Legal

Privacy Policy

Last updated: April 18, 2026

Contextra (“we”, “our”, or “us”) operates the Contextra platform and VS Code extension (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. Please read it carefully. If you disagree with its terms, please discontinue use of the Service.

1. Information We Collect

Account Data

When you register or authenticate, we collect your name, email address, and profile information provided through your GitHub account (via OAuth).

Usage Data

We collect information about how you use the Service, including prompts submitted, optimization results, token estimates, feature interactions, and timestamps.

Repository Metadata

When you connect a GitHub repository, we access and store structural metadata only — file names, directory structure, dependency relationships, and language types. We do not read, transmit, or store your source code.

Technical & Analytics Data

We automatically collect device information, IP addresses, browser type, operating system, pages visited, and performance metrics to maintain and improve the Service.

Cookies

We use cookies and similar tracking technologies for authentication, session management, and analytics. See our Cookie Policy for details.

2. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Process and optimize your prompts using AI providers
  • Personalize your experience and improve recommendations
  • Communicate with you about updates, security alerts, and support
  • Process payments and manage billing
  • Detect, prevent, and address technical issues or abuse
  • Comply with legal obligations
  • Analyze aggregate usage trends to improve the product

3. Third-Party Sharing

We do not sell your personal data. We may share information with:

  • AI providers (e.g., Anthropic, OpenAI) to process prompt optimization requests — only the prompt content and relevant metadata are transmitted
  • GitHub, as necessary to access repository metadata you authorize
  • Payment processors (Razorpay) to handle billing securely
  • Hosting and infrastructure providers (e.g., Vercel) who process data on our behalf under strict data processing agreements
  • Analytics providers for aggregate, anonymized usage statistics
  • Law enforcement or legal authorities where required by applicable law

4. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. Usage logs and prompt history are retained for up to 12 months unless you request earlier deletion. Repository metadata is deleted within 30 days of disconnecting a repository. You may request deletion of your account and associated data at any time.

5. Security

We implement industry-standard security measures including encryption in transit (TLS), encrypted storage, access controls, and regular security audits. While we strive to protect your data, no method of transmission over the Internet is 100% secure. We will notify you of any breach affecting your data as required by applicable law.

6. Your Rights (GDPR & CCPA)

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Object to or restrict processing of your data
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time where processing is based on consent
  • Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at privacy@contextra.xyz.

7. Children's Privacy

The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. International Transfers

Your data may be processed in countries other than your own. Where we transfer data outside the EEA or UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the “Last updated” date. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us: