1. Information we collect
We collect only what we need to provide the service:
- Account information: your email address and a hashed password (we never store your password in plain text)
- Content you create: workspaces, memories, versions, and tags
- Session data: IP address and user agent for active sessions, used only for security purposes
2. How we use your information
Your data is used exclusively to provide and improve the recuerd0 service:
- To authenticate you and maintain your session
- To store and serve your workspaces and memories
- To send you service-related emails (password resets, account notifications)
- To detect and prevent unauthorized access
3. What we don't do
We believe your data is yours. We commit to these principles:
- We do not sell your data to anyone, for any reason
- We do not share your data with third parties for marketing, advertising, or analytics
- We do not use your data to train AI or machine learning models — not ours, not anyone else's
- We do not track you across websites or services
- We do not display ads or engage in behavioral targeting
- We do not use third-party analytics, tracking pixels, or social media integrations
4. Data storage and security
Passwords are hashed using bcrypt. API access tokens are stored as SHA-256 hashes and the raw token is shown only once at creation. Sensitive credentials are never stored in plain text. Sessions use signed, HTTP-only cookies. We use HTTPS for all connections.
5. Your rights
You have full control over your data:
- Access: view all your data through the application or API
- Export: download your data via the API at any time
- Correction: edit or update any of your content
- Deletion: delete individual memories, workspaces, or your entire account
- Portability: your data is stored in standard formats and accessible via API
6. Data retention
- Active data: retained as long as your account exists
- Deleted workspaces: soft-deleted with a 30-day recovery window, then permanently removed
- Deleted memories: permanently removed immediately
- Account deletion: all data permanently removed upon account closure
- Session data: automatically cleaned up when sessions expire
7. Cookies
We use only essential cookies:
- Session cookie: a signed, HTTP-only cookie to maintain your login session
- UI preference cookie: remembers your sidebar state (open/closed)
We do not use third-party cookies, tracking cookies, or advertising cookies.
8. Changes to this policy
If we change this policy, we will notify you by email or through the application before the changes take effect. The "last updated" date at the top reflects the most recent revision.
9. Contact
Questions about your privacy? Reach out at [email protected].