Privacy Policy

1. Information We Collect

We collect information that you provide directly to us, including but not limited to:

• Account information (name, email address)
• Files and documents you upload to the service
• Chat conversations and messages
• Usage data and analytics
• Communication preferences
• Technical information about your device and system

2. How We Use Your Information

We use the information we collect to:

• Provide and maintain our services
• Process your files and documents for AI-powered features such as search and summarization
• Execute AI agent tasks you initiate, including interactions with connected third-party services
• Improve and personalize user experience
• Analyze usage patterns and optimize performance
• Communicate with you about updates and changes

3. Google User Data

When you connect Google services (such as Gmail, Google Calendar, Google Drive, Google Docs, Google Sheets, or YouTube) through our integrations, we access your Google user data solely to perform actions you explicitly request. Specifically:

What we access

• Gmail: Send emails on your behalf when you instruct an AI agent to do so
• Google Calendar: Read, create, and manage calendar events at your direction
• Google Drive: Search, list, and retrieve file metadata and contents when you request it
• Google Docs: Read and interact with documents at your direction
• Google Sheets: Read from and write to spreadsheets at your direction
• YouTube: Search and retrieve video and channel information

How we use Google data

• Google user data is used exclusively to provide and improve user-facing features that you initiate within Memcode
• Data retrieved from Google APIs is processed by AI models only when you explicitly request an action (e.g., "send an email", "check my calendar", "search my Drive")
• We do not use Google user data for advertising, retargeting, or any purpose unrelated to the functionality you requested

Storage and security

• OAuth tokens are stored encrypted in our database and are used only to authenticate requests to Google APIs on your behalf
• We do not persistently store the content of your emails, calendar events, or Drive files beyond what is necessary to complete your requested action
• You can revoke access to any connected Google service at any time from your Account Integrations page or from your Google Account permissions

Limited use disclosure

Memcode's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide or improve user-facing features prominent in our application
• We do not transfer Google user data to third parties except as necessary to provide or improve user-facing features, for security purposes, to comply with applicable law, or as part of a merger or acquisition with explicit user consent
• We do not use Google user data for serving advertisements or for retargeting, personalized, or interest-based advertising
• Human employees do not read Google user data unless you have given affirmative consent, it is necessary for security purposes or legal compliance, or the data has been aggregated and anonymized for internal operations

4. Information Sharing

We do not sell or rent your personal information to third parties. We may share your information in the following circumstances:

• With your consent
• With AI model providers (such as OpenAI, Anthropic, Google, and xAI) to process your requests — these providers process data according to their own privacy policies and do not retain your data for model training when accessed through our API agreements
• To comply with legal obligations
• To protect our rights and safety
• In connection with a business transfer or acquisition

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, secure authentication via OAuth 2.0 with PKCE, and access controls on all stored data.

6. Data Retention

We retain your account data and chat history for as long as your account is active. When you delete a chat, file, or your account, the associated data is permanently removed from our systems. OAuth tokens for connected services are deleted when you disconnect an integration.

7. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Object to data processing
• Request data portability
• Revoke access to connected third-party services at any time

8. Contact Us

If you have questions about this Privacy Policy, please contact us at tim@memcode.ai