Subprocessors
Memoira uses the following third-party services to operate. Each processes specific types of data on our behalf, subject to their own privacy policies and our data processing agreements.
The short version
Your stories, photos, and recordings are stored in Europe (Frankfurt and Dublin). A few processing vendors are based in the United States: Claude (AI responses), Deepgram (speech-to-text), Resend (email delivery), Vercel (app runtime). These vendors receive your data to process a request, but do not retain it beyond short technical logs and do not use it to train AI models, enforced by our contracts with them. We list every vendor below, honestly.
Last updated: April 2026
Where your data lives (at rest)
These vendors store your stories, photos, recordings, and account data. All European.
Neon (PostgreSQL)
Purpose: Primary database. Stores user accounts, stories, chapters, contacts, and all application data.
Data accessed: All user data including profiles, stories, interview transcripts, and settings.
Location: EU Central (Frankfurt)
Upstash (Redis)
Purpose: Caching and rate limiting. Session management, memory context caching, API rate limits.
Data accessed: Session identifiers, cached chapter summaries, rate limit counters.
Location: European Union (Ireland)
Cloudflare R2
Purpose: Object storage. Audio recordings, photos, video files.
Data accessed: User-uploaded photos, interview audio, video recordings.
Location: Cloudflare EU jurisdiction
AI processing (transient, not retained)
Voice-to-text, Claude responses, and text-to-speech. Your content passes through these vendors to generate a response. They do not store it long-term, and do not use it to train AI models, per contract.
Anthropic (Claude API)
Purpose: AI storytelling. Guida's responses during interviews, chapter generation, photo descriptions, sensitive-content detection.
Data accessed: Interview transcripts, chapter drafts, photo captions.
Location: US compute · not retained, not trained on (contractual)
Deepgram
Purpose: Speech-to-text. Converts voice to text during interviews.
Data accessed: Audio streamed during a recording (not persisted by Deepgram).
Location: US compute · streamed, not stored
Google Cloud Text-to-Speech
Purpose: Voice synthesis. Guida's spoken responses using Chirp 3 HD voices.
Data accessed: Text of Guida's responses (not stored by Google).
Location: European Union
Delivery & billing
Email and payments. EU customers are billed by Stripe's European entity.
Resend
Purpose: Transactional email. Verification emails, notifications, invitations.
Data accessed: Email addresses, user names, notification content.
Location: US compute · delivery-only, not retained beyond logs
Stripe
Purpose: Payment processing. Subscriptions, gift bundle checkout.
Data accessed: Email address, payment method details (card numbers handled entirely by Stripe, never by Memoira).
Location: EU (Stripe Payments Europe) for EU residents · US for US residents
Runtime & monitoring
The app server processes requests transiently. Stored data does not live here. It lives in the storage section above.
Vercel
Purpose: Application runtime. Serves the web app, runs server-side request handlers.
Data accessed: HTTP requests during processing, server logs (auto-deleted after 30 days). Stored data lives in Neon, not here.
Location: US East primary · request-time only
Sentry
Purpose: Error monitoring. Application error capture (PII sanitized).
Data accessed: Error stack traces, browser metadata (no personal content).
Location: European Union (Frankfurt)
Analytics (opt-in only)
Only loaded after explicit cookie consent. Used to improve the product, never to build a profile of you.
Plausible Analytics
Purpose: Privacy-first website analytics. Page views and usage trends without personal tracking.
Data accessed: Page URLs, referrer, browser type, country (no cookies, no personal identifiers).
Location: European Union
Microsoft Clarity
Purpose: UX session recordings and heatmaps. Helps us find usability problems (opt-in only, loaded only after cookie consent).
Data accessed: Page interactions, clicks, scroll behavior, anonymized session recordings.
Location: US-hosted · opt-in only via cookie consent
Questions?
For questions about our subprocessors or data processing practices, contact us at privacy@memoira.app