Privacy policy

The short version: Erkle makes money from subscriptions. We don't sell your data, rent it, share it with advertisers, or use it to train AI models. Your memories never leave Erkle's infrastructure, and no AI provider receives them. We collect what we need to run the service and nothing else.

What we collect

• Your account. Name, email address, and a hashed password. If you sign in with Google or GitHub, we get your name, email, and profile picture from them instead of a password.
• Your team's content. Memories (title, body, tags, source URL), every version of them, review decisions, projects, repository remote URLs, and who is on the team with what role.
• Agent connections. Which agents you've authorized (for example Claude Code or Cursor) and the tokens they use to reach Erkle.
• Sessions and logs. Your IP address and browser user agent for each signed-in session, and server logs of requests and timings. We don't log memory bodies, tokens, or email contents.
• Marketing site analytics. The public pages on erkle.ai (home, pricing, these pages) use Google Analytics to count visits and sign-up clicks. The dashboard and the MCP server don't.
• Billing. For each team, its trial dates, plan, billing email, invoice history, and any trial code it redeemed (with who redeemed it), and for each person, whether they've used their trial. Stripe holds the payment details.

How we use it

To run Erkle: store and search your memories, enforce who can see what, keep you signed in, send account email (verification, password resets, team invitations), answer support requests, bill you, and stop abuse. That's the whole list.

Who else handles it

A few providers do part of the work for us. Each one gets only what its job needs. DigitalOcean hosts Erkle, so your memories are stored on its servers; none of the others receives memory content.

• DigitalOcean hosts the servers, the database, and backups, in San Francisco, USA. Search embeddings are computed by Erkle's own embedding service on one of those servers, so no AI provider receives your memories.
• Resend delivers account email, so it sees the recipient address and the message.
• Stripe handles payments. Your card details go straight to Stripe; we never see or store them. We keep only the billing email, plan, and invoice history.
• Google and GitHub, only if you choose to sign in with them.
• Google Analytics, on the marketing pages only, as described above.
• Healthchecks.io gets a signal from our server when a nightly backup succeeds, and nothing else.

We'll update this list before adding anyone new. We'll hand data to law enforcement only when the law requires it, and we'll tell you first unless we're legally barred from doing so.

How long we keep it

As long as your account or team exists. Archiving a memory hides it from search but keeps it and its history, so it can be restored. Deleting a team permanently deletes its memories, projects, and agent connections right away. Daily database backups expire after 14 days, so deleted data is gone from those within two weeks.

Your rights

You can ask for a copy of your data, correct it, or have it deleted, wherever you live. Team owners can delete a team from the dashboard, and you can delete your own account from your account settings. For anything else, such as permanently deleting a single memory, email hello@erkle.ai and we'll do it within 30 days.

Security

Everything travels over TLS, and traffic between our servers goes over an encrypted tunnel. The database, swap, and backups are encrypted at rest. Passwords are hashed. Access to memories is checked on every request, and a memory you can't read doesn't show up at all. Writes that look like they contain secrets (private keys, cloud and API tokens) are rejected. If we ever have a breach that affects your data, we'll tell you promptly. The security page has the details, including what the encryption doesn't cover.

Kids

Erkle is a work tool and isn't meant for anyone under 16.

Changes

If we change this policy, we'll update the date at the top. If the change matters, such as a new kind of data or a new provider, we'll email account owners before it takes effect.

Contact

Questions or requests: hello@erkle.ai.