Data handling
How your data is handled
What Agent Memory captures, what it leaves alone, where it stores data, and what is sent to anyone else.
Agent Memory is a personal memory. What it keeps belongs to one user and is not shared with other people. This page lists the facts as they stand today.
What is captured
| Source | What | When |
|---|---|---|
| Claude Code, Codex, Devin CLI, Grok | The session files these agents write on your computer | When a session ends, and in a periodic sweep |
| ChatGPT and Claude on the web | The messages the model can see in the current conversation | Only when you ask, in one call |
| Your agents, through MCP | Memories and feedback records they write | When an agent calls the tool |
What is not captured
- Your ChatGPT or Claude sidebar history and other chats.
- Hidden reasoning, and messages that have dropped out of the current context.
- Anything in local mode leaves the computer only if you change the mode.
How it is used
User and assistant messages are indexed for search. Tool calls, tool output and recorded thinking are kept so you can replay a session, but they are not searched and not used to build memories. Feedback records are used to rank search results on your device.
Where it is stored
| Mode | Storage |
|---|---|
| Cloud (default) | Raw sessions are compressed and stored with authenticated encryption. Indexes, vectors and retrieval metadata live in PostgreSQL, which enforces ownership per user. |
| Local | SQLite and sqlite-vec on your computer. Agent Memory blocks its own outbound traffic, removes saved cloud sign-in and external keys, and stays blocked if the setting can't be read. |
| Hybrid | Both of the above. |
A cloud session can be restored to its original JSONL, verified against SHA-256. Agent Memory doesn't delete the session files your agents wrote.
What goes to other services
| Service | When | What is sent |
|---|---|---|
| Hugging Face | When the embedding model is downloaded | A download request. None of your data. |
| DeepInfra or Gemini | Only if you choose it and add your own key. Never in local mode. | The text being embedded, including session text and search queries. |
| Google Sheets and Mailgun | When you sign up for updates | Your email address, language and the time you signed up: kept in a sheet, and used to send you a confirmation. |
| Sentry (error reports) | When the app, the CLI or this site hits an error | Technical details of the error, and your internal user ID if you are signed in. Never conversation text, search terms, cookies, authorization headers, URL queries, screenshots or session replays. |
The embedding model runs on your device by default: MLX on the Mac and onnxruntime on the CPU on Windows. Agent Memory doesn't run it on its servers and doesn't hold a shared provider key.
Sign-in and keys
ChatGPT and Claude connect through OAuth 2.1. On the Mac, tokens and keys are kept in the Keychain; on Windows, in the Windows Credential Manager. On the Mac, agents reach Agent Memory through a CLI and MCP stdio, and the app opens no network port.
This website
This site uses no analytics and no third-party scripts or fonts. If you sign up for updates, your email address is used only for product news and a note when you can start using Agent Memory. The privacy policy has the details.
Questions
Write to contact@arcm.co.jp.