Skip to content

Privacy Policy

Last updated: April 2026

1. Who We Are

Memora is operated by Utopia Ventures, a company registered in Malaysia. We provide AI-powered meeting intelligence services including recording, transcription, summarisation, and routing of meeting outcomes. For any privacy-related inquiries, contact us at support@memoraai.my.

2. Data We Collect

We collect the following categories of data:

  • Account information — name, email address, organisation name, and role, collected during registration.
  • Audio recordings — meeting recordings you upload or capture through Memora devices. These are the raw audio files used for transcription.
  • Transcripts and summaries — text generated from your recordings by our AI processing pipeline, including action items and routing metadata.
  • Usage data — login timestamps, feature usage, device information, and IP addresses, collected automatically to maintain and improve the service.

3. How We Process Your Data

Your meeting recordings are processed through the following pipeline:

  • Transcription — audio files are sent to OpenAI Whisper for speech-to-text conversion. OpenAI processes this data under their API data usage policy and does not use API inputs for model training.
  • Summarisation and routing — transcripts are processed by Anthropic Claude to generate summaries, extract action items, and determine routing. Anthropic does not use API inputs for model training.
  • Email delivery — summaries are routed to the designated recipients within your organisation via email.

We do not sell, rent, or share your data with third parties for marketing purposes. Data is only shared with the processors listed above for the sole purpose of delivering the service.

4. Data Storage and Security

Your data is stored using Supabase, a managed database platform. Specifically:

  • Audio recordings are stored in Supabase Storage with row-level security (RLS) ensuring only authorised members of your organisation can access them.
  • Transcripts, summaries, and account data are stored in a Supabase PostgreSQL database, encrypted at rest.
  • All data transfers between your browser, our servers, and third-party processors occur over TLS encryption.

5. Data Retention

We retain your data for as long as your account is active. Audio recordings are retained for 90 days after processing unless you choose to keep them longer. Transcripts and summaries are retained for the duration of your subscription. Upon account cancellation, all your data is permanently deleted within 30 days. You may request early deletion at any time by contacting us.

6. Your Rights

Under Malaysia's Personal Data Protection Act 2010 (PDPA) and general data protection principles, you have the right to:

  • Access — request a copy of all personal data we hold about you.
  • Correction — request correction of inaccurate or incomplete data.
  • Deletion — request deletion of your personal data and all associated recordings, transcripts, and summaries.
  • Export — download your meeting data in a portable format.
  • Withdraw consent — withdraw consent for data processing at any time, which may result in termination of the service.

To exercise any of these rights, email us at support@memoraai.my. We will respond within 14 business days.

7. Voice Data & Biometric Information

Meeting recordings contain voice data, which may be considered biometric data under certain jurisdictions. We want to be transparent about how this data is handled:

  • Voice recordings are processed solely for the purpose of generating transcriptions and meeting summaries. We do not create or store voiceprints, voice profiles, or any biometric identifiers.
  • Recordings are sent to third-party AI providers (OpenAI, Anthropic, Speechmatics) for processing. These providers process data under Data Processing Agreements (DPAs) and do not retain audio data beyond the processing session.
  • You may delete your voice recordings at any time from the meeting detail page or via the "Delete My Data" option in Settings.

8. Data Processing Locations

Your data is processed in the following locations:

  • Database & Storage — Supabase (AWS ap-southeast-1, Singapore). Your audio, transcripts, and account data are stored in Singapore.
  • Transcription — OpenAI Whisper API (processed in the US) or Speechmatics (processed in EU). Audio is sent for processing only and is not retained by the provider.
  • AI Analysis — Anthropic Claude API (processed in the US). Transcript text is sent for analysis and is not retained by the provider.
  • Hosting — Vercel (global edge network, primary region US-East).

By using Memora, you consent to your data being processed in these locations. We ensure all providers meet appropriate data protection standards through contractual agreements.

9. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies. Analytics, if enabled, use privacy-respecting tools that do not track individual users across websites.

8. Changes to This Policy

We may update this privacy policy from time to time. Material changes will be communicated via email to the address associated with your account. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

For privacy inquiries, data requests, or complaints, contact Utopia Ventures at support@memoraai.my.

Start Free Trial