Trust

Data location

We maintain a single production environment hosted on Amazon Web Services in region us-east-1 (United States). AWS hosts all customer data at rest, and our primary processing takes place in the United States (AWS us-east-1).

Sub-processors

Of all the parties we engage, only AWS (which hosts all data at rest) and Voyage AI (which receives Memory Content text to compute embeddings) ever process Memory Content. We give at least 30 days’ prior notice of any new or replacement sub-processor. The full list is on the Sub-processors page.

Retention & deletion

On termination of a customer’s subscription the customer may export its Memory Content, and UltraMemory deletes Memory Content within 30 days of termination, except for copies required to be retained by law and copies in tamper-evident audit logs or backups, which cycle out on their normal schedule. To exercise your privacy rights, email [email protected] or use your account in the customer app.

No training on your data

We do not use your Memory Content (including the embeddings and any consolidated memories derived from it) to train, retrain, or fine-tune any artificial-intelligence or machine-learning model — neither our own models nor any third party’s. Memory Content text is transmitted to our embedding sub-processor (Voyage AI) only to compute the vectors used for your own semantic recall, and not for any model-training purpose.

Security contact

Report security issues to [email protected]. Our disclosure details live at /.well-known/security.txt.