Privacy Policy for MemoLogs.

Summary of key points

This Privacy Policy explains how MEMO AI, Inc. (doing business as MemoLogs) collects, uses, shares, and protects information when you visit our website, contact us, request a pilot, or use services that link to this policy.

• We collect contact, business, device, usage, cookie, and integration data needed to operate MemoLogs and respond to customers.
• We use information to provide the platform, generate marketing intelligence, operate AI features, secure our services, communicate with you, and measure our own marketing.
• We share information with service providers, integration partners you authorize, analytics and advertising partners, legal authorities when required, and parties involved in business transactions.
• We do not use customer integration data to train generalized AI or machine learning models unless a customer separately agrees.
• You can contact us at [email protected] to exercise applicable privacy rights or ask questions.

What information do we collect?

We collect personal information that you provide to us, information collected automatically, and information made available through customer-authorized integrations.

Information you provide

• Contact details such as name, work email, phone number, company, title, website, mailing address, and communication preferences.
• Account information such as usernames, passwords, authentication data, team roles, and account settings if you create an account.
• Business context such as monthly media spend, active channels, marketing objectives, pilot requirements, support requests, feedback, and messages you send us.
• Payment and billing information if paid services are enabled. We may use payment processors such as Stripe and do not need to store full payment card numbers ourselves.

Information collected automatically

• Log and usage data such as IP address, browser type, device type, operating system, pages viewed, links clicked, referring URLs, timestamps, session activity, and diagnostic data.
• Device and location signals such as device identifiers, advertising identifiers, approximate country, region, and time zone.
• Cookies, pixels, local storage, analytics identifiers, ad click identifiers, and similar technologies described below.

Customer and integration data

MemoLogs is an AI marketing intelligence platform. If you authorize us to connect to advertising, analytics, commerce, data warehouse, CRM, collaboration, or other business systems, we process the data you make available so we can provide the requested services. This may include campaign, spend, conversion, creative, audience, customer, sales, attribution, warehouse, experiment, and decision-history data.

Do we process sensitive information?

We do not seek to collect sensitive personal information through the website. Customer-authorized integrations may contain information that a customer controls. Customers are responsible for configuring their systems and integrations so they do not provide data to MemoLogs that is unnecessary for the agreed services.

If we need to process sensitive information to provide a contracted service, we will do so only as permitted by applicable law and the relevant customer agreement.

How do we process your information?

We process information for the following purposes:

• Creating and managing accounts, users, roles, and authentication.
• Responding to inquiries, qualifying pilots, and providing support.
• Operating MemoLogs features, including causal measurement, creative intelligence, audience intelligence, AI co-pilot, alerts, reporting, recommendations, and decision memory.
• Measuring site performance, attribution, conversion events, and the effectiveness of our own marketing.
• Personalizing communications, sending administrative notices, and sending marketing communications where permitted.
• Training, testing, and improving our services using aggregated, de-identified, or customer-authorized data.
• Detecting, preventing, and responding to security incidents, fraud, abuse, misuse, and technical issues.
• Complying with legal obligations, enforcing agreements, and protecting the rights, safety, and security of MEMO AI, our users, customers, partners, and the public.

What legal bases do we rely on?

Where laws such as the GDPR or UK GDPR apply, we rely on one or more of the following legal bases:

• Consent. We may process information when you have given us permission, such as for certain cookies or marketing communications. You may withdraw consent where applicable.
• Contract. We process information when necessary to provide services, manage accounts, support customers, or take steps before entering into an agreement.
• Legitimate interests. We process information for interests such as improving our products, securing our systems, preventing fraud, analyzing usage, and marketing our services, where those interests are not overridden by your rights.
• Legal obligations. We process information when required to comply with law, legal process, tax, accounting, regulatory, or government requests.
• Vital interests.We may process information when necessary to protect someone's life, safety, or security.

If Canadian privacy law applies, we generally rely on express or implied consent, except where applicable law permits processing without consent.

When and with whom do we share information?

We share information only as needed for the purposes described in this policy, our agreements, or as required by law.

Service providers and vendors

We may share information with vendors that provide hosting, cloud infrastructure, data storage, security, analytics, customer support, communications, marketing, payment processing, accounting, legal, and operational services.

Analytics, advertising, and measurement partners

We may share limited website, event, and identifier data with analytics and advertising partners to measure performance, attribute conversions, understand audiences, and improve campaigns. Depending on your location, some of this activity may be considered targeted advertising, cross-context behavioral advertising, or sharing under applicable privacy law.

Authorized integrations and destinations

If you connect MemoLogs to third-party systems or instruct us to send data to a destination, we share information as needed to complete that connection or instruction.

Business transfers and legal needs

We may share information in connection with a merger, financing, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction. We may also share information to comply with law, respond to legal process, enforce agreements, protect rights and safety, or investigate security, fraud, or abuse.

Do we use cookies and tracking technologies?

Yes. We use cookies, pixels, tags, local storage, web beacons, and similar technologies to operate the website, remember preferences, measure traffic, debug issues, understand campaign performance, and improve our services.

These technologies may include first-party identifiers, browser storage, Meta Pixel identifiers, advertising click identifiers, country signals, and locally stored lead-matching information after a form submission. Depending on configuration, we may use services such as Meta, Google Analytics, Google Ads, TikTok, Cloudflare, and Zaraz for measurement, analytics, infrastructure, and advertising operations.

You can usually manage cookies and similar technologies through your browser settings. Blocking or deleting cookies may affect website functionality, attribution, and measurement accuracy.

Do we offer artificial intelligence-based products?

Yes. MemoLogs uses artificial intelligence and machine learning to analyze marketing performance, generate insights, detect trends, recommend actions, summarize decisions, create reports, and support AI-assisted workflows.

AI features may process prompts, inputs, outputs, files, campaign data, creative data, audience data, performance data, decision logs, and other information you provide or authorize. We may use third-party AI infrastructure providers to help deliver these features.

We do not use customer integration data, Google API data, or customer confidential information to train generalized AI or machine learning models unless the relevant customer separately agrees. Information received from Google APIs is used to provide and improve user-facing MemoLogs features for the authorizing customer or user and is handled in accordance with applicable Google API Services User Data Policy Limited Use requirements.

AI outputs may be inaccurate, incomplete, or require human review. You are responsible for evaluating outputs before relying on them for business decisions.

How do we handle social logins?

If we offer account registration or login through a third-party provider, such as Google, Microsoft, or another identity provider, we may receive profile information from that provider. This can include your name, email address, profile image, account identifier, and other information made available by the provider and your account settings.

We use this information to create, authenticate, and secure your account. Your relationship with the third-party provider is governed by that provider's own terms and privacy policy.

How long do we keep information?

We keep information for as long as reasonably necessary to fulfill the purposes described in this policy, provide services, maintain business records, resolve disputes, enforce agreements, comply with legal obligations, and protect against fraud, abuse, and security incidents.

When we no longer have a legitimate business need to process personal information, we will delete, anonymize, or securely store and isolate it until deletion is possible. Customer data retention may also be governed by the customer's agreement with MEMO AI.

How do we keep information safe?

We use administrative, technical, and organizational safeguards designed to protect information from unauthorized access, disclosure, alteration, and destruction. These safeguards may include access controls, encryption, logging, monitoring, vendor review, and internal policies.

No internet-based service can be guaranteed to be completely secure. You should use appropriate safeguards for your own account, including strong passwords, secure devices, and careful management of authorized integrations.

Do we collect information from minors?

MemoLogs is intended for business users and is not directed to children under 18. We do not knowingly collect personal information from children under 18 or market to children. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

What are your privacy rights?

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or opt-out of certain processing. You may also have the right to appeal a decision about your request.

You can unsubscribe from marketing emails by using the unsubscribe instructions in those messages or by contacting us. Transactional or administrative messages may still be sent where necessary.

To submit a privacy request, contact [email protected]. We may need to verify your identity and authority before completing a request. If you are an end user of a MemoLogs customer, we may direct you to that customer because the customer controls the relevant data.

Do United States residents have specific privacy rights?

Certain U.S. state privacy laws may give residents additional rights, including the right to know, access, correct, delete, obtain a copy of personal information, opt out of targeted advertising, opt out of the sale or sharing of personal information, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights.

Depending on your interaction with us, we may collect the following categories of personal information: identifiers, commercial information, internet or network activity, approximate geolocation, professional or employment-related information, inferences, account access credentials, and information you submit in communications, forms, or integrations.

We do not knowingly sell personal information for money. Some website analytics, advertising, and measurement activities may be considered a sale, sharing, or targeted advertising under certain state laws. You may submit an opt-out request by contacting [email protected].

You may use an authorized agent to submit a request where permitted by law. We may require proof of authorization and may ask you to verify your identity directly with us.

Controls for Do Not Track features

Some browsers and devices offer Do Not Track or similar signals. There is not yet a uniform industry standard for responding to these signals, so we do not currently respond to Do Not Track browser signals. If a legally recognized universal opt-out mechanism applies to us, we will honor it as required by applicable law.

How can you contact us about this notice?

We may update this Privacy Policy from time to time. The updated version will be indicated by the "Last updated" date and will be effective when posted unless a later effective date is stated.

If you have questions, comments, or requests about this policy or our privacy practices, contact MEMO AI, Inc. at [email protected].