1. Introduction
Contextier ("we", "us", "our") operates the contextier.com website and the Contextier platform. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website, platform, APIs, SDKs, and related services (collectively, the "Service").
By using the Service, you agree to the collection and use of information as described in this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Name and email address
- Organization name
- Password (stored as a salted hash, never in plain text)
2.2 Usage Data
We automatically collect information about how you use the Service, including:
- API request metadata (timestamps, endpoints, response codes)
- Token usage and cost metrics
- Feature usage and interaction patterns
- Device type, browser, and IP address
2.3 Platform Data
When you use the Contextier platform, you may submit:
- Documents, text, and other content for AI processing
- Agent configurations, prompts, and workflow definitions
- Third-party AI provider API keys (stored encrypted at rest)
2.4 Contact Information
When you contact us through our website or email, we collect the information you provide, such as your name, email address, and message content.
3. How We Use Your Information
We use collected information to:
- Provide the Service - process your requests, execute workflows, manage memory, and enforce governance policies
- Maintain and improve the Service - monitor performance, fix issues, and develop new features
- Communicate with you - send service notifications, respond to inquiries, and provide support
- Ensure security - detect and prevent fraud, abuse, and unauthorized access
- Comply with legal obligations - meet regulatory requirements and respond to legal requests
4. Data Isolation
Contextier implements workspace-based data isolation. Each customer's data - including documents, conversations, memory, and configurations - is logically separated at the platform level. Your data is not accessible to other tenants. All database queries are scoped to your workspace, and cross-workspace access is architecturally restricted.
5. What We Do Not Do
- We do not sell your personal information to third parties
- We do not use your platform data to train AI models
- We do not share your data with other customers
- We do not access your platform data except as required to provide the Service, maintain security, or comply with law
6. Third-Party AI Providers
When you use the Service to send requests to third-party AI providers (such as OpenAI, Anthropic, Google, and others), your request data is transmitted to those providers to generate responses. Each provider has its own privacy policy and data handling practices. Contextier acts as an intermediary and applies your governance policies before forwarding requests.
Contextier's governance engine can detect and redact personally identifiable information (PII) before it reaches any third-party provider, if you enable this feature.
7. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption of data in transit (TLS) and at rest
- Salted password hashing (BCrypt)
- Encrypted storage of third-party API keys (AES)
- Role-based access control (RBAC)
- Audit logging of all platform actions
- Regular security reviews
No method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.
8. Data Retention
We retain your data for as long as your account is active or as needed to provide the Service. If you terminate your account, you may request deletion of your data. We will delete your data within 30 days of a verified deletion request, except where retention is required by law.
Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and service improvement.
9. Cookies and Analytics
Our website uses:
- Essential cookies - required for the website to function (session management, preferences)
- Analytics - we use Vercel Analytics to understand website usage. This collects anonymous, aggregated data about page views and does not use cookies for tracking
We do not use advertising cookies or third-party tracking scripts.
10. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data we hold
- Correct inaccurate or incomplete data
- Delete your personal data
- Export your data in a portable format
- Restrict processing of your data
- Object to processing of your data
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
11. International Data Transfers
Your data may be processed in countries other than your country of residence. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.
12. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete it.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website with a revised "Last updated" date. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
14. Contact
For questions about this Privacy Policy or your data, contact us at:
- Email: [email protected]
- Website: contextier.com/contact