Skip to main content
Last updated: November 6, 2026 This Privacy Policy describes how Memo (“we”, “us”, or “our”) collects, uses, and protects your data when you use the Memo platform at memo.solutions, the Memo — Inspiration Board Capture browser extension, and Memo’s MCP connection to AI agents such as ChatGPT and Codex.

​
What we collect

When you use Memo, we collect the following: Account information
  • Email address (used for sign-in and attribution on captures)
  • Display name and avatar (shown in your workspace alongside content you add)
  • Authentication tokens (issued by our auth provider when you sign in)
Workspace activity
  • Inspirations you save: images, screenshots, links, source URLs, page titles, tags, and notes
  • Which workspaces you belong to and your role in each (viewer, editor, admin, owner)
  • Which workspace is currently selected in the extension
  • Which AI agent you connect to Memo and which Memo actions it calls, with the workspace it worked in, recorded to run the beta and to support you
  • Brand Kits and their colors, fonts, logos and rules; generation prompts and attached references; generated images and videos; and the projects where you save them
Connected AI agents When you authorize an agent to connect to Memo, the agent can send task inputs to Memo and receive the workspace content needed for those actions, subject to your Memo workspace permissions. Depending on your request, this can include Brand Kits, saved assets, generation prompts, references and results. The agent service receiving that content handles it under its own privacy policy. Only connect an agent you intend to give access to your Memo workspace. Extension-specific data
  • Authentication tokens stored locally in your browser via chrome.storage.local, used to authorize uploads to your workspace
  • Your selected environment (production or local development) — used only by developers; defaults to production
We do not collect:
  • Your browsing history
  • Pages you visit while not actively using the extension
  • Page contents that you do not explicitly capture
  • Any data from third-party tracking, analytics, or advertising scripts in the extension

​
How we use it

Your data is used solely to operate the Memo platform:
  • To authenticate you and authorize uploads to your workspace
  • To display the inspirations you save back to you and your workspace collaborators
  • To attribute captures to the user who saved them
  • To filter, search, and organize your captures using the tags you apply
  • To respect role-based permissions (e.g. preventing viewers from editing)
  • To carry out the actions you request through connected agents, prepare generation estimates, process approved generations, and return or file their results
  • To understand how Memo is used and improve it. This can include a founder looking at what you generate, from the admin area. Every such view by staff is recorded in an audit log, and nothing is published or shared without your separate written approval
We do not sell your data, share it with advertisers, or use it for any unrelated purpose.

​
Where it goes

When you save an inspiration:
  1. The image (if any) is uploaded to our object storage, hosted by Supabase
  2. The metadata (URL, title, tags, your user ID, workspace ID) is written to our Postgres database, also hosted by Supabase
  3. All requests are made over HTTPS
The data resides in Memo’s own infrastructure. We use the following processors to operate the service: These processors handle data on our behalf under standard data processing agreements. We do not share your data with any third party for their own purposes, except as set out for third-party model providers in our Terms of Service. For AI generation, Memo sends the generation prompt and attached references to the third-party provider running the selected model. Memo stores the generation and its output in your workspace. Model providers’ handling of those inputs and outputs, including the training use permitted by some providers, is described in the Third-party model providers section of our Terms of Service. The workspace-content retention and deletion controls below also apply to content created through a connected agent.

​
How long we keep it

  • Captures and workspace content: retained as long as the workspace exists. You can delete individual items, or an entire workspace, at any time from the Memo app. Deleted items and workspaces are kept for 30 days so they can be restored, then erased for good.
  • Account data: retained while your account is active. To close your account, use Delete my account in Manage workspace → Profile, or email admin@memo.solutions. Within 30 days of a verified request we permanently remove your account record and de-associate your captures from your identity.
  • Extension-local data (auth token, selected workspace): cleared when you sign out from within the extension popup or when you uninstall the extension.

​
Your rights

Depending on where you live, you may have rights under data protection laws (such as GDPR in the EU/UK, or CCPA in California), including:
  • Access — request a copy of the data we hold about you
  • Correction — fix inaccurate data
  • Deletion — request that we delete your account and associated data
  • Portability — receive your data in a machine-readable format
  • Objection — object to certain types of processing
To exercise any of these rights: account deletion is available in-app (Manage workspace → Profile → Delete my account), and a full data export is available at any time from the same panel (Export my data). For access, portability, or anything else, email us at admin@memo.solutions — we complete verified requests within 30 days.

​
What the export contains

Export my data downloads a single JSON file with your profile and preferences, plus — for every workspace you own — its settings and members, invites you sent, captures and their collections, generations and the folders they are filed in, projects and their canvases, brand kits (colors, fonts, logos, brand book, photography collections and color palettes), Assets and Workflows, chat history, usage and credit history, and purchase attempts. Payment identifiers, internal cost figures and search indexes are not included. Links to your files inside the export are signed and valid for up to seven days after the export was made. Download files you want to keep before deleting your account or workspace: deleting the underlying files makes their links stop working sooner. Each section is capped at 5,000 rows; if a section hit the cap, the app tells you when the download finishes.

​
Security

  • All data is transmitted over TLS (HTTPS)
  • Database access is gated by row-level security policies that enforce workspace membership and roles
  • Authentication tokens are stored in chrome.storage.local, isolated to the extension’s origin and not accessible to web pages
  • We follow industry standard practices to prevent unauthorized access
No system is perfectly secure. If you become aware of a vulnerability, please report it to security@memo.solutions.

​
Children

Memo is intended for users 16 and older. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

​
Changes to this policy

We may update this policy from time to time. We post the updated policy on this page, and the “Last updated” date at the top is always current.

​
Contact

Questions, requests, or concerns about your data:
This policy is also available at memo.solutions/legal/privacy.