Privacy Policy

Last updated: February 27, 2026

1. Overview

At Rememora, your privacy is fundamental to our product. This policy explains what data we collect, how we use it, and the controls you have. We are committed to transparency and minimal data collection.

2. Data We Collect

Account data: Email address and hashed password for authentication.

WhatsApp data: When you connect WhatsApp, we index your messages, media metadata, and attachments to enable search and AI features. Message content is encrypted at rest using AES-256.

Usage data: Basic analytics like feature usage counts and session duration to improve the product. We do not track individual message content for analytics.

3. How We Use Your Data

  • To provide semantic search across your conversations
  • To generate AI summaries and extract commitments
  • To process attachments (OCR, document parsing)
  • To send you reminders for tracked commitments
  • To improve service reliability and performance

4. What We Never Do

  • Never sell your data to third parties
  • Never train AI models on your conversations
  • Never share message content with advertisers
  • Never access your data without your explicit action

5. Data Security

We employ multiple layers of security:

  • AES-256 encryption for data at rest
  • TLS 1.3 for data in transit
  • Row-level security (RLS) in our database — your data is isolated from other users
  • Regular security audits and dependency updates

6. Third-Party Services

We use the following services to operate Rememora:

  • Supabase: Database and authentication (hosted in the US)
  • Vercel: Application hosting
  • OpenRouter: AI inference for search and summaries (message content is sent for processing but not stored)
  • Backblaze B2: Encrypted attachment storage

7. Data Retention & Deletion

Your data is retained as long as your account is active. You can delete individual chats or your entire account at any time. Upon account deletion, all data is permanently purged within 30 days. Backups are rotated on a 90-day cycle.

8. Your Rights

You have the right to:

  • Access all data we hold about you
  • Export your data in standard formats
  • Request deletion of your account and all associated data
  • Disconnect WhatsApp at any time, stopping all data sync

9. Contact

For privacy-related questions, contact us at privacy@rememora.app.