Privacy Policy
Last Updated: August 7, 2026 • MemHouse Core Security Specification v0.4
VPC & Air-Gapped Isolation
Memory facts are restricted to your specific Tenant Account and Scope. Zero cross-tenant data leakage.
No Model Training
Your facts and vector embeddings are never utilized to train public underlying models or third-party LLMs.
Zero Phone-Home Dependencies
Self-hosted and Enterprise deployments execute completely within your sovereign infrastructure.
1. Scope & Data Processing Architecture
MemHouse provides a stateful governed memory engine for AI agents, personal assistants (OpenClaw, Hermes Agent), orchestrators (LangGraph, CrewAI, AutoGen), and ephemeral swarms. When integrated into your applications, MemHouse processes raw observations and extracts structured factual statements (`subject`, `predicate`, `object`) on behalf of your tenant accounts.
2. Data We Process & Isolation Guarantees
- Tenant Facts & Vector Embeddings: Fact extractions are bound to strict composite index keys (`account_id`, `scope_id`). Facts are filtered using Gate A (quality/de-duplication) and Gate B (scope explosion protection) before entering active state.
- Provenance & Audit Trail Metadata: Every fact stores immutably its source observation ID, extraction model timestamp, and confidence score.
- No Public Telemetry: Enterprise self-hosted nodes execute zero phone-home diagnostic or usage reporting calls unless explicitly enabled by your systems administrator.
3. Data Retention, Curation & Deletion Rights
MemHouse supports granular lifecycle state management (`proposed` → `held` → `active` → `retracted`). You maintain 100% full authority to purge or retract facts via the REST API or MCP tool server (`mcp_memhouse_retract_fact`). Cascading soft and hard deletes immediately remove facts from PostgreSQL `pgvector` indexes.
4. Security Standards & GDPR / CCPA Compliance
All data in transit is protected using TLS 1.3. Data at rest is encrypted via AES-256 in PostgreSQL. MemHouse fully complies with GDPR "Right to be Forgotten" and CCPA data privacy directives through instant tenant memory wipe tools.
5. Contact Security & DPO
For privacy requests, DPA agreements, or security reports, reach our team at security@memhouse.ai.