Privacy Policy

1. Introduction

Mnemetic ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI platform and services.

We are headquartered in the European Union and fully comply with the General Data Protection Regulation (GDPR). Your data never leaves the EU unless you explicitly consent.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide

• Account information (name, email, company name)
• Contact form submissions
• Support requests and communications
• Payment information (processed securely by our payment provider)

3.2 Information Collected Automatically

• Usage data and analytics (anonymized)
• Device and browser information
• IP address (for security and fraud prevention)
• Cookies and similar technologies

3.3 Data You Process Through Our Platform

When you use our AI platform, you may upload and process your own data. You remain the data controller for this content. We act as a data processor and only process this data according to your instructions.

4. How We Use Your Information

• To provide and maintain our services
• To process your transactions
• To send you service-related communications
• To respond to your inquiries and support requests
• To improve our platform and develop new features
• To ensure security and prevent fraud
• To comply with legal obligations

5. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract: Processing necessary to perform our contract with you
• Legitimate Interest: Processing for our legitimate business interests (e.g., improving our services)
• Consent: Where you have given explicit consent
• Legal Obligation: Processing required by law

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Account data: Retained while your account is active, plus 2 years after closure
• Transaction data: Retained for 7 years for tax compliance
• Support communications: Retained for 3 years
• Analytics data: Anonymized and aggregated after 26 months

7. Data Sharing and Transfers

We do not sell your personal data. We may share your data with:

• Service Providers: Third parties who help us operate our platform (all EU-based or with adequate safeguards)
• AI Model Providers: When you use third-party AI models, data is processed according to their terms
• Legal Requirements: When required by law or to protect our rights

EU Data Sovereignty: Your data is stored and processed exclusively within the European Union. We do not transfer data outside the EU unless you explicitly choose to use a non-EU AI model provider.

8. Your Rights (GDPR)

Under the GDPR, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, contact us at support@mnemetic.ai

9. Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption in transit over HTTPS. Provider keys, OAuth tokens and connector credentials encrypted in the database. Document content is not encrypted at application level today.
• A blocking security test suite gates every deployment. No external penetration test has been conducted to date.
• Access controls and authentication requirements
• Employee training and confidentiality agreements
• Incident response procedures

10. Cookies

We use essential cookies to operate our platform and optional analytics cookies to improve our services. You can manage your cookie preferences at any time. See our Cookie Policy for more details.

11. Children's Privacy

Our services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

13. Google User Data & Limited Use

When you connect a Google account (Gmail, Google Calendar, or Google Drive), Mnemetic accesses your Google user data only to power features you explicitly trigger inside the application. The Google scopes we request are minimized to what those features require:

• Gmail (gmail.modify, gmail.send): read and summarize your emails, draft and send messages, and organize your mailbox (archive, labels, mark as read) — all on your request.
• Google Calendar: read and manage your events when you ask the assistant to check availability or schedule.
• Google Drive (drive.file): access only the specific files you select through the Google Picker — never your entire Drive.

Mnemetic's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• Limited use: we use Google user data solely to provide and improve the user-facing features you explicitly invoke — never for unrelated purposes.
• Restricted transfers: we do not transfer this data to third parties except as necessary to provide or improve the feature (with your consent), for security, to comply with the law, or in a merger or acquisition with your explicit consent.
• No human reading: no human reads your Google data unless you give explicit consent, for security purposes (e.g. investigating abuse), on anonymized and aggregated data, or where required by law.
• No prohibited commercial use: we do not sell this data, do not use it for advertising or retargeting, do not use it for credit scoring, and do not use it to train generalized AI/ML models.

Your Google data is stored and processed on infrastructure located in France. You can disconnect a Google account and request deletion of the associated data at any time from within the application or by contacting us.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: