Legal
This Privacy Policy explains how LeadHash LLC ("LeadHash," "we," "us," or "our"), a Virginia limited liability company operating the Nuramem service ("Nuramem," the "Service"), collects, uses, discloses, and protects information about you. It also describes the rights you have over your information under the EU/UK General Data Protection Regulation ("GDPR") and the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA").
Please read this Policy together with our Terms & Conditions. If you do not agree with this Policy, do not use the Service.
Beta notice. Nuramem is currently offered as a closed beta. Features, data flows, and sub-processors described here reflect the beta as of the effective date and may change. We will update this Policy and the "Last updated" date when they do.
Nuramem is a cross-model memory layer for AI. It stores your memory records — decisions, plans, people, references, learnings, and state — and synthesizes them into a compressed model of who you are, so the AI tools you use (such as Claude, ChatGPT, or Gemini) can load it at the start of a session.
We host your memory. Your records are stored in Nuramem-managed databases on Google Cloud, encrypted and isolated per user. Synthesizing your records into a usable self-model is the core of the product, and it requires our systems — and the AI providers listed in Section 6 — to read your memory content. LeadHash is the data controller for that content, and we protect it accordingly.
Two rights are built into the product and always self-serve: you can export everything at any time, and when you delete, delete means deleted — your records are physically erased from our live systems, typically within a minute, and residual copies expire from encrypted backups within seven days.
We do not sell your personal information, and we do not use the content of your memory records to train AI models — and our AI sub-processors are not permitted to either.
LeadHash LLC is the data controller for the personal information processed through the Service — including your account identity, usage logs, support communications, and the content of the memory records you create. For content contributed to a shared project, we process it on behalf of the project and all its members under the project's access-control settings.
Contact for privacy matters:
LeadHash LLCNuramem is not designed to collect special-category data (such as health, biometric, or precise-location data). Because you control what you write into your memory, please avoid storing sensitive personal information you would not want persisted. You are responsible for the content you choose to save.
All of your data is stored in Google Cloud–managed databases operated by Nuramem in the us-central1 region (United States):
| Category | Where it lives |
|---|---|
| Memory records, episodes, and synthesized self-models | Google Cloud SQL (PostgreSQL), encrypted at rest, isolated per user |
| Search embeddings (derived from your content) | The same Google Cloud SQL database |
| Short-lived cache of your current self-model | Redis (Google Cloud Memorystore) |
| Shared-project content, membership, and the sign-in identity mapping | Google Cloud Firestore (currently being consolidated into the same Cloud SQL database) |
| Sign-in credentials | Our identity provider, Auth0 (Okta) — identity only; Auth0 never receives memory content |
Sensitive operational secrets are managed through Google Secret Manager. Database backups are encrypted and retained for seven days, after which they expire automatically.
We use information for the following purposes. Where GDPR applies, the lawful basis for each is noted.
We do not engage in solely automated decision-making that produces legal or similarly significant effects about you.
We share information only as described here. We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA.
We are based in the United States and your data is stored in the United States (Google Cloud, us-central1). If you access the Service from outside the United States, your information is transferred to, stored, and processed in the United States.
Where we transfer personal data out of the EEA, UK, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent UK and Swiss mechanisms. You may request a copy of the relevant safeguards by emailing privacy@nuramem.ai.
We may retain limited information longer where required to comply with law, resolve disputes, or enforce our agreements.
Two rights are stronger here than the industry norm, and both are self-serve — no email, no ticket, no waiting period:
GET /v1/account/export).You have the right to: access your personal data; rectify inaccurate data; erase data ("right to be forgotten"); restrict or object to processing; data portability; and withdraw consent where processing is based on consent. You also have the right to lodge a complaint with your local supervisory authority.
You have the right to: know what personal information we collect and how we use and disclose it; access and obtain a copy of it; correct inaccurate information; delete it (subject to exceptions); and not receive discriminatory treatment for exercising your rights. We do not sell or share personal information for cross-context behavioral advertising, so no opt-out of sale/sharing is required — but you may still contact us to exercise any applicable right.
Email privacy@nuramem.ai with your request. We will verify your identity (typically by confirming control of the account email) before acting. We respond within the timeframes required by applicable law (generally within 30 days under GDPR and 45 days under CCPA, extendable as permitted). Authorized agents may submit CCPA requests on your behalf with proof of authorization.
We use industry-standard measures to protect information, including encryption in transit (TLS), encryption at rest for all stored data, per-user isolation enforced at the database layer (row-level security), least-privilege access for our services, secret management for credentials, encrypted backups, and access controls on our infrastructure. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security. You are responsible for safeguarding your own account credentials and the AI tools you connect.
The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact privacy@nuramem.ai and we will delete it.
We may update this Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, provide additional notice (such as by email or an in-product notice). Your continued use of the Service after an update takes effect constitutes acceptance of the revised Policy.
Questions, requests, or complaints about this Policy or your information:
LeadHash LLCThis document reflects Nuramem's actual data architecture. It is not legal advice.