Legal
Privacy Policy
Effective 2026-03-20
Privacy Policy
Effective date: March 20, 2026
Neo Labs Inc. ("Neo Labs", "we", "our", or "us") operates Memolane and related services. This policy explains what data we collect, why we collect it, how we use it, and your rights as a user.
By using Memolane, you agree to this policy. If you do not agree, please stop using the service.
1. Information We Collect
1.1 Information you provide directly
- Account data: email address, display name, and password hash when you register.
- Captured content: notes, links, screenshots, voice transcripts, and any other memory objects you deliberately save inside Memolane.
- Profile and preferences: timezone, notification settings, theme, and any optional profile fields you fill in.
1.2 Information collected automatically
- Usage data: pages visited, features clicked, session duration, and error logs — used to improve the product and fix bugs.
- Device and browser data: browser type, operating system, IP address (hashed after 90 days), and screen resolution.
- Cookies and similar technologies: we use a small number of first-party cookies strictly necessary for authentication and session management. We do not use third-party advertising cookies.
1.3 Information from third parties
If you connect Memolane to an integration (for example, a browser extension or an API client), we receive only the data you explicitly send through that integration. We never scrape or pull data from third-party accounts without your permission.
2. How We Use Your Information
We use the data described above to:
- Provide, maintain, and improve Memolane's core features.
- Authenticate your session and protect your account from unauthorized access.
- Send transactional emails (password resets, early-access invitations, important security notices). We do not send marketing email without your explicit opt-in.
- Detect and prevent abuse, spam, and violations of our Terms of Service.
- Generate aggregate, anonymized usage metrics to guide product decisions.
We do not sell your personal data. We do not use your captured content to train machine-learning models or to serve advertisements.
3. Data Retention
- Active accounts: your content and account data are retained for as long as your account exists.
- Deleted content: when you delete a memory object, it is removed from the active database within 24 hours and purged from backups within 30 days.
- Closed accounts: if you delete your account, all personal data and content are deleted within 30 days, except where retention is required by law.
- Log data: server logs containing IP addresses are hashed after 90 days and deleted after 180 days.
4. Sharing Your Information
We share data only in these limited circumstances:
- Service providers: we use a small number of infrastructure vendors (hosting, error monitoring, email delivery). They process data on our behalf under data-processing agreements and cannot use your data for their own purposes.
- Legal requirements: we may disclose data if required by a court order, subpoena, or other valid legal process. Where permitted, we will notify you before complying.
- Business transfers: if Neo Labs is acquired or merges with another company, your data may transfer to the new entity. We will notify you before that transfer happens and give you an opportunity to delete your account.
- With your consent: any other sharing only happens if you explicitly request it.
5. Security
We use industry-standard practices to protect your data:
- All data in transit is encrypted using TLS 1.2 or higher.
- Passwords are hashed with bcrypt and never stored in plaintext.
- Captured content is encrypted at rest using AES-256.
- Access to production systems is restricted to a small number of engineers and logged.
No security system is perfect. If you discover a vulnerability, please report it to hello@memolane.in.
6. Your Rights
Depending on where you live, you may have the right to:
- Access a copy of the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and all associated data.
- Export your captured content in a machine-readable format.
- Object to certain processing activities.
To exercise any of these rights, email us at hello@memolane.in. We will respond within 30 days.
7. Children's Privacy
Memolane is not directed at children under 13 (or under 16 in the European Economic Area). If we learn that a child has created an account, we will delete it promptly. Contact hello@memolane.in if you believe a child has signed up.
8. International Transfers
Neo Labs is based in the United States. If you are outside the US, your data may be transferred to and processed in the US. We rely on standard contractual clauses approved by relevant data-protection authorities for such transfers.
9. Changes to This Policy
We may update this policy from time to time. When we make a material change, we will update the effective date at the top of this page and, where appropriate, notify you by email. Continued use of Memolane after a policy change constitutes acceptance of the updated policy.
10. Contact
Questions about this policy or your data? Email hello@memolane.in or write to:
Neo Labs Inc. Privacy Team [Address on file]