Privacy Policy

1. Introduction

This Privacy Policy describes how membrain (“membrain”, the “Company”, “we”, “us”, or “our”) collects, uses, and discloses information in connection with the membrain websites, applications, command-line tools, APIs, and related services (collectively, the “Service”). By using the Service, you agree to the collection, use, and disclosure of information as described in this Privacy Policy. This Privacy Policy is incorporated into and forms part of the Terms of Service.

2. Information We Collect

• Information you provide. Account and profile information (such as name and email address); content, data, and other materials you or your connected applications submit to the Service (“User Content”); and communications you send to us.
• Information collected automatically. Log and usage data, such as access times, requests made, feature usage, approximate location derived from IP address, device and browser information, and diagnostic and performance data.
• Information from third parties. If you sign in through a third-party identity provider, we receive information from that provider such as your name, email address, and profile image, as permitted by your settings with that provider.

3. How We Use Information

We use the information we collect to:

• provide, operate, maintain, and improve the Service and its features;
• process and respond to your requests, including processing User Content to deliver the functionality of the Service;
• authenticate users and secure the Service, and detect and prevent fraud and abuse;
• monitor performance, diagnose problems, and develop new features;
• communicate with you about the Service, including service-related notices;
• comply with legal obligations and enforce our agreements; and
• fulfill any other purpose disclosed to you or with your consent.

4. How We Disclose Information

We may disclose information in the following circumstances:

• Service providers. To vendors and service providers that perform services on our behalf, such as cloud hosting, data storage, authentication, artificial-intelligence model processing, and performance monitoring, in each case for the purpose of operating and providing the Service.
• Legal requirements. If we believe disclosure is required by applicable law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of the Company, our users, or others.
• Business transfers. In connection with, or during negotiations of, any merger, acquisition, financing, reorganization, or sale of all or a portion of our assets, in which case information may be transferred as a business asset.
• With your consent. With your direction or consent, including to applications and agents you choose to connect to your account.

We do not sell personal information, and we do not share personal information with third parties for their own advertising or marketing purposes.

5. Data Retention

We retain information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. The Service is designed for durable, long-term storage of User Content, and User Content may be retained for as long as your account remains active. Residual copies may persist in backups and logs for a limited period after deletion.

6. Security

We use commercially reasonable technical and organizational measures designed to protect information, including encryption in transit and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights and Choices

You may access, review, update, or request deletion of your information, or request a copy of your data, by contacting us at john.spence.v@gmail.com. We will respond to verified requests within a reasonable time and as required by applicable law. We may retain certain information as required by law or for legitimate business purposes, and residual copies may persist in backups for a limited period. You may also disconnect any application or revoke any credential you have connected to your account at any time.

Depending on where you live, you may have additional rights under applicable law, including the right to know what personal information we collect, the right to request deletion, and the right not to be discriminated against for exercising your rights. We honor such requests as required by applicable law.

8. Tracking Technologies and “Do Not Track”

The Service uses only the technologies necessary to operate, such as authentication state. We do not use third-party advertising or cross-site tracking technologies, and third parties do not collect personal information about your online activities over time and across different websites through the Service. Because we do not engage in cross-site tracking, the Service does not respond differently to “Do Not Track” signals.

9. Children’s Privacy

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete it.

10. International Users

The Service is operated from the United States, and information is processed and stored in the United States. If you access the Service from another jurisdiction, you consent to the transfer, processing, and storage of your information in the United States, where privacy laws may differ from those of your jurisdiction.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice by posting the updated policy on the Service and updating the effective date above, or by other reasonable means. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.

12. Contact

Questions, requests, or complaints regarding this Privacy Policy may be directed to john.spence.v@gmail.com.