Oval Memory Privacy Policy

Last Updated: November 27, 2025

This Privacy Policy explains how Revenite Inc. d/b/a Oval Memory ("Oval," "we," "us," or "our") collects, uses, and shares personal information when you use our website, application, APIs, and related services (collectively, the "Service").

This Privacy Policy is incorporated into our Terms of Service. Capitalized terms used but not defined here have the meanings given in the Terms.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, you must not use the Service.

1. Who We Are

Oval Memory is operated by:

Revenite Inc. d/b/a Oval Memory
321 E. Chapel Hill St.
Durham, NC
United States

For privacy-related questions or requests, you can contact us at: legal@ovalmemory.com.

The Service is intended for users located in the United States. While others may access the Service from outside the United States, we do not represent that the Service is appropriate or compliant with laws outside the United States.

2. Information We Collect

We collect different types of information from or about you, depending on how you interact with the Service.

2.1 Information You Provide Directly

  • Account Information:
    When you create an account, we collect information such as your name, email address, authentication credentials (e.g., hashed passwords or OAuth identifiers), and any related profile information you choose to provide.

  • Memories, Files, and Other User Content:
    When you use the Service to store "User Content" (such as memories, files, and other text or data) we collect and store that content so that we can provide the Service to you.

  • Support and Communications:
    If you contact us (for example by email or through support channels), we collect the content of your communications and any contact details you provide.

2.2 Information Collected Through Integrations and Third-Party AI Clients

  • Connected Clients and Tokens:
    When you connect third-party AI clients or tools (such as Claude, ChatGPT, Cursor, or Codex) via the Model Context Protocol (MCP) or other APIs, we may collect:

    • Client identifiers
    • OAuth tokens or API keys you authorize us to use
    • Access scopes and configuration details

  • Data Retrieved or Sent via Integrations:
    When a connected client accesses your memories or files through the Service, we process and transmit that data as necessary to serve the request. Third-party clients’ use of that data is governed by their own terms and privacy policies, not this Privacy Policy.

2.3 Information Collected Automatically

When you use the Service, we may automatically collect certain information, including:

  • Usage and Log Data:
    Such as timestamps of requests, request counts, API and MCP endpoints accessed, client identifiers, error logs, and other technical events related to your use of the Service.

  • Device and Network Information:
    Such as IP address, browser type, operating system, and basic device information. We do not use this information for advertising or cross-site tracking.

2.4 Embeddings and Derived Data

To support semantic search and related features, we may generate vector embeddings and other derived representations from your User Content. These embeddings are used to provide functionality such as search, retrieval, and ranking.

We treat embeddings as personal information to the extent they can be reasonably linked to you, and we protect them in accordance with this Privacy Policy.

2.5 Payment Information

If you purchase a paid subscription, payments are processed by our third-party payment processor, Stripe. We do not store full payment card numbers.

Stripe may collect and process the following information:

  • Payment card details
  • Billing address
  • Transaction history and subscription status

Stripe’s collection and use of your information is governed by Stripe’s own terms and privacy policy.

2.6 Information from Other Sources

We may receive information about you from:

  • Service Providers:
    For example, hosting providers, authentication providers, analytics or logging tools, or email service providers may provide us with information about service performance, security events, or delivery status.

  • Legal or Regulatory Sources:
    We may receive information about you from public authorities if required in connection with legal proceedings or compliance obligations.

3. How We Use Information

We use the information we collect for the following purposes:

  • To Provide and Maintain the Service

    • Operating, maintaining, and improving the Service
    • Storing, retrieving, organizing, and encrypting your User Content
    • Generating and using embeddings for semantic search and related features
    • Supporting integrations with third-party AI clients and tools

  • To Secure and Protect the Service

    • Monitoring for fraud, abuse, misuse, and security incidents
    • Detecting and preventing unauthorized access or harmful activity
    • Enforcing our Terms of Service and other policies

  • To Communicate with You

    • Sending transactional messages (e.g., account notifications, security alerts, billing notices)
    • Responding to your inquiries and support requests
    • Providing information about material changes to the Service or this Privacy Policy

  • To Comply with Legal Obligations

    • Responding to lawful requests from public authorities
    • Complying with applicable laws, regulations, and legal processes
    • Protecting our rights, privacy, safety, or property, and that of our users and others

We do not:

  • Use your User Content to train our own or third-party artificial intelligence or machine learning models.
  • Sell your personal information, or share it for cross-context behavioral advertising.

