Privacy Policy

Ergo is a hosted decision-memory service operated by myzona, available at ergomem.com, app.ergomem.com, and api.ergomem.com (the “Service”). This policy describes what personal data we collect, why, and what your choices are.

• Account data — your email address, used to create your account, sign you in, and contact you about the Service.
• Content you store — the claims, reasons, and documents you write to your Ergo workspace. This is your data; we process it only to run the Service for you.
• Billing data — handled by Stripe, our payment processor. We never see or store your card details; we keep only your subscription status and plan.
• Technical data — request logs (IP address, timestamps, endpoints) kept for security, rate limiting, and debugging.

We use your data to operate the Service: authenticate you, store and retrieve your content, enforce plan limits, process payments, prevent abuse, and respond when you contact us. We do not sell personal data, we do not use your stored content to train models, and we do not run third-party advertising or analytics trackers on the Service.

We rely on a small set of providers to run the Service:

• Cloudflare — hosting, network security, sign-in (email one-time codes), and the Turnstile anti-bot check on signup.
• Stripe — subscription payments and billing management.

Each receives only the data it needs to provide its function and processes it under its own privacy terms.

We use only functional cookies: a session cookie that keeps you signed in to app.ergomem.com, and the cookies Cloudflare Turnstile needs to distinguish humans from bots on signup. There are no advertising or cross-site tracking cookies.

Your content stays in your workspace for as long as your account exists. If you cancel, we retain your data for a reasonable period so you can return or export it — it is not automatically deleted. You can permanently delete your own account and all of your workspace’s data at any time, self-serve, from the “Danger Zone” on the Data page of the customer panel — this cancels any active subscription, purges your stored content, and removes your access immediately, with no waiting period. If you would rather we do it for you, email [email protected] and we will honor the request promptly. Technical logs are kept only as long as needed for security and debugging.

All traffic to the Service is encrypted in transit (TLS). API access is authenticated with per-tenant tokens, and each customer’s data is scoped to their own tenant. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you.

You can access, correct, export, or delete your data. Deletion is self-serve from the customer panel (see Section 6) — you don’t need to contact us. Depending on where you live, you may have additional statutory rights (such as under the GDPR). For any other request, or if you’d rather we delete your data for you, email [email protected].

We may update this policy as the Service evolves. If a change is material, we will notify you by email or through the Service before it takes effect.

Questions about this policy? Email us at [email protected].