Legal
Privacy Policy
Last updated: October 28, 2026
What we collect
Refinery stores the data you choose to add: account information, projects, chats, imported content, entries, patterns, and settings needed to run the app. It also keeps some records the app creates as you use it. Your thumbs up or down on recalled memories, with any reason you give and which reply the vote belongs to. A history of changes to your decisions, including the old and new text, the reason, and whether you or the app made the change. Which tool each memory came from: the app, an import, or a connected coding tool. A log of each AI call with the provider, model, token counts, cost, timing and status; it holds no message or prompt text. Each of these is included in your export and removed when you delete your account.
How we use it
We use that data to authenticate you, load your workspace, generate summaries and memories, and keep your projects organized. Chat saves memories automatically unless you turn that off or use incognito. Chats from coding tools on your computer are different: you review each one before it can become a memory.
Capture from your computer
Capture brings conversations from the AI coding tools on your computer into Refinery so you can save what matters as memories. Connecting creates a token that lets the capture tool send to your account; creating it uploads nothing. The tool reads the conversation records those tools already keep on your computer and shows you each one before it is sent. A capture includes your messages, the assistant's replies, a title, repository and branch names, timestamps, and identifiers for the session and computer, and these can contain personal information. The tool masks secrets such as API keys where it can recognise them, and it can miss some. It does not remove names, email addresses or anything you pasted, so read each chat before you send it. Tool output and files are not attached, and editor context is removed, but anything pasted into a message or quoted in a reply is sent. Captures are stored in Supabase in the EU (Ireland) and pass through Refinery's app on Vercel. Sending a capture only stores it for your review: no AI model reads it until you choose Suggest memories or Save memory. Suggest memories sends your own messages from that chat (up to the 40 most recent, not the assistant's replies) to the AI provider behind your account so it can propose what to keep. Save memory sends the text you chose to the same provider (your own key, or Refinery's sponsored key during beta). Captures are deleted 30 days after you save or dismiss them, you can delete any capture at any time, and deleting your account removes all captures and tokens.
Sharing
We do not sell your data. Our service providers process data only to run the product. Your chat text goes to the AI provider you pick: OpenAI, Anthropic or Google. Text used for memory search is embedded by OpenAI. Supabase stores your data and handles sign-in email. Vercel hosts the app. Sentry receives error reports. PostHog (US servers) receives analytics only if you opt in. Research queries you run are sent to Reddit and Semantic Scholar. If you add a custom endpoint, your prompts and key go to the address you set.
Beta diagnostics
Refinery uses Sentry for operational error tracking and may use PostHog for product analytics during beta. We track events such as key connected, message sent, first response completed, and memory extracted so we can find broken onboarding and reliability issues.
Analytics boundaries
We do not send chat content, assistant responses, file contents, memory contents, source text, API keys, project names, session titles, or fold summaries to analytics tools. Product analytics and session replay are off by default and require your opt-in. Session replay, when enabled, masks inputs and sensitive app content. Separately, if you switch on "Help train Refinery's memory" in Settings, your chats, memories and source votes may be used to build Refinery's own memory model; it is off by default, you can turn it off any time, and analytics tools still never receive that content.
Retention
Content remains in your workspace until you delete it or delete your account, with two exceptions: deleting a memory does not delete its decision history, which stays until you delete your account, and captures are deleted automatically 30 days after you save or dismiss them. Deleting your account keeps a few records: invite records, your waitlist email, beta audit links and error reports. Backups and logs may also persist after deletion for reliability and security.
To get a copy of your data, use Export in the app (entries, patterns, memories, conversations, captures, projects, your preferences and privacy choices, your votes, decision history, memory source tools, your AI call log, and the list of files you uploaded; provider keys are not included). To remove it, delete individual items, or delete your account in Settings, under Profile. If you cannot find it or it is not enabled for you yet, email SUPPORT_EMAIL_TBD and we will delete your data by hand.