We may use aggregated or de-identified information (that cannot reasonably be used to identify you) for analytics, improvement of the Service, or other internal purposes.

4. Cookies and Similar Technologies

We use cookies and similar technologies primarily to support the operation and security of the Service.

  • Essential Cookies:
    These cookies are necessary for the Service to function, such as maintaining your session and authentication state. You cannot opt out of these cookies if you wish to use the Service.

  • No Advertising or Cross-Site Tracking Cookies:
    We do not use cookies or similar technologies for third-party advertising, cross-site tracking, or behavioral profiling.

You can configure your browser to block or delete cookies, but some features of the Service may not function properly if you do so.

5. How We Share Information

We share information only as described in this Privacy Policy, for the purposes described in Section 3.

5.1 Service Providers

We use third-party service providers to help us operate and provide the Service. These providers may have access to personal information only as reasonably necessary to perform services on our behalf and are obligated not to use it for other purposes.

Examples include:

  • Infrastructure and Database Hosting:
    We use providers such as Supabase and other hosting vendors to store encrypted memories, embeddings, account data, and related information.

  • Embedding and AI Infrastructure Providers:
    We may use providers such as OpenAI or similar vendors to generate embeddings and other derived representations from your User Content, or spawn memory retrieval and organization AI agents, solely to operate the Service.

  • Payment Processing:
    We use Stripe to process payments and manage subscriptions.

  • Email, Logging, and Security Providers:
    We may use email delivery services, logging and monitoring tools, and security vendors to help us send communications, monitor performance, and protect the Service.

We do not authorize our service providers to use your personal information for their own independent marketing or model training purposes.

5.2 Third-Party AI Clients and Tools

When you choose to connect third-party AI clients or tools to your Oval account, you instruct us to share your User Content and related information with those third-party services as necessary to fulfill your requests.

Those third-party services are not controlled by Oval and their handling of your information is governed by their own terms and privacy policies. You are responsible for reviewing and understanding those policies before connecting or using such services.

5.3 Legal and Safety

We may disclose information about you:

  • To comply with applicable law, regulation, legal process, or governmental request
  • To enforce our Terms of Service or other agreements
  • To protect the rights, property, or safety of Oval, our users, or others
  • In connection with investigating suspected or actual unlawful activity

5.4 Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, your information may be transferred as part of that transaction, subject to standard confidentiality protections.

6. Data Retention

We retain personal information for as long as reasonably necessary to:

  • Provide and maintain the Service
  • Fulfill the purposes described in this Privacy Policy
  • Comply with legal, tax, accounting, or reporting obligations
  • Resolve disputes and enforce our agreements

When you delete your account or request deletion of your User Content, we will delete your User Content from our active production systems within a reasonable period of time, as described in our Terms of Service. We may retain limited copies of your information in backups, logs, and similar systems for a reasonable period for security, fraud prevention, and legal or compliance purposes. Such retained information will not be used to provide the Service and will be deleted in the ordinary course of our business operations, subject to any legal obligations to retain it.

7. Security

We use technical and organizational measures designed to protect personal information, including:

  • Transport-layer encryption (such as TLS) for data in transit
  • Application-level encryption for memory and file content at rest
  • Other safeguards to prevent unauthorized access, use, or disclosure

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

8. Your Choices and Controls

You have certain choices and controls regarding your information:

  • Account Information:
    You may update your account details (such as email address) through the Service where such controls are available, or by contacting us at legal@ovalmemory.com.

