Last updated: 4 October 2026
This policy is in English. A Croatian version is available on request: [email protected].
memrelay is a hosted service that gives your company's AI tools access to your company's own knowledge, under your control. This policy explains what personal data we handle, why, and the rights you have over it.
Using the TalkLog app? This page covers the memrelay service. The TalkLog meeting app, which records on your device and can connect to memrelay, has its own policy: TalkLog App Privacy Policy. If you use both, both apply.
memrelay is a hosted service that connects your company's knowledge to your AI tools. In this policy, "memrelay", "we" and "us" mean the team that operates the service. For any privacy question, contact us at [email protected].
There are two different relationships, and our role differs in each:
Your name, work email, company name, and the identity returned by your sign-in provider (Google or Microsoft via our authentication broker). We do not store your password - sign-in is handled by your provider.
The documents, notes and files a customer chooses to bring into their workspace. This content belongs to the customer. We process it only to provide the service (search, read, governed write-through-PR), as a processor.
Logs needed to run and secure the service: requests, timestamps, IP address, browser type, and which features were used. We use these for security, debugging, abuse prevention and basic product analytics.
For signed-in users, product analytics is tied to your work email, so we can see which features your team actually uses, how long they take, and which errors hit you specifically - that is what lets us fix your problem instead of an average one. We record the action, never the content: the name of the feature or tool, whether it succeeded, how long it took, the type of error, and your company, role and plan. Your documents, your search terms and anything from inside your knowledge base stay out of it. You can ask us to delete this at any time, and deleting your account removes it automatically.
The administrator of your workspace also sees this usage metadata, per member: how many calls each member made, which classes of command they used, and when they were last active. Administrators never see the content of queries, documents or search terms. This exists so the person who brought memrelay into your company can tell whether the team is getting value from it. Where you use memrelay through an employer or client workspace, that organisation decides who holds administrator rights and why they review this view: for it they are the controller and we act on their instructions, so a request to explain or restrict it goes to them, and we will help them act on it.
memrelay makes no AI model calls of its own on the ingest, search or write path. The intelligence comes from your own AI client (Claude, ChatGPT and others) connecting to your knowledge over MCP. We do not send your content to any model provider for training, and we do not use your content to train any model. Your knowledge stays plain, readable and exportable - never a black box.
We do not sell your data. We rely on a small set of vetted providers to run the service:
Each subprocessor is bound to protect data and to use it only to provide its service to us.
The memrelay application runs on Fly.io in Frankfurt, Germany. The working copy of your knowledge base, its search index, and our task and review stores are kept there too.
The master copy of your company knowledge base, and our encrypted backups, are kept in private git repositories on GitHub, a provider based in the United States. Personal notes are kept on a git server we run with Hetzner.
Some of the subprocessors in section 6 may process data outside the EU, including GitHub, Postmark, and, for TalkLog recordings, Soniox and Anthropic. If any processing happens outside the EU, we rely on appropriate safeguards (such as EU Standard Contractual Clauses).
We keep account data for as long as you have an account. Other data is kept as follows:
When you delete your account, we remove your account record, the data we keep under your email address, your analytics profile and the working copy of your personal notes. A few records, such as your sign-in record at our authentication provider and the stored copy of your personal notes, are removed in a follow-up step on request; write to us and we will confirm when it is done. On account or contract termination we delete or return data per the agreement and applicable law.
Access is scoped per person, per team and per company, so people and their AI only see what they are allowed to. Nothing enters a shared knowledge base without approval (write goes through a reviewable pull request; the only automatic approvals are narrow cases, such as search hints on a document, that an administrator controls), and actions are auditable. We use encryption in transit and apply least-privilege access on our side.
Under the GDPR you can ask to access, correct, delete, restrict or object to processing of your personal data, and to receive it in a portable format. To exercise any of these, email [email protected]. If memrelay holds the data as a processor for your employer, we will direct the request to them as the controller. You also have the right to complain to your local data protection authority.
Our website uses local storage for essential preferences, for example to remember your language choice, and it remembers your cookie choice itself in a first-party cookie that lasts one year.
We use privacy-aware product analytics (PostHog, EU region) to understand how the site is used. These run from your first visit. A banner offers you "Accept cookies" or "Reject cookies": if you reject, we stop measuring you, no further analytics requests are made, and the choice is remembered on later visits. You can change your mind at any time through the "Cookies" link in the footer of every page. We do not use advertising or cross-site tracking cookies.
The application at app.memrelay.com is a signed-in product rather than a public website, and product analytics there are part of the service; the banner applies to this marketing website.
The application uses a session cookie to keep you signed in.
memrelay is a tool for businesses and is not intended for children. We do not knowingly collect data from anyone under 16.
If we make a material change, we will update the date above and, where appropriate, notify you. Continuing to use memrelay after a change means you accept the updated policy.
Questions about privacy or this policy: [email protected].