Privacy Policy

• Conversation content you choose to capture. When you install the extension, sign in, and leave capture enabled, it reads the messages on supported AI sites (claude.ai, chatgpt.com, chat.openai.com, gemini.google.com) and sends them to your Mind Silo account so they can become memories. Capture only happens on those sites and only while you are signed in.
• Conversations from developer tools you connect. If you run our capture command (npx mind-silo-capture), a local helper reads new Claude Code sessions and, when Cursor is installed, your Cursor chat history, and sends the prompts and AI replies (never your file contents, and with secrets redacted first) to your account. It runs only for the account you connect and can be removed anytime with npx mind-silo-capture --uninstall.
• GitHub repositories you connect. If you link a repo, we read its structure and summarize its modules into memories. Read-only; you choose which repos, and you can disconnect anytime.
• Memories you create directly, via the MCP server, or by importing past conversation exports.
• Account information — your email and authentication identity, handled by our authentication provider (Clerk).
• Basic operational metadata — timestamps, source labels, and audit logs of actions on your account (retained ~90 days) so you can see what happened and when.

The extension stores only your API URL and access token locally in your browser (Chrome storage.local). It does not track your browsing, read pages other than the supported AI sites, or run any analytics.

Your captured content is used solely to build and operate your personal memory: we extract key memories from conversations, generate embeddings so you can search semantically, connect related memories into your brain graph, and synthesize answers when you query your archive. That is the entire purpose.

We do not sell your data, use it for advertising, use it to train our own models, or share it with anyone except the processors listed below.

Memory bodies and captured conversations are encrypted at rest with AES-256-GCM. Each user has their own data encryption key, which is itself wrapped by a master key held in our server's secrets — not in the database. Traffic between the extension, the app, and our API is over HTTPS.

This is server-managed encryption: it protects your data against database exposure, but our operators can technically decrypt it to run the service. We are working toward an optional user-held passphrase (zero-knowledge) mode.

To turn conversations into searchable memory, decrypted content is sent to:

• Anthropic — to extract memories from conversations and synthesize answers to your queries.
• OpenAI — to generate the embeddings that power semantic search.
• Clerk — authentication and account management.

We also rely on these processors to run the service. They handle account and operational data (not your memory content for their own purposes):

• Stripe — payment processing for paid plans. Card details go directly to Stripe; we never see or store them.
• Render and Vercel — cloud hosting and database for the API and web app.
• Resend — sending the optional weekly digest email (which you can unsubscribe from in one click).
• Sentry — error monitoring, to catch and fix bugs. Configured to avoid capturing your memory content.

These providers process data on our behalf under their own terms and do not receive it for their own advertising. We use only the minimum content needed for each operation.

• Pause capture anytime from the extension options — no content is read while it is off.
• Delete memories — deleted items go to trash and are permanently purged after 30 days; you can empty the trash immediately.
• Revoke access tokens in Settings → Security to instantly cut off the extension or any connected tool.
• Export everything yourself — Settings → Security → "Export everything" downloads your full decrypted archive as JSON, no support ticket needed.
• Delete your account — when you do, we hard- delete all your captured content (memories, conversations, connections, and connected- tool data) and destroy your encryption key, so any residual copy is unrecoverable.

Memories persist until you delete them. Trashed items are purged after 30 days. Audit logs are kept for about 90 days. When you delete your account, your personal data is erased from our systems (and your encryption key destroyed) promptly — with a daily sweep that guarantees any account marked for deletion is fully purged.

Depending on where you live (e.g. the EU/UK under GDPR, or California under CCPA/CPRA), you have rights to access, export, correct, and delete your personal data, and to object to certain processing. Mind Silo is built so you can exercise most of these yourself: export your full archive and delete your data at any time from Settings. For anything else — or to make a formal request — email privacy@mind-silo.com. We don't sell or "share" your personal information as those terms are defined under California law.

Mind Silo is not directed to children under 13, and we do not knowingly collect their data.

If we make material changes to this policy, we will update the date above and, for significant changes, notify you in the app.

Questions about privacy or a data request? Email privacy@mind-silo.com.