  • User Content:
    You can add, modify, or delete User Content through the Service, subject to any usage limits or constraints. When you delete User Content, we will remove it from our active systems within a reasonable period of time, as described in Section 6.

  • Integrations:
    You can connect and disconnect third-party AI clients and tools. Disconnecting a client may stop future data sharing with that client, but will not necessarily delete data previously stored by that third party.

  • Exporting Your Data:
    You may request an export of your User Content and certain associated information by contacting us at legal@ovalmemory.com. Export options and formats may be limited and may evolve over time.

9. California Privacy Rights (CCPA/CPRA)

If you are a resident of California, you may have additional rights under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA").

9.1 Categories of Personal Information We Collect

In the past 12 months, we may have collected the following categories of personal information (as defined by California law):

  • Identifiers (e.g., name, email address, account identifiers)
  • Commercial information (e.g., subscription plan, transaction history)
  • Internet or other electronic network activity information (e.g., usage and log data, device and network information)
  • Audio, electronic, visual, or similar information (to the extent you store such content as User Content)
  • Inferences drawn from any of the above (e.g., embeddings used to support search and retrieval features)

We collect these categories of information from the sources described in Section 2 and for the purposes described in Section 3.

9.2 Disclosure of Personal Information

We may share the categories of personal information listed above with:

  • Service providers who process information on our behalf (e.g., hosting, security, payments, email, embeddings)
  • Third-party AI clients and tools that you choose to connect
  • Public authorities or other third parties as required by law or to protect rights and safety
  • Successors in interest in connection with a business transaction, as described in Section 5.4

We do not:

  • Sell personal information as "sell" is defined under California law; or
  • Share personal information for cross-context behavioral advertising.

9.3 Your California Rights

Subject to certain exceptions, California residents may have the right to:

  • Right to Know:
    Request that we disclose the categories of personal information we have collected about you, the categories of sources, the business or commercial purposes, the categories of third parties to whom we disclose personal information, and the specific pieces of personal information we have collected about you.

  • Right to Delete:
    Request that we delete personal information we have collected from you, subject to certain exceptions (for example, where retention is required for security, fraud prevention, or legal compliance).

  • Right to Non-Discrimination:
    Not receive discriminatory treatment for exercising your privacy rights.

We do not provide financial incentives in exchange for personal information.

9.4 How to Exercise Your Rights

If you are a California resident and wish to exercise your rights under this section, you may contact us at:

  • Email: legal@ovalmemory.com

We may need to verify your identity before responding to your request, which may involve confirming information related to your account or recent interactions with the Service. If we cannot verify your identity, we may not be able to fulfill your request.

You may authorize an agent to make a request on your behalf, in which case we may require proof of the agent’s authority and additional verification.

We will respond to verifiable requests within the time periods required by applicable law (generally within 45 days, with the possibility of an extension where permitted).

10. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13.

If we learn that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to delete that information as soon as reasonably practicable.

If you believe that a child under 13 may have provided personal information to us, please contact us at legal@ovalmemory.com.

If you are between 13 and 17 years old, you may use the Service only with the consent of a parent or legal guardian, as described in our Terms of Service.

11. International Users

Our Service is intended for users located in the United States. If you access or use the Service from outside the United States, you acknowledge that your information may be transferred to, stored in, and processed in the United States and other jurisdictions where our service providers are located, which may have data protection laws that are different from those in your jurisdiction.

By using the Service, you consent to this transfer, storage, and processing.

We do not make specific commitments to comply with non-U.S. data protection regimes (such as the EU or UK General Data Protection Regulation) beyond what is required under applicable U.S. law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this Privacy Policy; and
  • Provide notice through the Service or by email where appropriate.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree to the changes, you should stop using the Service.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our privacy practices, you may contact us at:

  • Email: legal@ovalmemory.com
  • Mail:
    Revenite Inc. d/b/a Oval Memory
    321 E. Chapel Hill St.
    Durham, NC
    United States