Privacy Policy

Overview

Memoria is designed with privacy as a core principle. We process your code diffs in-memory and never store your source code. This policy explains what data we collect and how we use it.

What We Collect

Account Information

• Email address (for authentication and notifications)
• Name (optional, for personalization)
• GitHub username and OAuth tokens (for GitHub App integration)

Analysis Metadata

• Repository name and organization
• PR numbers and timestamps
• Risk scores and analysis results
• File paths mentioned in analyses (not file contents)

Usage Data

• Number of analyses performed
• Feature usage patterns
• Error logs for debugging

What We Don't Collect

• Source code - Diffs are processed in-memory and immediately discarded
• Secrets or credentials - We never access or store sensitive data from your repositories
• Private repository contents - Only metadata needed for analysis

How We Use Your Data

• To provide and improve the Service
• To display your analysis history in the dashboard
• To send important service notifications
• To enforce usage limits and billing
• To diagnose and fix technical issues

Data Retention

Analysis metadata is retained for the duration of your subscription plus 30 days. Account data is retained until you delete your account. You can request data export or deletion at any time.

Data Security

We use industry-standard security measures including:

• TLS encryption for all data in transit
• Encrypted storage for data at rest
• Regular security audits and updates
• Minimal data collection principle

Third-Party Services

We use the following third-party services:

• GitHub - For OAuth authentication and repository access
• Stripe - For payment processing (we never see your full card number)
• Vercel - For hosting and analytics

Self-Hosted Option

If you prefer complete data isolation, you can run Memoria entirely on your own infrastructure using the open-source MCP server and CLI. No data is sent to our servers in this configuration.

Your Rights

You have the right to:

• Access your personal data
• Export your data in a portable format
• Request correction of inaccurate data
• Request deletion of your data
• Opt out of marketing communications

Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or sell data to advertisers.

Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email or through the Service.

Contact

For privacy-related questions or requests, contact us at privacy@byronwade.com