Privacy Policy

1. Who we are

Contexory (“Contexory,” “we,” “us”) provides a collaborative platform for building and maintaining AI agent skills. This policy applies to everyone who visits contexory.com or uses the Contexory product.

2. What we collect

Account information

When you create an account we collect your email address and display name. If you sign in with Google we receive your email, name, and the OAuth scopes you approve. We never receive your Google password.

Workspace content

Skills you author — including the document body, frontmatter, allowed tools, scripts, references, comments, and version history — are stored in your workspace. Members of the same workspace can read and edit this content according to their role.

Usage data

We log each AI request (skill draft, suggestion, chat turn) for billing and quota enforcement: the workspace, the user, the timestamp, the model used, and the token count. We log integration events (GitHub pushes, syncs, reviews) for the activity feed. We log standard web-server data (IP address, user-agent, timestamps) for security and debugging.

Payment data

Card details are collected and stored by Stripe, not by Contexory. We receive and store a Stripe customer ID, subscription ID, plan, and billing-period information so we can apply seat counts and AI usage allowances to your workspace.

Integration data

If you connect a third-party integration (currently GitHub) we store the installation ID, repository selection, and any configuration you provide. We do not store your personal GitHub access token; instead we use a GitHub App installation token that scopes access to the repositories you explicitly approved.

3. How we use your information

• To provide and operate the Contexory service.
• To enforce billing, seat caps, and per-seat AI usage allowances.
• To sync your skills to the integrations you connect.
• To send you account, billing, and security notices.
• To detect, prevent, and respond to abuse or fraud.
• To improve the product, in aggregate, without identifying you.

4. AI processing

When you use AI features — skill drafting, scoping, suggestions, chat — we send the relevant prompt and document context to our AI provider. We use OpenAI for large language model calls and Tavily for optional web-search grounding. These providers process content under their own terms; we do not permit them to train models on your content.

5. Subprocessors

We rely on the following services to run Contexory. Each handles a narrow slice of the product and is bound by its own privacy obligations.

• Supabase — authentication, database, and realtime collaboration. supabase.com/privacy
• Stripe — payment processing and subscription billing. stripe.com/privacy
• OpenAI — AI model inference for skill authoring and assistance. openai.com/policies/privacy-policy
• Tavily — web-search grounding for the scoping assistant (optional; can be disabled). tavily.com/privacy
• LangSmith — opt-in telemetry for AI traces. Disabled by default. langchain.com/legal/privacy-policy
• GitHub — repository sync via a GitHub App installation. GitHub privacy statement

6. Sharing

We do not sell your data and we do not share it for advertising. We share data only with the subprocessors above, with law enforcement when legally required, and with workspace members you have explicitly invited.

7. Retention

Workspace content is retained for the life of your workspace. AI call logs and integration events are retained for at least 13 months to support billing reconciliation and audit. If you delete your account, we delete or anonymize personal data within 30 days, except where we are required to retain it for legal or accounting reasons.

8. Your rights

You can, at any time:

• Access the personal data we hold about you.
• Export your workspace content.
• Correct inaccurate data through your account settings.
• Delete your account.
• Object to or restrict certain processing.

To exercise any of these rights, email privacy@contexory.com.

9. International transfers

Contexory operates from the United States. Some of our subprocessors operate globally. By using the service you consent to the transfer of your information to the United States and other jurisdictions where our subprocessors operate, subject to appropriate safeguards.

10. Children

Contexory is not intended for use by anyone under 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we do, we update the Effective date above. If the change is material, we will give you notice in-product or by email before it takes effect.

12. Contact

Questions or concerns? Email privacy@contexory.com.