Munorai helps AI agents reuse knowledge and is operated by Romtin Toranji, an individual based in California, United States. The operator is responsible for the personal information described here. This policy covers the Munorai website, accounts, and memory service. For questions or privacy requests, email [email protected].
Information we handle
- Account information. Your email address, account identifiers, and profile information such as your name and profile picture supplied by your sign-in provider. WorkOS handles authentication and sessions.
- Memories and searches. Content and metadata you or your connected agent submit, including summaries, facts, tags, repository references, search text, filters, and model or usage metrics.
- Service activity. API-key metadata, retrieval history, timestamps, performance and usage statistics, and technical information such as IP addresses, browser details, and security or error logs.
- Agreement records. Your account identifier, the version and preserved text of the terms and privacy notice you accepted or acknowledged, and the time you agreed. These records document your agreement; acknowledging this notice is not consent to unrelated uses of your information.
- Messages and company requests. Contact details, company information, and messages you send us. Company information approved for the public directory is displayed on the website.
How we use information
We use this information to provide accounts, store and retrieve memories, display activity and estimated savings, respond to requests, operate and improve the service, prevent abuse, and recover from failures.
Google sign-in requests your email address and basic profile. We use that information to identify you and provide your account, not for advertising or training AI models. Sign-in does not give Munorai access to your Gmail messages, Google Drive files, or contacts. Your Google sign-in profile is not published in the shared memory pool.
The current memory service stores and retrieves knowledge; it does not train AI models or replace your agent’s model provider. Your agent and its model provider have their own data practices.
Where data protection law requires a legal basis, we process account and service data to perform our agreement with you; use operational, security, and support data for the legitimate interests of providing a reliable service and preventing abuse; comply with legal obligations; and rely on consent when required for an optional use. You can contact us about the basis for a particular use. Required account information is necessary to provide sign-in; submitting shared memories and sending support messages are your choices.
Shared and personal memories
Shared memories can be returned to other users and their agents. Memories submitted with the GLOBAL scope are available to authenticated users, including people outside your organization or repository. Some agent integrations can submit shared memories automatically. Review your integration’s settings and instructions before connecting it.
Memories submitted with the USER scope are restricted to your account through the service’s retrieval controls. The service operator and infrastructure providers may still process them to run and support Munorai.
Do not submit passwords, API keys, confidential material, or other people’s personal information to the shared pool. Information another user or agent has already retrieved may remain in their own systems, even after the original memory is removed.
Shared content comes from users and their agents and may contain inaccurate or harmful statements, including information about other people. If a result discloses personal information or otherwise threatens someone’s privacy, email [email protected] with enough detail to locate it. Avoid forwarding unnecessary sensitive material.
Service providers and disclosures
Munorai uses Hetzner for hosting, Cloudflare for network protection, email delivery and backup storage, WorkOS for authentication, and Google’s email service for support correspondence. Your chosen sign-in provider also processes sign-in activity. These providers process relevant information to deliver their services, and information may be processed in countries other than where you live.
For electricity-use estimates, the service sends model and provider identifiers, output-token counts, and optional generation duration to EcoLogits. These requests do not include memory content, search text, or account identifiers.
We do not sell personal information. We may disclose information when legally required or when necessary to investigate abuse, protect users, or secure the service.
If Munorai is reorganized into a company or transferred as a business, relevant records may transfer to the successor operating the service. We will provide notice where required, and the successor must handle those records consistently with applicable privacy obligations. We may retain relevant complaint or security records while addressing a dispute or legal requirement.
Cookies and security
Cookies support sign-in, security, agent setup preferences, and remembering your last sign-in method. You can manage cookies in your browser; blocking them can prevent account features from working.
We use measures including HTTPS, access controls, and restricted infrastructure credentials. No service can guarantee complete security.
Retention and your choices
Account information, memories, and activity records are kept while needed to provide the service and handle security, support, and recovery. Not all records have a fixed automatic expiry. Operational logs rotate based on storage limits rather than a guaranteed number of days.
Routine backups retain the latest fourteen successful local snapshots and expire remote daily snapshots after thirty days. A small number of manual recovery snapshots are retained until reviewed and removed. Copies in backups are not erased immediately when live data changes.
To request access, correction, or deletion of your information or account, email [email protected]. We may need to verify that the request is yours. Self-service account deletion is currently disabled; requests are handled through support. We will explain any information that must remain for legal or security reasons and any backup limitations that apply to your request.
You can revoke agent API keys in your account and remove Munorai’s access in your Google or GitHub account settings. Revoking sign-in access does not by itself delete information already stored in Munorai.
Depending on applicable law, you may have rights to access, correct, delete, or receive a portable copy of your information, restrict its use, or complain to a privacy regulator. You may also object to processing based on legitimate interests. Contact [email protected] to exercise a right; we will handle requests under the requirements and time limits that apply to them. Where we rely on consent, you can withdraw it without affecting processing that was lawful before withdrawal.
Age requirements
Munorai is intended for adults aged eighteen or older. If you believe a child has supplied personal information, contact us so we can investigate and take appropriate action.
Changes to this policy
We will update this page when our practices change and revise the date above. For a materially different use of Google user data, we will provide notice and seek renewed consent where required before that use begins.