Privacy Policy

1. Summary

Palace Server is self-hosted software. Your memory, embeddings, and knowledge-graph data live entirely on infrastructure you control — we never receive them. This policy covers only the limited data we process to sell and support licenses through palacememory.com.

2. What the self-hosted server does NOT collect

The Palace Server software contains no telemetry and makes no outbound calls to us during normal operation. Embeddings are computed locally with ONNX Runtime, and license keys are verified offline after activation. We have no visibility into your prompts, documents, drawers, or any content stored in your deployment.

3. Data controller

The data controller for personal data processed via palacememory.com is the operator identified in the imprint. For all privacy matters you can reach the controller at [email protected].

4. Data we process

• Billing data — when you purchase a license, our payment processor (Stripe) collects your work email, company name, and payment details. We receive your email, plan, and subscription status to issue and manage your License Key.
• Contact form — if you use the contact form, our form processor (Formspree) transmits the company, work email, plan interest, seat estimate, message, and deployment notes you submit so we can respond to your enquiry.
• Website analytics — only after you consent, Google Analytics records information about visits and interactions, including pages viewed, approximate location, device and browser information, referral source, and selected conversion events. We do not send your Palace Server memory content, contact-form contents, payment details, or license key to Google Analytics.

5. Processors

We rely on the following sub-processors strictly for the purposes above: Stripe (payments and subscription management), Formspree (contact form delivery), and, with your consent, Google Analytics (website usage measurement). Google may process analytics data in the United States and other countries under its applicable data transfer safeguards. We do not sell your personal data.

6. How we use it

We use this data only to issue and manage License Keys, provide support, respond to enquiries, and meet legal and accounting obligations. With your consent, we also use aggregated website analytics to understand traffic and improve the site. We do not use Google Analytics for advertising or cross-site profiling.

7. Analytics consent and cookies

Google Analytics is disabled by default. We apply Google Consent Mode with analytics and advertising storage denied on every visit. The Google Analytics script is loaded and analytics cookies are created only after you select “Allow analytics.” When enabled, Google Analytics sets the following cookies:

• _ga — distinguishes visitors; expires after up to 2 years.
• _ga_<container-id> — persists session state for the property; expires after up to 2 years.

You may withdraw or change your choice at any time using “Analytics preferences” in the website footer. Withdrawing consent stops further collection and clears these cookies. Declining analytics does not affect access to the website. For more information, see Google’s Privacy Policy and Google’s data processing terms.

8. Retention

Billing records are retained for as long as required by tax and accounting law. Contact-form messages are retained only as long as needed to handle your enquiry and any related follow-up. Google Analytics data is retained for 14 months, after which it is automatically deleted by Google.

9. Your rights

Subject to applicable law (including the GDPR), you may request access to, correction of, or deletion of the personal data we hold about you. To make a request, use the contact form.

10. Contact

For any privacy question or request, use the contact form. We respond within one business day.