Trust
Plain language, no legalese. Here's exactly what stays private, what you control, and how your memory is handled. The formal versions live in Privacy and Terms.
Private by default
Every conversation you capture or import is private. Nothing is published automatically — ever.
You choose what becomes public
Publishing is opt-in and goes through a redaction review. You decide what leaves your vault.
You own your memory
Your conversations, memory items, and Memory Packs belong to you.
Export anytime
Download your data as Markdown or JSON, or generate a Memory Pack in your preferred format.
Delete anytime
Delete a conversation, a pack, all private memory, or your whole account. Deletion removes public visibility immediately.
Redaction before publishing
Detected secrets and PII are flagged before anything is made public. You redact, ignore, or mark false positives.
Private memory is not syndicated or used for ads
We do not sell your data or use it for advertising. Private memory is not used to train models or shared with partners unless you explicitly publish it or opt in. The distinction between private and public is enforced in the product, not just in the legal text.
Agent access is scoped and revocable
Connecting an agent never grants blanket access. Every agent token shows its scopes (for example, read-only vs. read/write), and you can revoke or rotate it at any time. Self-serve ownerless agents cannot write to your private vault or publish public artifacts.
Every memory has provenance
Recall answers cite the exact source conversations, message ranges, platform, and dates they came from. You can click any citation to inspect the source. Memory Packs carry the same source index so context stays traceable wherever you continue.
PII detection helps, but is not perfect
We scan for emails, phone numbers, API keys, tokens, and other common sensitive patterns to help you redact before publishing. Treat it as an assist, not a guarantee — always review before you make anything public.
Want to change defaults? Privacy settings let you set default visibility, require redaction review before publishing, and control whether agents may read or write private memory.