← Back to Amber

Privacy Policy

Last updated: July 19, 2026

What we collect

When you use Amber, we collect and store:

• PayPal account information: Your PayPal Payer ID (a permanent account identifier) and account verification status. We do not collect or store your email address, name, or any other personal information from PayPal.
• Memories you store: Any text content you choose to save through the MCP tools. This is the core service. We store it so your AI can recall it later.
• Metadata: Timestamps, topic tags, and any key-value metadata you attach to memories.
• Usage data: We track subscription status and payment events for billing purposes. We do not track individual API calls or search queries.

How we store your data

Your memories are stored in your own isolated database. No other user can access your data. Each user gets a completely separate database instance hosted on Turso (libSQL), a globally distributed SQLite-compatible database.

Your data is encrypted in transit (TLS) and at rest (server-side encryption provided by the infrastructure).

How we use your data

We use your data solely to provide the Amber service:

• Store and retrieve your memories when your AI assistant requests them.
• Generate vector embeddings from your memory text so it can be found by semantic search.
• Manage your subscription and billing through PayPal.

Your memory content is not sent to any large language model (LLM). The only AI processing is embedding generation: your text is converted into numeric search vectors by OpenAI and is never run through a generative AI model. We do not sell, share, or use your data for advertising, training AI models, or any purpose other than providing the service to you.

Third-party services

Amber uses the following third-party services to operate:

• PayPal: Payment processing and identity verification.
• OpenAI: Text embeddings for semantic search. Your memory content and search queries are sent to OpenAI's embedding API to generate the numeric vectors used for matching. This is not a generative model — it does not read, summarise, or generate text from your data — and OpenAI's API data-usage policy applies. This is the only AI service that ever receives your memory text.
• Cloudflare: Hosting and content delivery.
• Turso: Database hosting.

Data retention

Your memories are stored for as long as your account is active. If you cancel your subscription, your data remains in your database but you cannot access it until you resubscribe.

If your subscription has been cancelled or expired for more than 12 months, we may delete your database. We do not send notifications before deletion.

Data deletion

You can delete individual memories at any time using the amber_delete_memory tool. Deleted memories go to trash and can be restored.

To delete all your data, use the amber_delete_account tool. This does not happen immediately: deletion is scheduled for 30 days later, and you can reverse it at any time during those 30 days with the amber_cancel_account_deletion tool. Access to your memories is suspended as soon as you schedule deletion, but you can still export your data during the 30-day window. After 30 days, your database and all associated data are permanently and irreversibly removed.

Data export

You can export all your memories at any time using the amber_export_memories tool, which returns all your data as JSON.

Cookies

Amber does not use cookies. Authentication is handled via OAuth 2.1 tokens.

Children

Amber is not intended for use by anyone under the age of 18.

Changes

We may update this privacy policy from time to time. Changes will be reflected on this page with an updated date.

Contact

For privacy-related questions, contact us at support@ambermem.com.