Privacy Policy

Last updated: February 2026

1. What We Collect

We collect only what is necessary to operate the Service: your email address (via GitHub OAuth), project context and memory data you explicitly push, and basic usage metadata (e.g., sync timestamps).

2. How We Use It

Your data is used solely to power Contxt — storing, syncing, and retrieving your context across sessions and devices. We do not sell your data or use it to train AI models.

3. Data Storage

Data is stored in Supabase (PostgreSQL + pgvector) on infrastructure hosted in the United States. We use industry-standard encryption in transit (TLS) and at rest.

4. Third-Party Services

We use the following third-party services to operate Contxt:

  • Supabase — database and authentication
  • GitHub — OAuth login
  • OpenAI — embedding generation for semantic search

Each service operates under its own privacy policy. We share only the minimum data required for each integration to function.

5. Your Rights

You can export or delete all your data at any time from the dashboard settings page. Deleting your account permanently removes all stored context and memories from our systems within 30 days.

6. Cookies

We use session cookies for authentication only. We do not use tracking or advertising cookies.

7. Changes to This Policy

We may update this policy as the Service evolves. We will notify you of material changes via the email associated with your account.

8. Contact

Privacy questions or requests? Contact us at hello@ghostsavvy.com.