Privacy Notice

This notice applies to the public MemoraX website, business or research communications initiated through it, and related MemoraX services that do not publish a separate notice. Third-party websites, code hosting platforms, maps, media pages, and social platforms have their own privacy rules; this notice does not govern their processing.

For website visits and communications initiated through this website, the responsible entity is 深圳忆纪元科技有限公司 (MemoraX). If an order, service agreement, or product interface identifies another operating entity for a specific product, that entity is responsible for the corresponding service. Contact us below to confirm the responsible entity and response channel.

Information you provide

• Your name, organization, role, contact details, and message content when you email us.
• Project context, requirements, attachments, and follow-up feedback submitted for trials, support, partnerships, or recruiting conversations.
• When you use a separate Console or product service, account identifiers, organization and project details, API-key management information, and service settings may be processed. We will not ask you to paste an API key directly into this website.

Information generated automatically

• IP address, device and browser type, access time, referring page, request path, response status, and error records generated to deliver and secure the site.
• Language preference, page interactions, and basic performance information. The current prototype preserves language through the lang URL parameter and does not use it to create an advertising profile.
• For separate products, request volume, feature use, errors, billing, or abuse-prevention records. Exact fields are governed by the relevant product notice and contract.

Do not send passwords, full API keys, government identifiers, payment-card details, health information, or other unnecessary sensitive information by ordinary email. If a project requires sensitive data, contact us first to establish a controlled transfer method and contractual boundaries.

We process information only for appropriate purposes and on a valid legal basis, primarily to:

• provide, operate, maintain, and protect the website and related services;
• respond to inquiries and arrange demonstrations, visits, partnership assessments, technical support, or recruiting conversations;
• create and manage accounts, projects, access rights, quotas, and service records;
• troubleshoot issues, measure reliability, improve product experience, and prevent fraud, attacks, or violations of usage rules;
• meet contractual, financial, audit, compliance, and dispute-handling obligations;
• send relevant product or event updates where we have the required consent or another lawful basis.

We do not claim that visiting the website alone causes your information to be used to train a general-purpose AI model. Whether customer data, memory content, or feedback is used to improve models depends on the specific product notice, the settings you select, and the parties' agreement.

The website may use necessary browser storage, URL parameters, or similar technologies to retain language, keep pages functioning, and understand basic operational health. The current prototype does not set cross-site tracking cookies for advertising. If non-essential analytics or marketing technologies are introduced, we will provide the notices and choices required by applicable law.

Website hosts or content delivery providers may automatically create technical logs for security, capacity planning, and diagnostics. After you follow a link to GitHub, a map, media outlet, paper host, or another external service, that provider may set its own cookies or logs. Review its policy. You can clear or restrict cookies in your browser, although some preferences or functions may no longer work.

We do not sell personal information. We may provide information to the following recipients only as needed for the purposes in this notice:

• providers of cloud hosting, security, email, support, analytics, payments, or professional advice acting for us and required to protect information under instructions;
• MemoraX team members, affiliated operating entities, or research collaborators working on the same project with a legitimate need to know;
• integrations, customer-organization administrators, and third-party services you direct or authorize;
• regulators, courts, or law-enforcement bodies authorized to receive information to comply with legal process, protect users or the public, investigate abuse, or preserve legal rights;
• prospective or actual participants in a merger, financing, reorganization, or asset transaction who are subject to confidentiality obligations.

If a customer organization provisions your account, it may manage that account, access organization data, or configure retention rules. Consult your administrator and internal policies as well.

We, collaborating teams, or service providers may process information outside your country or region, where privacy rules may differ. For cross-border transfers, we assess the purpose, data category, and recipient under applicable law and use contractual restrictions, access controls, encryption, or other appropriate safeguards.

Enterprise customers with residency or transfer restrictions should raise them before integration. Product configuration, an order, or a data processing agreement, rather than website marketing copy, determines deployment regions, transfer paths, and processing roles.

We retain information for the shortest reasonable period needed for its purpose, considering contract duration, account status, security investigations, backup cycles, and legal retention duties. We generally aim to delete or de-identify ordinary business inquiry records within 24 months after the last substantive communication. Routine technical logs generally rotate within 180 days unless a security incident, dispute, or legal duty requires longer retention.

Retention of product memories, project data, and backups may be configured by the customer or set in a service-specific agreement. After account closure or a valid deletion request, we remove relevant data from active systems within a reasonable period. Isolated backups are overwritten on their established cycle, while legally required records are restricted from other use.

We use organizational and technical measures appropriate to the data and risk, such as least-privilege access, authentication, transport protection, log review, vulnerability remediation, supplier management, and incident response. Available isolation, encryption, deletion, or audit features depend on the actual product version and agreement. This notice does not claim any security certification that has not been expressly published.

No internet transmission or storage system is completely secure. Protect account credentials and API keys, authorize only trusted environments, and report suspicious activity promptly. Send security reports to the contact email and avoid disclosing exploitable details publicly.

Depending on your location and the processing involved, you may have rights to know about, access, correct, copy, or delete personal information; withdraw consent; object to or restrict certain processing; request an explanation of automated decisions; and complain to a competent authority. Withdrawal does not affect processing that was lawful beforehand.

Use available product controls or email us to make a request. To prevent unauthorized access, we may verify your identity, account, or organizational authority. Some requests may be limited by legal duties, others' rights, trade secrets, or security requirements. If we cannot fully comply, we will explain why where applicable law requires.

You may unsubscribe from non-essential marketing messages at any time. Service notices, security alerts, and transaction messages are not marketing.

The website and related developer and enterprise services are not directed to people under 18, and we do not knowingly solicit their personal information. A school, research project, or guardian planning use by a minor should contact us first to establish authorization, guardian consent, and data protection arrangements.

If you believe a minor provided information without appropriate authorization, contact us with enough detail to locate the record. We will verify the report and restrict or delete the information as appropriate.

We may update this notice as products, processing, or legal requirements change and will revise the date at the top. If a change materially affects your rights or how information is used, we will provide a more prominent notice through the website, product, or registered contact details and seek renewed consent where required.

We recommend checking this page periodically. Historical versions may be requested through the contact email where legally required.

For questions about this notice, our processing, or a rights request, use the details below. We will route your request to the appropriate operating entity and respond within the period required by applicable law.

Email

contact@memorax.net

Office location

East Tower, Digital China International Innovation Center, 82 Shenwan 2nd Road, Nanshan District, Shenzhen, China

Visitor arrangements

Please confirm visitor arrangements by email before arriving.