Privacy policy

Memospace LLC is responsible for the Memospace service. Contact us through our support form, or write to us at 18117 Biscayne Boulevard, Suite 2401, Miami, Florida 33160, United States.

• Account details: email address and sign-in records; if you choose Google sign-in, the basic profile details Google provides.
• Workspace content: boards, notes, tasks, documents, files, images, links, and related titles, tags, dates, and layout information you add.
• Service and billing records: plan, credit, transaction, and support records needed to provide the service and handle payments or requests.
• Optional connections: information needed for features you choose, such as a calendar feed or a shared link.
• Mail you send to your workspace: if you use your Memospace email address, we receive and store those messages — the sender, the subject, the text, and any files attached — so they can appear in your Inbox. Mail arrives through Resend. We accept it only from the address your account signs in with, and refuse everything else without storing it or answering it. We email a short receipt back to that same address saying where the message went; we send no other mail on your behalf.
• What you tell us when you join: the two optional questions on the welcome screen — what you plan to use Memospace for, and how you heard about us. Both can be skipped, and skipping changes nothing about the service.
• Usage and device information: essential browser storage, basic diagnostic data, and limited product events used to operate, secure, and improve Memospace.

We use information to provide your account and workspace, save and retrieve your content, process payments, respond to support requests, secure the service, prevent abuse, and meet legal obligations. Where a privacy law requires a lawful basis, the basis depends on the activity: providing a requested service, complying with law, our legitimate interests in operating and protecting the service, or your consent where we ask for it.

We do not sell personal information or use workspace content for targeted advertising.

When you use an AI feature, the text and workspace context needed for that request are sent to the AI provider configured for your account or the service. The current default provider is DeepSeek, whose service operates from China. Do not send information to an AI provider unless you are comfortable with that provider processing it. Optional integrations receive only the information needed for the feature you choose.

We use AI providers to answer your request; Memospace does not use your workspace content to train its own general-purpose AI model. The provider's separate handling is governed by its terms and privacy information.

If you connect Google Calendar, Memospace asks only for read-only access (calendar.readonly) and never creates, edits or deletes anything in your calendar. We read your events so they can appear beside your tasks, on your boards and in the Tasks calendar. We store the connection itself — your email address and an encrypted refresh token — and not a copy of your calendar: events are fetched when you look at them.

Memospace's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data for advertising, we do not sell it, and we do not use it to train any AI model. No human reads it except where you ask us to for support, where the law requires it, or for security. You can disconnect at any time in Settings, which deletes our stored token, and you can revoke the grant yourself from your Google account.

We use service providers to host and operate Memospace. Depending on the features you use, these include Supabase for account, database, and file storage; Cloudflare for hosting and delivery; DeepSeek or another provider you select for AI requests; Stripe for payments; Google for sign-in or calendar features; Resend for email we send and for mail you forward to your workspace; GitHub, where the daily database backup is stored privately; PostHog and Sentry for product analytics and error diagnostics when configured; and Unsplash or GIPHY when you search for media. Our Supabase project is hosted in the United States (US West); Cloudflare processes requests across its network, and AI requests using the default provider may be processed in China. Contact us for the current provider and transfer information relevant to your account.

Memospace LLC is located in the United States. Our Supabase project is hosted in US West, and our providers may process information in other countries. AI requests sent to the current default provider may be processed in China. We are still reviewing the specific transfer arrangements required for each market. We will not open paid access in a market until its required safeguards and local requirements are confirmed. Contact us through our support form for information about the safeguards that apply to your data.

Russia: Memospace has not verified a Russian data-localization setup or the other local requirements needed to offer the service there. We cannot represent Memospace as ready for Russian residents' personal data. Do not use Memospace to store personal data of Russian citizens until we announce that Russia is supported.

Your workspace is private by default. If you create a share link, anyone who has that link may be able to view the material included in it. We may also disclose information to providers described above, when you direct us to, to comply with law, or to protect users and the service. We do not share workspace content with advertisers.

We keep account and workspace information while your account is active and as needed to provide the service. If you delete content or close your account, we remove it from active systems. We may retain limited records for security, disputes, accounting, or legal obligations for as long as needed for those purposes.

Backups. We take a copy of the database once a day and keep the last fourteen, stored privately with GitHub. A closed account is gone from the live service at once, and disappears from the backups as they rotate — so within fourteen days.

Closing your account. You can do it yourself, in Settings under Close account. It removes your workspace, your files, your tasks and your sign-in details. It cannot be undone and we cannot recover it for you afterwards.

To request a copy of your information, or for help with a deletion, contact us through our support form. We may need to verify your identity first.

We use necessary browser storage for sign-in, security, and preferences. Limited analytics and error diagnostics may be used to understand service reliability. We do not use advertising cookies. You can manage browser storage in your browser settings, although blocking necessary storage can prevent sign-in or workspace features from working.

Depending on your location and the law that applies, you may be able to access, correct, export, or delete personal information, object to or restrict certain processing, withdraw consent, or complain to a privacy regulator. California residents may have additional rights to know, correct, delete, and opt out of certain sale or sharing. We do not sell personal information.

To make a request, contact us through our support form and tell us the account and request. We will respond within the time required by applicable law and explain if an exception applies.

Memospace is not designed for children under 13, and we do not knowingly collect their personal information. Contact us if you believe a child has provided information so we can review it.

We may update this policy as the service or legal requirements change. We will post the updated version here and change the date above.