Last updated: 2026-06-17
These terms cover the Mandate Companion and Receipted Memory browser extensions.
By installing or using either extension, you agree to these terms and to the privacy policy in privacy-policy.md. If you do not agree, do not install or use the extensions.
Mandate Companion records local authorization decisions for browser-agent actions, routes supported actions through an executor gate, and produces local receipts and redacted exports for offline review.
Receipted Memory stores user-defined memory fields in a local encrypted vault, lets the user choose which fields to release into Claude or ChatGPT prompts, and produces signed disclosure receipts and compliance exports for offline review.
- They do not provide a browser sandbox, data-loss-prevention system, confidentiality guarantee, or provider-blind inference.
- They do not prevent websites, model providers, browser extensions, browser profiles, operating systems, or malware from observing data they can already access.
- They do not provide Flow Memory server backup, key escrow, account recovery, or hosted verification.
- They do not make verifier output a legal conclusion, compliance certification, investment recommendation, financial recommendation, medical recommendation, tax recommendation, or security certification.
You are responsible for:
- Choosing what pages, providers, prompts, mandates, memory fields, and exports to use.
- Reviewing page content and provider terms before sending data to a website or model provider.
- Keeping passphrases, recovery sheets, provider API keys, browser profiles, exports, and local backups under your control.
- Verifying exports before sharing them with another person or system.
- Complying with laws, contracts, workplace rules, provider policies, and website terms that apply to your use.
If you use a BYO OpenAI or Anthropic key with Mandate Companion, the selected provider receives the request body needed for that run, which can include page snapshots, goals, mandate text, proposed actions, and prior step results. Your provider account is responsible for provider charges and provider-side handling.
If you use Receipted Memory with Claude or ChatGPT, selected field values are inserted into the composer. The provider can see those values when you send the prepared prompt.
A website can receive normal browser interactions or form content after you authorize an action or manually send a prompt. These terms do not change any website or provider policy.
The extensions rely on local browser storage and local cryptographic keys. Flow Memory does not hold a server copy. If local material is deleted, corrupted, or lost, it may not be recoverable.
A recovery sheet is user-held backup material, not a Flow Memory recovery service. Do not send recovery codes, passphrases, provider keys, or unredacted exports to support.
Exports and verifier output are evidence aids. A valid signature means the checked bytes and key relationship verified under the verifier rules. It does not prove that a release was appropriate, that a provider kept data confidential, that every relevant event was captured, that local history is complete after wipe or tail truncation, that timestamps are trusted without an external anchor, or that no surrounding system was compromised. Verifier distribution details are documented in docs/VERIFIER_DISTRIBUTION.md; coverage gaps and non-claims are documented in docs/COVERAGE_GAPS.md.
The shipped extensions should not contain analytics, advertising SDKs, crash reporters, or third-party telemetry. If you modify the source, install an unofficial build, or load a package from another distributor, you are responsible for reviewing that build.
The extensions are provided as-is and as-available. To the maximum extent permitted by law, Flow Memory disclaims warranties of merchantability, fitness for a particular purpose, non-infringement, uninterrupted operation, and error-free operation.
To the maximum extent permitted by law, Flow Memory will not be liable for indirect, incidental, consequential, special, exemplary, or punitive damages, or for lost profits, lost data, provider charges, business interruption, regulatory outcomes, or claims arising from data you release to a provider, website, export recipient, or local environment.
We may update, rename, discontinue, or remove features. You may stop using the extensions at any time by exporting anything you need, removing the extension, and deleting local browser data if desired.
Use the support path in SUPPORT.md. Support can help interpret extension behavior and logs you choose to provide, but support cannot recover local secrets or provide legal, investment, financial, tax, medical, or security advice.