Privacy Policy

1. Data We Collect

We collect the following categories of information when you use Mnema:

• Account data — email address, display name, and workspace identifiers provided during sign-up.
• Content data — documents, notes, flows, and other material you create or import into Mnema.
• Usage data — page views, feature interactions, and session metadata used to improve the service.
• Payment data — billing transactions are processed by Razorpay; we store only subscription status and plan identifiers, not raw card details.
• Technical data — IP address, browser type, and error logs collected automatically for security and debugging.

2. How We Use Your Data

We use your data to:

• Provide, operate, and maintain the Mnema service.
• Authenticate your identity and keep your account secure.
• Send transactional emails (magic-link codes, invitations, billing receipts).
• Monitor and improve performance and reliability.
• Comply with legal obligations.

We do not sell your personal data to third parties, and we do not use your content to train AI models without your explicit consent.

3. Data Sharing

We share your data only with the sub-processors required to operate the service:

• WorkOS — authentication provider.
• Razorpay — payment processing.
• Resend — transactional email delivery.
• Sentry — error monitoring (error messages and stack traces only).
• Vercel / Railway — hosting and infrastructure.

All sub-processors are contractually required to handle your data in compliance with applicable privacy law.

4. Data Retention

We retain your account and content data for as long as your account is active. If you cancel your account, we retain your data for 30 days before permanent deletion to allow for recovery. Anonymised usage statistics may be retained indefinitely.

5. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise these rights, email us at hello@theboringpeople.in. We will respond within 30 days.

6. Cookies

Mnema uses strictly necessary cookies to maintain authentication sessions. We do not use third-party tracking or advertising cookies. You can clear cookies at any time through your browser settings; doing so will sign you out.

7. Security

We use industry-standard measures including TLS encryption in transit, encrypted cookies, and row-level security in our database to protect your data. No system is 100% secure; in the event of a breach affecting your data we will notify you in accordance with applicable law.

8. Children's Privacy

Mnema is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or an in-app notice at least 14 days before they take effect.

10. Contact

For privacy enquiries, contact us at hello@theboringpeople.in.