Privacy Policy

Effective date: April 14, 2026

1. Introduction

Astrix Labs (“we”, “us”, “our”) operates Genesys, an AI agent memory platform. This policy explains how we collect, use, store, and protect your information when you use our service.

By using Genesys, you agree to the practices described in this policy.

2. Information We Collect

Information you provide

Memory content you store through MCP tools (text, metadata, related links)
Account information via Clerk authentication (email, user ID)
Preferences and settings (core memory categories, pinned memories)

Information generated automatically

Vector embeddings derived from your memory content
Causal graph edges inferred between memories
Memory lifecycle metadata (creation time, access count, reactivation timestamps, decay scores, status transitions)
OAuth tokens (hashed, 24-hour TTL)

Information we collect from third parties

Authentication data from Clerk (user ID, email, session info)

3. How We Use Your Information

To provide the Genesys memory service (store, recall, search, score, prune)
To generate embeddings for semantic search (via OpenAI or local model)
To infer causal relationships between memories
To run memory lifecycle operations (decay scoring, consolidation, forgetting)
To authenticate your identity and secure your account
To improve service reliability and fix bugs

We do not use your data to train AI models.

We do not sell, rent, or share your data with third parties for marketing.

4. Data Storage and Security

Memory data stored in Postgres on Neon (encrypted at rest, encrypted in transit via TLS)
Authentication tokens stored as SHA-256 hashes, never in plaintext
Per-user data isolation — each user's memories are scoped by user ID
Access to production databases restricted to authorized personnel only
Obsidian vault backend stores all data locally on your machine in .genesys/index.db

5. Third-Party Services

We rely on the following third-party services to operate Genesys:

OpenAI — embedding generation. Content sent per OpenAI's API data usage policies. OpenAI does not train on API inputs.
Anthropic — optional LLM processing for consolidation and contradiction detection, per Anthropic's API usage policies.
Clerk — authentication and identity management (privacy policy)
Neon — database hosting (privacy policy)
Railway — server hosting
Cloudflare — website hosting and CDN

6. Data Retention

Active memories are retained as long as your account exists
Pruned memories are permanently deleted from the database
OAuth tokens expire after 24 hours and are automatically cleaned up
If you delete your account, all associated data is deleted within 30 days

7. Your Rights

Access — request a copy of all data we hold about you
Deletion — delete individual memories via delete_memory, or request full account deletion
Export — request a machine-readable export of your memories
Correction — update any memory via the MCP tools
Portability — export your data in JSON format

GDPR

If you are in the EU/EEA, you have rights under the General Data Protection Regulation including the right to erasure, right to access, right to rectification, right to data portability, and right to object to processing.

CCPA

If you are a California resident, you have the right to know what data we collect, request deletion, and opt out of sale. We do not sell your personal data.

To exercise any of these rights, contact founder@astrixlabs.ai.

8. Children's Privacy

Genesys is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we learn that we have collected such data, we will delete it promptly.

9. Local-First Option

When using the Obsidian vault backend with GENESYS_EMBEDDER=local, no data leaves your machine. All processing happens locally with no API calls to OpenAI or any third party. The .genesys/index.db file is stored in your vault directory under your control.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date. Continued use of Genesys after changes are posted constitutes acceptance of the revised policy.