Privacy Policy

Effective August 26, 2026

What we collect

We store your Google account identifier and email address, login sessions, connection credentials, and the notes and tasks you ask Geppetto Memory to save.

How we use it

We use this information only to authenticate you, operate your private memory, search it on your request, and let connected AI clients read or update it with your permission.

Storage and retention

Your memories are stored as Markdown text in a SQLite database assigned only to your account. Account data and memory content remain until you request deletion; expired login and authorization records may be removed automatically.

Sharing

Your personal memory is not shareable. Shared memories you create or join are visible to those members and to the AI clients they connect. We do not sell your data. Information is sent to Google during sign-in and to the AI client you explicitly connect when it invokes a memory tool. Infrastructure providers may process encrypted traffic or stored data as needed to operate the service.

Your controls

You can disconnect Geppetto Memory in ChatGPT, Claude, Cursor, or any other connected client at any time. Connected clients can also revoke their tokens at /oauth/revoke. To request export or deletion, contact privacy@geppetto.se. Support: hello@geppetto.se.

Availability

The hosted service is not geo-restricted in software. Country availability for the ChatGPT directory listing is declared there; we currently operate from Sweden (EU).

Security

Connections use HTTPS and OAuth 2.1 with PKCE. Credentials are stored as hashes where possible. Sign-in, consent, token issue and revocation, and shared-memory membership changes are recorded in an audit log without memory contents. No online service can promise absolute security.