Privacy Policy

1. Scope

This Privacy Policy applies to personal information Memo collects through memo.ly, app.memo.ly, and related Service interfaces. It does not apply to third-party websites, sending platforms, or services you connect to Memo. Those providers' privacy practices are governed by their own policies.

2. Information We Collect

Depending on how you use the Service, we may collect the following categories of information:

• Account and profile information, such as name, email address, authentication identifiers, organization and workspace membership, and role assignments.
• Workspace content, including templates, brand assets, editor documents, version snapshots, comments, and export or handoff records you create.
• Billing and transaction information processed through Stripe when billing is enabled (Memo does not store full payment card numbers).
• Integration credentials and configuration you authorize for connected services, stored in encrypted form where applicable.
• Controlled test-send metadata for internal QA sends you initiate.
• Support, contact, and privacy request communications you send to us.
• Website and product usage data, including logs, device and browser information, and analytics data where permitted by your cookie choices.
• AI feature inputs and outputs necessary to provide assisted drafting, subject to plan limits and product configuration.

3. How We Use Information

We use personal information to provide, operate, maintain, secure, and improve the Service; authenticate users; enforce our terms; process billing; deliver controlled test sends you request; respond to support and privacy requests; comply with law; and protect Memo, users, and the public. We do not sell personal information and do not use workspace template content for unrelated advertising profiles.

4. Legal Bases for Processing

Where applicable law requires a legal basis, we process personal information based on one or more of the following: performance of a contract with you; our legitimate interests in operating, securing, and improving the Service; compliance with legal obligations; and, where required, your consent (for example, for certain non-essential cookies or marketing analytics).

5. How We Disclose Information

We disclose personal information only as described below:

• Service providers and subprocessors that help us host, authenticate, store, deliver, bill, or support the Service, subject to contractual confidentiality and security obligations. See our Subprocessors list.
• Other workspace members and collaborators you authorize within your organization.
• Professional advisors, auditors, or counsel where reasonably necessary.
• Law enforcement, regulators, or other parties when required by law, legal process, or to protect rights, safety, and security.
• A successor entity in connection with a merger, acquisition, financing, or sale of assets, subject to this Privacy Policy or successor notice.

6. Data Retention

We retain personal information for as long as reasonably necessary to provide the Service, fulfill the purposes described in this policy, comply with legal obligations, resolve disputes, enforce agreements, and maintain security. Retention periods may vary by data category. Deletion requests may be subject to backup cycles, fraud prevention needs, and legal or billing record requirements described in our Data Request page.

7. Security

We implement administrative, technical, and organizational measures designed to protect personal information. No method of transmission or storage is completely secure. Details about implemented controls are described on our Security page. We do not represent that the Service is immune from unauthorized access or that we hold any particular security certification unless expressly stated in writing.

8. Cookies and Similar Technologies

We use cookies and similar technologies as described in our Cookie Policy. Non-essential analytics load only after you provide consent where required.

9. Artificial Intelligence

When you use AI-assisted features, Memo may transmit portions of your workspace context to AI service providers to generate suggestions. AI output may be inaccurate. Unless confirmed in a separate written agreement, we do not represent that AI providers exclude your prompts from training or retention beyond what their own terms provide.

10. Children's Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will take appropriate steps to delete it.

11. Your Privacy Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing of personal information, or to receive a portable copy of information you provided. You may also have the right to opt out of certain analytics cookies through our cookie banner or browser controls. Submit requests via privacy@memo.ly or our privacy request form. We may verify your identity before fulfilling sensitive requests. We will not discriminate against you for exercising privacy rights permitted by law.

12. California Notice

California residents may have additional rights under applicable state privacy laws, including rights to know, delete, and correct personal information, and to limit certain uses of sensitive personal information where applicable. Memo does not sell personal information as defined by the California Consumer Privacy Act, as amended. Authorized agents may submit requests with proof of authority. We will respond as required by applicable law.

13. International Users

Memo is operated from the United States. If you access the Service from outside the United States, you understand that your information may be processed in the United States and other countries where our service providers operate, which may have different data protection laws than your jurisdiction.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted here with a revised effective date and, where required, additional notice. Continued use after the effective date constitutes acceptance of the updated policy.

15. Contact

Privacy questions and requests: privacy@memo.ly. General inquiries: hi@memo.ly.

See also: Terms of Service, Privacy Policy, Privacy requests, Acceptable Use, Data Processing, Data Request, Cookie Policy, Billing and Refunds, Partner Program, Subprocessors, Security, Accessibility, Vulnerability Disclosure, and Service Status.