Privacy Policy

Last updated: February 17, 2026

1. Introduction

Memstate AI ("Memstate," "we," "us," or "our") operates the Memstate AI platform, including the website, API, and MCP server (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address (used for passwordless authentication)
  • Account creation and last login timestamps

2.2 Memory Data

When you use the Service to store memories, we collect and process the content you provide, including:

  • Memory content and metadata you store through the API or MCP tools
  • Keypaths and organizational structure you create
  • Vector embeddings generated from your content for semantic search
  • Version history and revision data

2.3 Usage Data

We automatically collect certain information when you access the Service:

  • API request logs (endpoints accessed, timestamps)
  • IP address and browser user agent
  • Feature usage and interaction patterns

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Authenticate your identity and manage your account
  • Process and store your memory data as directed by you
  • Generate vector embeddings to enable semantic search across your memories
  • Improve and optimize the Service
  • Communicate with you about your account or the Service
  • Detect, prevent, and address technical issues or abuse

4. Data Storage and Security

Your memory data is stored securely in our infrastructure with encryption at rest and in transit. We implement appropriate technical and organizational measures to protect your data, including:

  • Data isolation by owner — your memories are only accessible to you
  • API key authentication for all programmatic access
  • Encrypted connections (HTTPS/TLS) for all data in transit
  • Access controls limiting internal access to your data

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information only in the following circumstances:

  • Service Providers: With third-party vendors who assist in operating the Service (e.g., analytics, infrastructure hosting), under obligations of confidentiality
  • Legal Requirements: When required by law, regulation, or legal process
  • Safety: To protect the rights, property, or safety of Memstate AI, our users, or the public
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, with notice to you

6. Your Rights and Choices

You have the right to:

  • Access the memory data stored in your account
  • Delete your memories or your entire account
  • Export your data
  • Opt out of non-essential communications

To exercise these rights, contact us at our contact page.

7. Data Retention

We retain your memory data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your data within 30 days, except where we are required to retain it for legal or compliance purposes.

8. Analytics

We use PostHog for product analytics to understand how users interact with the Service. PostHog may collect usage data such as pages visited, features used, and session duration. You can opt out of analytics tracking through your browser settings or by using a tracking blocker.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, please contact us.