Privacy Policy

Contexara AI ("Contexara", "CTX", "we", "us", or "our") provides AI memory and context infrastructure that helps connected AI tools and applications retain and retrieve relevant information across interactions.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and the choices available to you when you use Contexara.

1. Information We Collect

Account Information

When you create or use a Contexara account, we may collect information such as your email address, authentication information, account identifiers, and information associated with your subscription or account.

Conversation and Connected-Tool Data

Contexara is designed to provide persistent memory and context. When you connect an AI tool, application, API, SDK, MCP integration, or other supported integration to Contexara, you choose what information is sent to us.

This may include conversation messages, prompts, responses, instructions, files or other content included in those interactions, together with associated timestamps and technical information.

Because this content is provided by you or through an integration you authorize, it may contain personal information about you or other people. You are responsible for ensuring that you have the necessary rights and permissions to provide information to Contexara.

Memory and Derived Information

To provide Contexara's memory and context functionality, we may create information derived from the content you provide. This may include relevant facts, preferences, summaries, relationships between information, and other representations used to retrieve and provide useful context in future interactions.

These derived representations are treated as part of your Contexara data.

Usage and Technical Information

We may collect information needed to operate, secure, and improve the service, including:

• API and integration usage;
• request and response metadata;
• timestamps;
• account and subscription information;
• approximate usage or token consumption;
• IP address and basic device or browser information;
• error and diagnostic information; and
• information relating to authentication, security, rate limits, and service performance.

Payment Information

If you purchase a paid Contexara plan, payment information is processed by our payment service provider. We may receive information such as transaction identifiers, subscription status, billing information, and payment status.

We do not store your full payment card number or other sensitive payment credentials ourselves.

Communications

If you contact us by email or through the service, we may collect the content of your communication and the contact information necessary to respond to you.

2. How We Use Your Information

We use information we collect to:

• provide and operate Contexara;
• capture, store, and retrieve information you choose to send to the service;
• provide persistent memory and context across interactions;
• maintain and manage your account;
• authenticate users and secure the service;
• enforce usage limits, quotas, and subscription terms;
• process payments and manage subscriptions;
• provide customer support;
• diagnose errors and service issues;
• detect, prevent, and respond to fraud, abuse, security incidents, or unauthorized use;
• comply with applicable laws and lawful requests; and
• improve the reliability, performance, and functionality of Contexara.

We may also create aggregated or de-identified information that does not reasonably identify you and use that information for legitimate business and service-improvement purposes.

3. How We Use Conversation Data

Conversation data is central to how Contexara works.

We process conversation and connected-tool data to provide the memory, context, retrieval, and related functionality that you request from the service.

We do not sell your conversation content or personal information.

We do not use your conversation content to train general-purpose AI models.

Your conversation data is processed to provide Contexara's services to you and to maintain the functionality, security, and reliability of the service.

We do not intentionally use your private conversation content for advertising.

4. Service Providers

Contexara relies on trusted service providers and infrastructure partners to operate the service.

Depending on the functionality you use, these providers may support areas such as:

• cloud hosting and storage;
• databases and infrastructure;
• account authentication;
• payment processing;
• communications and customer support;
• security and service monitoring; and
• AI or other processing services required to provide Contexara functionality.

These providers may process information on our behalf and are permitted to use it only as necessary to provide their services to us, comply with applicable law, or protect the security and integrity of their services.

We do not permit service providers to use your conversation content for their own advertising purposes.

5. Cookies and Analytics

We use PostHog, a third-party analytics provider, to understand how visitors use our website, such as which pages are viewed, how long a visit lasts, and general location and device information (such as country, browser, and device type).

We may also record a replay of how you interact with our website (mouse movement, clicks, and scrolling) to better understand usability issues. Sensitive input fields, such as passwords, are automatically excluded from these recordings and are never captured.

