Privacy policy

This policy applies to mnemos.ai, app.mnemos.ai, our marketing properties, and the Mnemos services offered through them. It does not apply to third-party services that integrate with Mnemos under your control — those services have their own privacy policies that you must consult separately.

References to Customer Data mean information that you, as a Mnemos customer, upload to or generate within the service, including transcripts, SOPs, graph entities, and connected source data. Customer Data is processed under your separate Data Processing Addendum and is not described further in this policy.

References to Site Data mean information we collect when you visit our public marketing surfaces or interact with our sales team, separate from any product workspace.

Information you provide directly: name, work email, company, role, and any free-text content you submit through forms (demo requests, contact, support tickets, careers applications).

Information we collect automatically when you visit our sites: IP address, device and browser characteristics, referring URL, pages viewed, approximate location derived from IP, and identifiers placed in cookies or local storage. We rely on these signals for site analytics, security, and product improvement.

Information we receive from integrations and authentication providers: identifiers and basic profile information from SSO providers (Okta, Google, Microsoft) when you sign in, and provisioning records from SCIM providers when your administrator configures them.

We use Site Data and product account information to provide and operate the service, communicate with you about your account, secure the service, and improve our products. We do not sell personal information and we do not use Customer Data to train Mnemos models or any upstream third-party model.

We use marketing contact information you provide (for example through demo requests) to respond to your inquiry and to send periodic updates we reasonably believe are relevant to your stated interests. You can unsubscribe from non-essential communications at any time.

Where legally required (for example under GDPR), we rely on the lawful bases of legitimate interest, performance of contract, consent, or compliance with legal obligation, depending on the activity.

We share information with sub-processors who provide infrastructure, analytics, communication, and inference services on our behalf. The current list is published at /trust and we maintain a notification mechanism for material changes.

We share information when required by law, valid legal process, or to protect the rights, property, or safety of Mnemos, our customers, or the public, applying the principle of least disclosure consistent with our obligations.

We do not sell personal information. We do not share personal information with advertising networks for cross-context behavioral advertising.

We use a limited set of cookies to operate the site, remember your session, and measure traffic. We describe each cookie and its retention in our cookie policy at /legal/cookies.

You can disable non-essential cookies in your browser settings or via the consent control we surface on first visit in jurisdictions that require it.

Site Data is retained for the period necessary to fulfill the purpose for which it was collected, typically no longer than 24 months, unless we have a legal obligation to retain it longer.

Marketing contact information is retained until you unsubscribe or request deletion, after which we retain only minimal records necessary to honor that request.

Customer Data retention is governed by your subscription agreement and DPA. On termination we delete Customer Data within 30 days unless we are legally required to retain it.

Depending on where you live, you may have the right to access, correct, delete, or port the personal information we hold about you, to object to or restrict certain processing, and to lodge a complaint with your local data protection authority.

To exercise these rights, contact privacy@mnemos.ai with sufficient information to verify your identity. We will respond within the timelines required by applicable law.

Mnemos is headquartered in the United States. We may transfer personal information internationally to deliver the service. Where required, we rely on Standard Contractual Clauses and supplementary measures appropriate to the transfer.

Enterprise customers can elect to pin their workspace to a specific region (US-East, US-West, or EU-West) and to block cross-region replication entirely. Contact your account team to enable region pinning.

We maintain administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, alteration, disclosure, or destruction. See /security and /trust for current control descriptions and audit posture.

No system is perfectly secure. If you believe your information has been compromised, contact security@mnemos.ai. We acknowledge reports within 24 hours and coordinate disclosure with affected customers.

Mnemos is a business product not directed to children under 16 and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us personal information, contact privacy@mnemos.ai and we will delete it promptly.

We may update this policy from time to time. When we do, we will update the effective date and, for material changes, provide a more prominent notice through the service or by email to administrators.

Email privacy@mnemos.ai with any questions. Postal mail can be sent to Mnemos AI, Inc., 228 Park Avenue South, Suite 12345, New York, NY 10003-1502.