MemStack™
← Back to home

Privacy Policy

Last updated: August 2, 2026

1. Who We Are

MemStack™ is operated by CW Affiliate Investments, LLC. This policy explains what data we collect, how we use it, and your rights regarding that data.

2. What We Collect

  • Email address: Collected when you activate a license key (free or Pro). Used for license delivery, product updates, and occasional marketing.
  • Payment information: Processed securely by Stripe for Pro purchases. We never see or store your card number, CVV, or full billing details. Stripe handles all payment data.
  • License validation data: When the MemStack software validates your license key against our API, it sends your license key, a machine ID, your email address if you provided one at activation, and your environment (operating system, Python version, and MemStack version). The machine ID is a one-way SHA-256 hash of your hostname, username, and platform; we receive only the hash, never those values themselves. Section 3 lists this and every other network call the software makes.
  • What we never receive: we do not collect conversation content, prompts, code, file contents, file paths, project names, or usernames. MemStack does record which skills you use, but that record is written to a file on your own machine (~/.memstack/skill-usage.json) and is never transmitted to us.
  • Founding Member status: If you purchased during the Founding Member pricing period, we store this status with your account to ensure your lifetime access is preserved.

3. Network Calls the MemStack Software Makes

Skill search and indexing run entirely on your machine and never leave it. The calls below are the complete list of outbound network requests the MemStack software makes. They fall into two groups: those that happen on their own, and those that only happen because you asked for them.

Automatic: these happen at session start without you asking

  • License validation — a POST to admin.cwaffiliateinvestments.com, sending your license key, machine ID, your email if you provided one, and your environment (OS, Python version, MemStack version). That is the complete payload.
  • Pro bundle version check — a GET to admin.cwaffiliateinvestments.com. Pro licenses only, at most once every 24 hours. It sends your license key as an authorization token and nothing else, and asks only whether a newer skill bundle exists. This call is not prompted by any action you take.
  • Update check — a GET to pypi.org, at most once every 24 hours. It sends no payload at all and reads only the latest published version number, so the software can tell you an upgrade is available. This request goes to the Python Package Index, not to us.

Triggered by you: these never fire on their own

  • Pro skills download — a GET to admin.cwaffiliateinvestments.com when you run activate_license or refresh_pro_skills, and when the version check above finds a newer bundle. Sends your license key.
  • Referrals page — a POST to memstack.pro, only when you open that page in the local dashboard. Sends your license key so we can return your referral statistics. If you have no license key stored, no request is made.
  • Agent Runner — requests to api.anthropic.com, only while you are running an agent. This is the one call that carries your actual work: the task you wrote and the contents of the files the agents read. It uses your own Anthropic API key and goes to Anthropic, not to us. Nothing is sent unless you start an agent.
  • TokenStack compression proxy — requests to api.anthropic.com, only if you start the proxy yourself. It forwards your Claude Code traffic after compressing it, goes to Anthropic rather than to us, and is off unless you turn it on.

Outside of the Agent Runner and the TokenStack proxy, both of which you start deliberately and both of which talk to Anthropic rather than to us, no code, file contents, file paths, usernames, project names, or prompts are ever sent anywhere. The environment fields in license validation exist so that platform-specific breakage is visible to us in aggregate.

4. How We Use Your Data

  • Deliver and validate your license key
  • Send product updates and new skill announcements
  • Occasional marketing emails (you can unsubscribe at any time)
  • Respond to support requests

5. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data is only shared with service providers essential to operating MemStack™:

  • Stripe: Payment processing
  • SendGrid: Email delivery
  • Netlify: Website hosting

6. Cookies

The MemStack™ website uses minimal cookies. We do not use third-party tracking cookies or advertising pixels. Any cookies used are essential for site functionality (e.g., Stripe checkout).

7. Data Retention

We retain your email and license data for as long as your account is active or as needed to provide services. If you request deletion, we will remove your personal data within 30 days, except where required by law.

8. Your Rights

You have the right to:

  • Request a copy of the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data
  • Unsubscribe from marketing emails at any time

To exercise any of these rights, contact us using the information below.

9. Changes to This Policy

We may update this policy from time to time. Changes will be reflected in the “last updated” date at the top of this page. Continued use of MemStack™ after changes constitutes acceptance.

10. Contact

Questions about your privacy? Reach us at cwaffiliateinvestments.com/contact.

← Back to home