Security

Your vault stays on your devices. The connector is optional, and it only holds scopes you have marked Shared.

On your machine

The vault file is encrypted. We do not have your passphrase or your device secret, and we cannot reset them.
Memories you have not shared never go to the connector.
Desktop connections to Claude, Cursor, and ChatGPT on the same Mac talk to the local app. They do not pass through the connector.

The connector is at https://mcp.northkeep.ai/mcp. The older northkeep-connector-server.vercel.app address is the same service.

Shared text is stored as ciphertext. The database does not hold a key that can read it. The key is rebuilt for each request from the credential the app presents and a secret that is not in that database.
The service decrypts a row only long enough to answer that request. A compromised running server is not protected against, and the privacy policy says so.
The service can see scope names, entry ids, counts, ciphertext sizes, and timestamps. It does not build embeddings from content, and the audit log does not store memory text.
An app signs in with OAuth. You approve it by typing a one-time pairing code from NorthKeep. Tokens are stored as hashes.
If an app names an https URL as its client id, the connector fetches that document. It allows port 443 only, refuses private and loopback addresses, and does not follow redirects. The address is checked before the connection. A name that changes address in between can still be reached. That limit is also in the project's known-limits notes.

Unshare a scope in Connect, then Cloud. That deletes the scope's rows on the connector. Your vault keeps its copy.
Remove the connector in the AI app so its token stops being sent.
Email [email protected] to ask us to delete the connector account.

The full policy is at northkeep.ai/privacy. Setup steps are on the connector page.