Legal
Privacy Policy
1. Overview
This Privacy Policy describes how Contexta ("we", "us", "our") collects, uses, stores, and protects your personal data when you use our Service. We are committed to protecting your privacy and handling your data transparently.
2. Data We Collect
Account data: email address, display name, authentication provider, and the date and version of these terms you accepted. Document data: files you upload (PDF, DOCX), extracted text, vector embeddings, and metadata. Usage data: chat messages, API requests, timestamps, and interaction logs. Technical data: IP address, browser type, device information, and cookies.
3. How We Use Your Data
We use your data to: provide and maintain the Service; index your documents and generate AI responses; process your API requests; send service-related notifications; detect and prevent abuse or security issues; improve the Service based on aggregated, anonymized usage patterns. We do not sell your personal data to third parties.
4. Data Sharing & Third Parties
We share data only with: service providers who process data on our behalf (hosting, email delivery, payment processing); AI model providers (DeepSeek) for generating responses — your document content is sent as context for your queries; legal authorities when required by law or to protect our rights. All third-party processors are contractually bound to protect your data.
5. Data Retention
Account data is retained for the lifetime of your account plus 30 days after deletion. Document data and vector embeddings are deleted within 30 days of account deletion or document removal. API request logs are retained for 90 days. Aggregated, anonymized analytics may be retained indefinitely.
6. Your Rights (GDPR)
If you are in the European Economic Area, you have the right to: access your personal data; rectify inaccurate data; request deletion of your data ("right to be forgotten"); restrict or object to processing; data portability — export your data in a machine-readable format; withdraw consent at any time. To exercise these rights, use the data export and account deletion features in your Profile settings, or contact us directly.
7. Cookies
We use essential cookies and local storage to maintain your session, remember your preferences (such as language), and provide core functionality. We do not use tracking cookies or third-party advertising cookies. You can control cookies through your browser settings, but disabling them may affect Service functionality.
8. Security
We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. However, no system is completely secure, and we cannot guarantee absolute security of your data.
9. International Data Transfers
Your data may be processed and stored in countries outside your residence. When data is transferred internationally, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.
10. Children's Privacy
The Service is not intended for users under 16 years of age. Registration requires you to declare that you are at least 16, and it is protected by a bot check; we do not collect a date of birth or any other age data beyond that declaration. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us through the Service and we will delete their account and data.
11. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or in-app notification at least 14 days before taking effect.
12. Contact
For privacy-related inquiries or to exercise your data rights, contact us through the Service.