All of this, analytics and session recording alike, is off by default and only runs if you accept it via the cookie banner shown when you first visit our site. If you decline, or simply close the banner without choosing, no analytics cookie is set, no session is recorded, and no browsing data is sent to PostHog. You can change your choice at any time by clearing your browser's site data for contexara.com, which will show the banner again on your next visit.

Analytics data collected this way is used only to understand and improve Contexara's website and product, never sold, and never used for third-party advertising. It is separate from, and does not include, your conversation content or the memories Contexara stores for you, which are governed by the rest of this Privacy Policy.

6. Connected Services and Integrations

Contexara may allow you to connect third-party tools and applications.

When you choose to connect a third-party service, information may be exchanged between that service and Contexara as necessary to provide the integration you requested.

Your use of those third-party services is also governed by their own privacy policies and terms. Contexara is not responsible for the privacy practices of third-party services that you independently choose to use.

You can stop future data transmission from a connected integration by disconnecting it, revoking its authorization, or disabling the applicable API key or access mechanism.

7. Data Retention and Deletion

We retain information for as long as reasonably necessary to provide the services you have requested, maintain your account, meet our legal and contractual obligations, resolve disputes, maintain security, and enforce our agreements.

For active accounts, conversation data and derived memory may be retained so that Contexara can provide continuity over time.

If you delete your account, we will begin deleting your account data, memories, and stored conversation data from our active systems.

Some information may need to be retained for a limited period where required by law, necessary for legitimate security or fraud-prevention purposes, necessary to resolve disputes, or contained in routine backups that have not yet been overwritten.

When information is no longer required, we take reasonable steps to delete it or render it no longer identifiable.

8. Your Choices and Privacy Requests

You can control your Contexara data through available account settings and by disconnecting integrations or revoking API access.

Depending on applicable law, you may also have rights relating to your personal information, including rights to request access, correction, deletion, or other actions concerning your information.

To make a privacy request that cannot be completed through the service, contact us at howdy@contexara.com.

We may need to verify your identity before completing certain requests.

Where applicable law provides specific procedures, exceptions, or limitations for exercising a particular right, we will follow those requirements.

9. Your Rights Under Applicable Data Protection Law

Depending on where you live, you may have specific rights under applicable data protection law. This section describes the rights available under the data protection laws we most commonly receive questions about. Where a right described below is not required by the law that applies to you, we may still choose to honor it.

If the General Data Protection Regulation ("GDPR") applies to you

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction where the GDPR or an equivalent law applies, you have the right to:

• access the personal information we hold about you;
• request correction of inaccurate or incomplete personal information;
• request erasure of your personal information, subject to the retention exceptions described in Section 7;
• request that we restrict processing of your personal information in certain circumstances;
• receive a copy of certain personal information you provided to us in a structured, commonly used, machine-readable format ("data portability");
• object to processing carried out on the basis of our legitimate interests; and
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with your local data protection supervisory authority. We would appreciate the chance to address your concerns directly first, and you can reach us using the contact details in Section 16.

If the California Consumer Privacy Act ("CCPA"), as amended by the CPRA, applies to you

If you are a California resident, you have the right to:

• know what personal information we have collected about you and how it has been used and disclosed;
• request deletion of personal information we have collected from you, subject to the retention exceptions described in Section 7;
• request correction of inaccurate personal information;
• opt out of the "sale" or "sharing" of personal information, as those terms are defined under the CCPA; and
• not receive discriminatory treatment for exercising any of these rights.

We do not sell or share personal information for cross-context behavioral advertising, and we have not done so in the preceding twelve months. Because we do not sell or share personal information, no "Do Not Sell or Share My Personal Information" opt-out link is required.

We do not knowingly collect or process sensitive personal information for purposes that would trigger a right to limit its use under the CCPA beyond what is already described in this Privacy Policy.

