delete endpoint is planned. Per-turn and per-memory deletion is available today through the API and MCP forget_memory tool.

Your rights and contact

If you are in the EU, UK, or California, you have rights to access, correct, export, or delete your data, and to object to or restrict its processing. To exercise any of these rights, or for any other privacy question, email privacy@memoturn.ai. We respond within 30 days.

We do not sell personal data, do not use your project content to train models, and do not run third-party tracking on the hosted dashboard or marketing pages.