LEGAL
Last updated March 1, 2026 · Version 3.2
How Recall collects, uses and protects your information — in plain language.
On this page
01 Overview
02 Information we collect
03 How we use information
04 Legal bases for processing
05 Sharing and disclosure
06 Data retention
07 Security
08 International transfers
09 Your rights and choices
10 Cookies and tracking
11 Children’s privacy
12 Changes to this policy
13 Contact us
01
Recall Labs, Inc. (“Recall”, “we”, “us”) builds the cross-tool memory layer for AI. This Privacy Policy explains what information we collect, how we use it and the choices you have.
It applies to our website, the Recall platform and any related services. Where we process data on behalf of our customers, we act as a processor and the customer is the controller.
02
We collect information you provide directly, information generated as you use the Service, and limited information from third parties.
Account details such as name, email and organisation.
Billing details processed by our payment provider.
Content you submit to the Service, including memories and metadata.
Usage data such as API calls, feature usage and device information.
03
We use information to provide, secure and improve the Service, to communicate with you and to meet our legal obligations.
Operate and maintain the Service and your memory graph.
Provide support and respond to your requests.
Detect, prevent and address security and abuse issues.
Send product updates where you have opted in.
04
Where the GDPR or similar laws apply, we rely on the following legal bases: performance of our contract with you; our legitimate interests in operating and improving the Service; your consent where required; and compliance with legal obligations.
05
We do not sell your personal information. We share it only with sub-processors that help us run the Service, with your instructions, or where required by law. A current list of sub-processors is available on request.
Infrastructure and hosting providers.
Payment and billing processors.
Support and communications tooling.
Professional advisers under confidentiality.
06
We keep personal data for as long as your account is active or as needed to provide the Service. When you delete your account we remove or anonymise your data within 30 days, except where we are required to retain it for longer.
07
We protect data with encryption in transit and at rest, least-privilege access controls and continuous monitoring. Our platform is independently audited and we maintain SOC 2 Type II compliance.
No system is perfectly secure. If we become aware of a breach affecting your data we will notify you without undue delay.
08
We may process data in countries other than yours. Where we transfer personal data out of the EEA or UK we rely on appropriate safeguards such as the Standard Contractual Clauses.
09
Depending on where you live you may have rights to access, correct, delete, restrict or port your data, and to object to certain processing.
Access and export your data at any time.
Correct inaccurate information in your account.
Request deletion of your account and data.
Object to marketing communications at any time.
10
Our website uses a small number of cookies to keep you signed in and to understand aggregate usage. We do not use cookies for cross-site advertising. You can control cookies through your browser settings.
11
The Service is not directed to children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us information, contact us and we will delete it.
12
We may update this policy from time to time. If a change is material we will notify you in advance. The date at the top of this page shows when it was last revised.
13
For any privacy question or request, contact our Data Protection Officer at privacy@recall.dev, or write to Recall Labs, Inc., 44 Memory Lane, San Francisco, CA 94107.
Get Template