Privacy Policy

Last updated: March 28, 2026

Your data is yours

We never sell or share your project data with third parties.

Encrypted at rest

All stored data is encrypted using industry-standard AES-256.

Minimal collection

We only collect what's necessary to provide the service.

Delete anytime

You can delete your account and all data at any time.

1. Information We Collect

Account Information

When you create an account, we collect:

  • Email address
  • Password (hashed and salted, never stored in plain text)
  • Account creation date

Project Data

To provide our service, we store the context data you choose to sync:

  • Project metadata (name, description, settings)
  • Context files (project.json, progress.json, memory.json)
  • Decisions and their rationale
  • Bug reports and solutions
  • Session snapshots

Usage Data

We automatically collect certain information when you use our Service:

  • API call timestamps and counts (for rate limiting)
  • Error logs (for debugging and improving the service)
  • General usage patterns (anonymized)

2. How We Use Your Information

We use your information solely to:

  • Provide and maintain the Memexa service
  • Authenticate your access and secure your account
  • Communicate with you about service updates or issues
  • Enforce usage limits based on your plan
  • Improve and optimize our service
  • Respond to your support requests

3. Data Sharing

We do not sell your data. We only share information in these limited circumstances:

  • Service providers: We use trusted third-party services for hosting, analytics, and payment processing. These providers are contractually bound to protect your data.
  • Legal requirements: We may disclose information if required by law or to protect our rights.
  • Business transfers: In the event of a merger or acquisition, user data may be transferred with appropriate protections.

4. Data Security

We implement industry-standard security measures:

  • All data encrypted at rest (AES-256)
  • All connections encrypted in transit (TLS 1.3)
  • API keys hashed using SHA-256
  • Regular security audits and updates
  • Access controls and monitoring

5. Data Retention

Retention Periods

  • Free tier project data90 days
  • Pro tier project dataUnlimited (while subscribed)
  • Account data after deletion30 days (then permanently deleted)
  • Backup copies90 days

6. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate data
  • Deletion: Delete your account and all associated data
  • Export: Download your project data in JSON format
  • Restriction: Request limited processing of your data

To exercise these rights, contact us at privacy@memexa.dev

7. Cookies

We use minimal cookies essential for the service:

  • Authentication: To keep you logged in
  • Preferences: To remember your dashboard settings

We do not use tracking cookies or third-party advertising cookies.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by email or through the Service. Your continued use after changes constitutes acceptance.

9. Contact Us

For privacy-related questions or concerns:

Email: privacy@memexa.dev