Privacy Policy. Plain language.

01Introduction

Vitalis is persistent memory infrastructure for AI agents. This Privacy Policy describes how we collect, use, and protect information when you use Vitalis services, including our API, web interface, and related tools.

By using Vitalis you agree to the practices described here. If you disagree, please do not use the service.

02Who We Are

References to "Vitalis", "we", "us", or "our" throughout this document refer to the team operating the Vitalis service.

Vitalis provides persistent memory infrastructure for AI agents: a system that stores, indexes, and retrieves memories so agents maintain context across conversations and sessions. The service operates in two modes - Local (data stays on your device) and Cloud (data processed and stored on our servers).

03What We Collect

We collect only what is necessary to operate the service. Specifically:

Account information

• Email address and display name when you register
• Wallet address if you authenticate via Privy wallet login

Memory data (Cloud mode only)

• Memory content you store via the API (text, tags, metadata)
• Embeddings generated from your memory content for semantic search
• Local mode: your memories never leave your device. We see nothing.

Usage telemetry

• API call counts, error rates, latency (no memory content included)
• Feature usage patterns to improve the product

Technical data

• Auth tokens stored in browser local storage or cookies
• Preferences and UI settings
• IP address and basic request logs for security and abuse prevention

04How We Use It

We use your information solely to provide and improve the Vitalis service. Specifically we use it to:

• Authenticate your account and authorise API access
• Store, index, and retrieve your memories (Cloud mode)
• Debug errors and improve system reliability
• Monitor for abuse, fraud, and security threats
• Send transactional emails (account confirmation, billing receipts, material policy changes)

We do not sell your data to third parties. We do notuse your memory content to train machine learning models. We do not share your data for advertising purposes.

05Storage and Retention

• Cloud memories are stored encrypted at rest using AES-256
• Usage telemetry is retained for 90 days, then automatically purged
• Account data is retained for the life of your account
• Upon account deletion, all personal data and Cloud memories are purged within 30 days
• You can request immediate deletion at any time - see Your Rights below
• Backups may retain data for an additional 30 days after deletion for recovery purposes

06Your Rights

Regardless of where you are located, you have the following rights:

• Access: request a copy of all personal data we hold about you
• Export: download all your memories in JSON format at any time via the dashboard or API
• Correction: request correction of inaccurate personal data
• Deletion: request deletion of your account and all associated data
• Portability: receive your data in a machine-readable format

EU and UK users have additional rights under GDPR, including the right to restrict processing and to object to processing. California residents have rights under CCPA/CPRA, including the right to know what personal information is sold (we do not sell personal information) and the right to opt out.

To exercise any right, email info@vitaliscad.com. We will respond within 30 days.

07Third Parties

Vitalis uses a small set of trusted third-party processors. We share only the data each provider needs to perform their function:

• Privy - wallet-based authentication. Handles auth tokens and wallet address verification.
• Supabase - database and storage infrastructure for Cloud mode memories.
• Voyage AI - embedding generation for semantic memory search (Cloud mode only, content is processed but not retained by Voyage AI under our agreement).
• Anthropic - optional LLM for consolidation and reflection tasks. Only used if you opt into Cloud AI features. Governed by Anthropic's data processing terms.

We do not share your data with any party outside of those listed above and what is strictly necessary to operate the service. We do not sell data. We do not share data with advertisers or data brokers.

08Children

Vitalis is not directed to children under the age of 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with personal information, contact us at info@vitaliscad.com and we will delete it promptly.

09Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and email account holders at least 14 days before the changes take effect.

For minor changes (clarifications, typographical corrections), we will update the date without sending email notification. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

10Contact

For privacy questions, data requests, or concerns, contact us at: