Legal

Privacy Policy

Version of September 23, 2026

1. Who processes your data

1.1. This Policy explains what data the Memo service (memoio.space) collects, why, and how it's protected.

1.2. Your data is processed by Alexey Sergeevich Oparin, individual entrepreneur (sole proprietor, Russia), tax ID (INN) 470422619193 ("we", "us").

1.3. By using Memo, you agree to this Policy. If you don't agree, don't use Memo.

2. What we store

2.1. Your account: email, name, time zone, plan status and dates, and a scrypt hash of your password. We never store the password itself.

2.2. Google or GitHub sign-in: they tell us your verified email, your name (on GitHub, your name or login) and your account ID with them. Your Google or GitHub password never reaches us.

2.3. Your computers: the name of each one, when it was connected and when it was last used. Each computer's key is stored only as a SHA-256 hash.

2.4. Your graph: branches, steps, passports and their change history, questions and answers, and whatever the Memo hook and your agents send from connected sessions. That includes your messages in those sessions and images attached to steps.

2.5. Payments: if you subscribe, the payment provider's customer and subscription IDs. Card details go to the payment provider and never reach us.

2.6. Support email: your address and what you write to support@memoio.space.

2.7. IP address: the server needs it to answer requests and to limit too many login attempts. The site and Memo don't write visitors' IP addresses to logs: for the login limits the address is kept only in the server's memory and then forgotten. The mail server writes the addresses of mail servers and programs that connect to it into its service log, which is overwritten as it fills up.

2.8. We don't ask for passports, documents or photos.

3. Why

3.1. Only to run Memo for you:

• to show your graph in the panel;
• to give your agents their branches and passports;
• to deliver your answers;
• to manage your plan and payments;
• to answer support email;
• to protect accounts from password guessing and break-ins.

3.2. We don't sell data, don't show ads and don't train AI models on your graph.

4. Legal basis

4.1. We process data to carry out the Terms of Use with you, and with your consent. You give consent when you sign up.

4.2. You can withdraw consent by emailing support@memoio.space. We will then delete your account and data (section 8): Memo can't work without them.

5. Cookies and browser storage

5.1. The site has no analytics, ad trackers or third-party scripts.

5.2. Cookies:

• memo_s keeps you logged in for up to 30 days. Page scripts can't read it, and it isn't used for tracking;
• memo_lang remembers the site language you chose, for up to 1 year;
• memo_oauth_google or memo_oauth_github exists only while you sign in with Google or GitHub: it lives 10 minutes and is cleared after sign-in.

5.3. Browser storage holds one mark, memo-in: that you're logged in. The site uses it to show the right buttons.

6. Who else gets data

6.1. We share data only when:

• Memo needs it to work (see the list below);
• the law requires it;
• you have agreed to it yourself.

6.2. Who takes part in running Memo:

• Aeza hosting: Memo runs and your data is stored on a server rented from it; the support mailbox is there too. Server country: USA. The second server, which takes the backups, is also at Aeza, in Finland.
• Google and GitHub, if you sign in with them. They tell us the data in 2.2.
• Google Drive stores our backups. Backups are encrypted before they are sent, and only we have the key.
• Google Fonts: the site loads fonts from Google's servers, so Google sees your IP address and browser.
• The payment provider Lava.top (LAVALANE LTD, Cyprus) takes payments on its own page and handles card details under its own rules.

6.3. Servers of Google, GitHub and the payment provider may be in other countries.

6.4. What your agents read from Memo becomes part of their work and goes to the model's maker under your own agreement with them. Memo itself doesn't send your data to model makers.

7. Storage and security

7.1. Your data is stored on Memo's rented server. Country: USA.

7.2. Connections to the site and the panel are encrypted (HTTPS).

7.3. Passwords are stored only as scrypt hashes, computer keys only as SHA-256 hashes.

7.4. Maintenance access to the server is by key only, never by password.

7.5. Backups: every 6 hours our second server takes a copy of Memo's data, encrypts it (restic) and stores it in Google Drive. The second server is also rented from Aeza and is in Finland.

7.6. We take reasonable measures to protect data, but sending data over the internet always carries some risk.

7.7. We are not liable for loss or disclosure of data caused by other people or by the user, for example if a password or a computer key reached someone else.

8. How long we keep data

8.1. While your account exists, we keep its data: Memo can't work without it.

8.2. If your plan is unpaid, your data stays in place: the panel opens, and your agents wait for payment. We keep the data of an unpaid account for 90 days after the beta ends or after the last paid month. Before deleting it, we email your account address.

8.3. After account deletion, the data is erased from the server within 30 days. It disappears from the backups as old backups are replaced by new ones, within 12 months at most.

9. Your rights

9.1. Find out what data we hold about you. You see your graph in the panel; for the rest, email us.

9.2. Correct your data by emailing support@memoio.space.

9.3. Delete your account and all its data by emailing support@memoio.space from your account email.

9.4. Revoke any of your computers on your account page, at any time.

9.5. Withdraw consent as described in 4.2.

10. Changes to this Policy

10.1. We may change this Policy. The new version appears on this page with its date.

10.2. If you keep using Memo after a change, you accept the new version.

11. Contact

11.1. Any question about your data: support@memoio.space.

11.2. Who processes your data: Alexey Sergeevich Oparin, individual entrepreneur (sole proprietor, Russia), tax ID (INN) 470422619193.

11.3. Website: memoio.space.