Your data is stored securely on Supabase infrastructure with encryption at rest and in transit. We use industry-standard security practices including:
TLS encryption for all API communications
Hashed API keys (we never store plain keys)
Row-level security in our database
Regular security audits
4. Third-Party Services
We use the following third-party services:
Supabase: Database and authentication
OpenAI: Text embeddings for semantic search
DodoPayments: Payment processing
Vercel: Hosting
Each service has their own privacy policy governing their use of data.
5. Data Retention
We retain your memories as long as your account is active. When you delete a memory via the API, it is permanently removed from our database. If you cancel your subscription, your data is retained for 30 days before permanent deletion.