chat-recall privacy & data

munhq (https://munhq.com), which is the data controller for the personal data described below.

This includes prompts, assistant responses, file paths (hashed by default; cleartext only if you opt in), edit metadata, and derived data (summaries, search indexes, extracted facts).

Account data. Email and identity from our sign-in provider (Keycloak), team membership, device names you assign to sync tokens.

Billing data. Handled by Stripe. We store your subscription status and plan; we never see or store card numbers.

Request logs (IP, route, status, latency) retained for 30 days for abuse prevention and debugging; aggregate usage metrics.

To provide the product: indexing, search, summaries (generated by AI models running on our infrastructure), analytics, secret-leak detection and alerting for your own workspace .

Stripe — payments.

Your data persists while your workspace exists.

Request logs (IP, route, status, latency) retained for 30 days for abuse prevention and debugging

Deleting your workspace (or emailing contact@chatrecall.dev) removes all content within 30 days, including from backups as they rotate (90-day backup cycle).

EU region: Gravelines, France

Data is hosted in the EU.

Stripe — payments. OVHcloud — hosting (EU region: Gravelines, France) and encrypted backups.

chat-recall delete <session> purges a session everywhere and tombstones it so no device can re-sync it.

Access, export, correction, deletion — email contact@chatrecall.dev.

If you are in the EU/EEA, you additionally have GDPR rights (portability, restriction, complaint to a supervisory authority).

We do not sell your data, use it to train models, or share it with third parties beyond the processors below.