Privacy Policy

1. Introduction

ContextOne, Inc. ("we," "our," or "us") operates ContextOne, a macOS desktop application for universal context capture and injection. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application and services.

By using ContextOne, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies, please do not use our services.

2. Information We Collect

Account Data

When you sign in with Google, we receive your email address, name, and profile picture from Google OAuth. This information is used to create and manage your account.

User Content

We store the content you create and capture using ContextOne, including:

• Notes and folders you create
• Text and images you capture from other applications
• Edits and modifications to your content

Usage Data

We collect information about how you use ContextOne, including:

• Feature usage and interactions
• AI token consumption for folder routing and context suggestions
• Application events and performance data

Team Data

If you use team features, we collect information about team spaces, memberships, and invitations to enable collaboration.

Billing Data

Payment processing is handled by Stripe. We store your Stripe customer ID and subscription status, but we do not store credit card numbers or other payment card details on our servers.

Analytics Data

We use PostHog to collect anonymous usage analytics, including app version, operating system, and feature interactions. This helps us improve ContextOne.

Accessibility APIs (macOS)

ContextOne requires macOS Accessibility permission to function. This permission enables us to:

• Detect text selections in other applications for content capture
• Monitor text input to detect @@ and @@@ triggers for context injection
• Insert content into text fields across applications

Important: We only process content when you explicitly trigger an action (e.g., pressing Cmd+Option+C to save, or typing @@ to inject). We do not log, store, or transmit what you type in other applications. Selection data is only sent to our servers when you choose to save it.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve ContextOne
• Process your content through AI for folder routing and context suggestions
• Manage your account and subscription
• Send transactional emails (team invitations, billing notifications)
• Analyze usage patterns to improve our product
• Respond to your requests and provide support
• Comply with legal obligations

4. Third-Party Services

We share your information with the following third-party service providers who help us operate ContextOne:

Service	Purpose	Data Shared
Supabase	Database, Authentication, Storage	All user data
Google Cloud	Backend Hosting	Request logs
Google Gemini	AI Analysis	Note content (for folder routing)
Stripe	Payment Processing	Email, subscription data
Resend	Transactional Emails	Email addresses
PostHog	Analytics	Usage events, device info

We do not sell your personal information to third parties.

5. Data Retention

• Active accounts: Your data is retained as long as your account is active.
• Frozen accounts: If your subscription expires, your account enters a frozen state. Data is retained for 90 days, then permanently deleted.
• Account deletion: When you delete your account, your data is removed within 30 days.

6. Your Rights

All Users

You have the right to:

• Access your data through the app
• Export your data in JSON format
• Delete your account and associated data

European Economic Area (EEA) Users — GDPR

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data
• Right to portability: Receive your data in a portable format
• Right to object: Object to processing of your data
• Right to withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at rr@contextone.app.

California Users — CCPA

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know: What personal information is collected
• Right to delete: Request deletion of your personal information
• Right to opt-out: Opt-out of the sale of personal information (note: we do not sell your data)
• Non-discrimination: We will not discriminate against you for exercising your rights

7. Security

We implement appropriate technical and organizational measures to protect your information, including:

• JWT-based authentication
• Row-level security on our database
• HTTPS/TLS encryption for all connections
• Secure token storage in macOS Keychain

While we strive to protect your information, no method of transmission over the internet or electronic storage is 100% secure.

8. Children's Privacy

ContextOne is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly.

9. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. If you are located outside the United States, your information will be transferred to the U.S. in accordance with applicable data protection laws.

For EEA users, we rely on Standard Contractual Clauses approved by the European Commission to ensure adequate protection for your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the application. Your continued use of ContextOne after changes are posted constitutes your acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: