Privacy Policy

Privacy Policy

Contextur, Inc.

Effective Date: April 7, 2026

1. Introduction

Contextur, Inc. (“Contextur,” “we,” “us”) operates the Contextur desktop application. This policy explains what information we collect, how we use it, and your rights. By using Contextur, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

Account information

When you create an account, we collect your email address. Anonymous sessions are created automatically without requiring an email.

Usage data (PostHog)

We collect pseudonymous product analytics including: app version, environment, event names (for example, “conversion_succeeded”), aggregate counts of items converted (by type: local files, Google Drive files, OneDrive files, email threads, emails, web sources, ebooks), subscription plan type, and a pseudonymous user identifier. The pseudonymous identifier is a randomly generated ID that is not linked to your name, email address, or other directly identifying information. A pseudonymous identifier is assigned in all sessions, including anonymous sessions that do not require an account.

We do not collect file names, file contents, email subjects, or email body content. IP address collection is explicitly disabled in our analytics configuration.

You may opt out of analytics collection at any time by contacting [email protected].

Error reporting (Sentry)

We collect error reports including error messages, stack traces, and basic app context (version, environment, area of the app where the error occurred). We do not intentionally include file names or user content in error reports. sendDefaultPii is set to false. In the event that user content is inadvertently captured in an error report, it is not accessed, used, or retained by Contextur for any purpose beyond diagnosing the error.

You may opt out of error reporting at any time by contacting [email protected].

Payment information (Stripe)

Payments are processed by Stripe. We do not store credit card numbers or payment details. We store your Stripe customer ID and subscription status in our database.

Subscription and trial data (Supabase)

We store your email address (if provided), subscription status, and trial conversion count in our database hosted on Supabase.

3. Information We Do NOT Collect

• File contents, file names, or file paths
• Email subjects, email bodies, or email metadata beyond what you explicitly choose to convert
• The content of any documents you process through Contextur

All file processing happens locally on your device. No document content is transmitted to our servers. The foregoing reflects our intentional design and configuration; we do not design our systems to collect this information.

Note: As described in Section 2, error reporting tools may in rare circumstances inadvertently capture fragments of contextual data. Such data is not intentionally collected and is not used for any purpose beyond error diagnosis.

4. How We Use Your Information

• To provide and improve the Contextur application
• To manage your account and subscription
• To send transactional emails (account verification, billing receipts)
• To diagnose errors and improve stability
• To understand aggregate product usage patterns
• For other purposes consistent with this policy or disclosed to you at the time of collection

We will not use your personal data for purposes materially different from those described above without providing you prior notice and, where required by applicable law, obtaining your consent.

5. Third-Party Services

We use the following third-party services:

• Supabase (supabase.com) — authentication and database hosting
• Stripe (stripe.com) — payment processing and billing receipts
• PostHog (posthog.com) — product analytics
• Sentry (sentry.io) — error monitoring
• SendGrid — transactional email delivery (account verification, sign in)
• Google OAuth — optional Google Drive and Gmail integration
• Microsoft OAuth — optional OneDrive and Outlook integration

Each service has its own privacy policy governing their data practices. We are not responsible for the privacy practices of third-party services.

International Data Transfers

Some of our third-party service providers may process your data outside of your country of residence, including in the United States. When personal data is transferred internationally, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission or other legally recognized transfer mechanisms.

6. Google and Microsoft OAuth Data

If you connect Google Drive, Gmail, OneDrive, or Outlook, we request access so the application can read the content you choose to work with. Sensitive sign-in data is handled with the protections below.

Local storage and encryption

OAuth tokens are stored only on your device and are encrypted at rest. We do not store those tokens on Contextur servers, except as described below for Google refresh token handling.

Google credentials on our infrastructure

Google refresh tokens are transmitted from your device to a Contextur-operated server component solely so we can refresh access tokens with Google on your behalf. That is the only situation in which Google credentials pass through our infrastructure. These tokens are processed in memory and are not persistently stored on Contextur servers. No file contents and no email content are part of that process.

Google Drive and Gmail content

When you use those integrations, content is fetched directly from Google’s APIs to your device. It does not pass through Contextur servers.

Microsoft OneDrive and Outlook

Microsoft data is handled entirely on your device. Microsoft credentials and Microsoft content do not pass through Contextur infrastructure.

Read-only access to Google Drive

We request read-only permission for Google Drive. Contextur does not create, modify, or delete your files or emails through Google access.

User-initiated access

We access content only when you initiate that access in the application—for example, by selecting or navigating to specific items you have chosen to open or convert.

Google API Services User Data Policy

Contextur’s use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data Retention

We retain your account data for as long as your account is active. We reserve the right to delete or anonymize account data that has been inactive for an extended period, with reasonable notice where required by applicable law. You may request deletion of your account and associated data at any time by contacting [email protected]. Analytics data in PostHog is retained in accordance with PostHog’s data retention policies, available at posthog.com/privacy. Error reporting data in Sentry is retained in accordance with Sentry’s data retention policies, available at sentry.io/privacy.

8. Your Rights

Depending on your location, you may have rights under applicable privacy laws, including the right to access, correct, delete, port, or restrict the processing of your personal data. To exercise these rights, contact [email protected]. We will respond to verifiable requests within the timeframe required by applicable law.

For California Residents

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale or sharing of your personal information. Contextur does not sell your personal information or share it for cross-context behavioral advertising purposes. We will respond to verifiable consumer requests within 45 days of receipt. We may extend this period by an additional 45 days where reasonably necessary, with prior notice. To submit a request, contact [email protected].

For Users in the European Economic Area, United Kingdom, or Switzerland

If you are located in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR) or equivalent laws, including the right to lodge a complaint with your local supervisory authority. Our legal bases for processing your personal data include: (a) contractual necessity, to provide the Contextur application and manage your account; (b) legitimate interests, to improve our services, diagnose errors, and understand aggregate usage patterns; and (c) your consent, where you have provided it (for example, by connecting third-party integrations). You may withdraw consent at any time by disconnecting integrations or contacting us. We will respond to rights requests within one calendar month of receipt. Where necessary due to complexity or volume, we may extend this period by up to two additional months, with prior notice.

To find your local supervisory authority, visit the European Data Protection Board’s member directory at edpb.europa.eu/about-edpb/about-edpb/members_en.

9. Children

Contextur is not directed at children under 13 (or under 16 in jurisdictions where a higher age of consent applies). We do not knowingly collect personal information from children under these ages. If we learn that we have collected personal information from a child under the applicable age, we will take steps to delete that information promptly.

10. Changes to This Policy

We may update this policy from time to time. We will notify users of material changes through the application or on our website. Your continued use of Contextur following notice of material changes constitutes your acceptance of the revised policy.

11. Contact

Contextur, Inc. is the data controller for personal data collected through the Contextur application. If you have questions about this Privacy Policy or our data practices, please contact us:

Contextur, Inc.

Email: [email protected]

Website: https://contextur.com