If the Digital Personal Data Protection Act, 2023 ("DPDP Act") applies to you

Contexara AI is based in India, and the DPDP Act and its implementing rules apply to our processing of personal data. If you are located in India, or if the DPDP Act otherwise applies to you, you have the right, as a Data Principal, to:

• obtain a summary of the personal data we hold about you and the processing activities carried out with it;
• request correction, completion, or updating of your personal data;
• request erasure of your personal data that is no longer necessary for the purpose for which it was processed, subject to the retention exceptions described in Section 7;
• withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal;
• nominate another individual to exercise these rights on your behalf in the event of your death or incapacity; and
• access a readily available means of grievance redressal, as described below.

You are responsible for ensuring that any information you provide to us in connection with exercising these rights, including any correction request, is accurate.

Grievance Officer

In accordance with the DPDP Act, we have designated a Grievance Officer to address questions, complaints, or grievances relating to the processing of your personal data.

Prajwal Narayan
Grievance Officer, Contexara AI
Email: prajwal.narayan@contexara.com

We aim to acknowledge grievances promptly and to resolve them within the timelines required by applicable law. If you are not satisfied with our response, and where the DPDP Act applies to you, you may refer your grievance to the Data Protection Board of India.

Exercising these rights

To exercise any right described in this section, contact us at howdy@contexara.com or, for DPDP Act grievances, the Grievance Officer above. We will respond within the time required by applicable law. We may need to verify your identity before completing certain requests, and you may designate an authorized agent or nominee to make a request on your behalf where permitted by applicable law.

10. Security

We take reasonable technical and organizational measures designed to protect your information against unauthorized access, loss, misuse, alteration, or disclosure.

Access to Contexara systems is controlled and limited according to operational requirements. We use security controls appropriate to the nature of the information we process.

No internet service can guarantee absolute security. If we become aware of a security incident involving your personal information, we will take appropriate steps to investigate and respond to it and provide notifications where required by applicable law.

11. International Processing

Contexara AI is based in India. Contexara and its service providers may process or store information in countries other than the country in which you live, including India and other jurisdictions where our infrastructure and service providers operate.

Where personal information is transferred across borders, we take reasonable steps to ensure that the processing is conducted in accordance with applicable data protection requirements, including, where applicable, the DPDP Act's requirements for the transfer of personal data outside India.

12. Information About Other People

Contexara may process information about people other than the account holder when that information appears in conversation content or other data you choose to send to the service.

You should only provide information about another person when you have a lawful basis or appropriate permission to do so where required by applicable law.

13. Children's Privacy

Contexara is not intended to be used by children where such use is prohibited by applicable law.

We do not knowingly seek to collect personal information from children in violation of applicable legal requirements.

Under the DPDP Act, a child is an individual under 18 years of age. Where the DPDP Act applies, we do not knowingly process the personal data of a child without verifiable consent from a parent or lawful guardian, and we do not knowingly engage in processing that is likely to cause any detrimental effect on the wellbeing of a child.

If you believe that a child has provided personal information to us in circumstances where it should not have been collected, please contact us at howdy@contexara.com.

14. Legal Disclosures

We may access, preserve, or disclose information where reasonably necessary to:

• comply with applicable law, regulation, legal process, or a lawful government request;
• protect the rights, safety, security, or property of Contexara, our users, or others;
• investigate fraud, abuse, security incidents, or unauthorized activity;
• enforce our terms and agreements; or
• establish, exercise, or defend legal claims.

We may also disclose information in connection with a merger, acquisition, financing, restructuring, sale of assets, or other corporate transaction, subject to applicable law.

15. Changes to This Privacy Policy

We may update this Privacy Policy as Contexara evolves or as applicable legal requirements change.

We review this Privacy Policy at least once every twelve months, and more often where changes to the Service or applicable law require it.

When we make changes, we will update the "Last updated" date at the top of this policy. Where required, we will provide additional notice for material changes.

16. Contact Us

If you have questions about this Privacy Policy, want to make a privacy request, or have a concern about how your information is handled, contact us at:

Contexara AI
Email: howdy@contexara.com