Privacy Policy

RecallBase — local-first AI conversation archive is local-first by default. This policy explains what information we collect through the website, account, billing, extension token, and support flows, and what information stays outside those systems.

Last updated: June 13, 2026

1. Information we collect

We collect only the information needed to operate RecallBase, provide accounts and subscriptions, respond to support requests, and keep the service secure.

Account information: email address, sign-in state, and authentication metadata needed to create and maintain your account.
Billing information: subscription status, plan, Stripe customer and subscription identifiers, checkout state, and billing portal state. Payment card details are handled by Stripe, not stored by RecallBase.
Extension entitlement information: token issuance, token status, and plan checks used to unlock paid features in the browser extension or local app.
Support information: the email address and message content you choose to send us. Do not send raw AI conversations, prompts, answers, local file paths, filenames, third-party cookies, access tokens, raw DOM, or sensitive screenshots. If diagnostics are needed, provide only the minimum redacted sample requested.
Website usage and device information: basic logs such as request time, pages viewed, browser type, operating system, IP address, and security-related events. Analytics and logs are limited to website operation, reliability, security, and aggregate usage.
Cookie and similar technology data: cookies or local storage used for sign-in, security, preferences, and website operation.

2. Local-first data boundary

RecallBase website auth, billing, /api/me, analytics, and extension-token APIs do not receive raw AI conversation text, prompts, answers, local file paths, filenames, raw DOM, sensitive screenshots, or third-party credentials such as cookies, access tokens, API keys, or session secrets from AI services.

These systems may process RecallBase account sessions, security cookies, billing identifiers, and extension entitlement tokens as needed to operate the service.

AI conversation archives are stored on your device by default. If you export content to a third-party destination such as Notion, a file, or another app, that export is an action you choose and the destination's own terms and privacy policy may apply.

3. How we use information

Provide, maintain, and improve RecallBase.
Create accounts, authenticate users, and manage sessions.
Process subscriptions, cancellations, billing portal access, and plan entitlement checks.
Respond to support requests and service-related questions.
Protect against abuse, fraud, unauthorized access, and security incidents.
Analyze website reliability and performance without collecting raw AI conversation content.
Send service notices, transactional emails, and important product or policy updates.

4. How we share information

We do not sell your personal information. We may share limited information only in these cases:

Service providers: vendors that help us operate authentication, hosting, payments, email, analytics, security, support, browser extension distribution, and export destinations you choose.
Stripe: billing and subscription data needed to process payments and manage subscriptions.
Legal and safety reasons: when required by law or needed to protect RecallBase, users, or the public.
With your direction: when you choose to connect, export, or send information to a third-party service.

5. Data security

We use reasonable technical and organizational safeguards designed to protect personal information, including access controls, encryption in transit where appropriate, secure secret handling, and operational reviews. No method of transmission or storage is perfectly secure.

6. Data retention

We retain personal information only as long as reasonably necessary for the purposes described in this policy, including providing accounts and subscriptions, complying with legal and tax obligations, resolving disputes, enforcing agreements, and maintaining security. Account and entitlement records are generally retained while your account is active. Billing records may be retained as required for tax, accounting, and fraud-prevention purposes. Support messages and security logs are retained for a limited period based on operational need, unless longer retention is required by law.

7. Your choices and rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, objection, withdrawal of consent, or to opt out of certain disclosures or targeted advertising. To exercise rights, contact support@recallbase.net. We may verify your request before responding. We will not discriminate against you for exercising privacy rights. If applicable law requires an appeal process, you may appeal by replying to our response.

We do not sell personal information. If we use advertising or analytics in a way that is considered "sharing" or targeted advertising under applicable law, we will provide required opt-out controls and honor applicable browser opt-out signals where required.

8. Cookies

RecallBase may use cookies or similar technologies for sign-in, session security, preferences, billing flows, and website operation. We do not use cookies or local storage to collect raw AI conversation content, prompts, answers, local file paths, filenames, raw DOM, third-party credentials, or sensitive screenshots. You can control cookies through your browser settings, but disabling some cookies may prevent account or billing features from working correctly.

9. Children's privacy

RecallBase is not directed to children under 13. If we learn that we collected personal information from a child under 13, we will take reasonable steps to delete it.

Parents or guardians who believe a child under 13 has provided personal information to us may contact support@recallbase.net to request deletion.

10. International processing

We and our service providers may process information in countries outside your country of residence. Where required, we use appropriate safeguards for those transfers.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update this page and may provide additional notice through the website or by email.

12. Contact us

For privacy purposes, RecallBase is the controller of personal information collected through the website, account, billing, support, and entitlement systems, unless stated otherwise. Questions or requests about this Privacy Policy can be sent to support@recallbase.net.