Your memory is yours.

What BotRecap keeps, how it is locked, who else sees it on the way, and how to see, take or delete all of it.

What is kept

Facts, not transcripts

Kept

  • Facts and links read from your messages, e.g. Analytics uses ClickHouse, with their history: what was true before and when it changed.
  • Where each came from: the start of the message it was read from (up to 1,000 characters), so you can see why it is believed.
  • Changes waiting for you to confirm, when a message was unclear.
  • Usage: how many messages were read each day, and the tokens used.
  • Your key, as a hash only, with when it was made and last used.

Not kept

  • Your conversations. Each message is read once to find lasting facts. While it waits to be read it is encrypted, and it is deleted once read (or kept, still encrypted, to try again if reading failed).
  • Your files. Your agent sends only your messages and its replies, not your files, though a reply may quote some code.
  • Your key itself. It is shown once, when it is made.
How it is locked

A key of your own

  • Your memory is encrypted with a key only it uses. Every fact, name and message is encrypted (XChaCha20-Poly1305) before it is written to disk. Even names and property names are replaced by keyed hashes.
  • That key is stored encrypted with a master key that is kept apart from the data.
  • Your memory is separate from everyone else's. It sits in its own folder, so one person's data can never show up in another's searches.
  • Everything in transit uses HTTPS.
Who else sees it

One AI call per message, nothing else

To find the facts in a message, BotRecap sends that message to Anthropic's Claude API, with the facts already known that relate to it. That happens in the background after you send it. Under Anthropic's commercial terms, data sent through the API is not used to train their models. See Anthropic's privacy center for how long they keep it.

Looking things up uses no AI call. Search runs on BotRecap's own server, and nothing is sent anywhere for it. Your data is not sold, shared or used for ads.

Your control

See it, fix it, take it, delete it

  • See and fix: the review page lists what was saved recently and what is waiting for you, with Undo, Accept and Reject.
  • Take it all: everything stored about you, with its history and sources, as JSON.
  • Delete it all: your keys, your memory, your usage, and the key your memory was encrypted with. With that key gone, any copy left behind (for example in a backup) can't be read.
curl -H "Authorization: Bearer $KEY" https://www.botrecap.com/v1/export > my-memory.json
curl -X DELETE -H "Authorization: Bearer $KEY" https://www.botrecap.com/v1/me