Legal
Privacy Policy
Last updated: 7 August 2026
ContextIQ helps teams understand the context behind their work by connecting the tools where that work already happens. Because that means handling data you care about, this policy explains what we collect, how we use it, where it lives, and the control you keep over it. It is written to be read, not just filed.
Who we are
ContextIQ (“ContextIQ”, “we”, “our”, or “us”) provides an AI knowledge layer that brings scattered decisions, conversations, and updates from your connected tools into one place. ContextIQ is operated by ContextIQ Ltd, a company registered in England and Wales under company number 17259386.
For the personal data of the people who use your workspace, you (our customer) are generally the data controller and ContextIQ acts as your data processor. For account, billing, and website data, ContextIQ is the controller. If you have any question about this policy, contact us at hi@contextiq.co.
Information we collect
We collect the following categories of information:
- Account and workspace details — your name, email address, workspace name, team membership, and the settings you choose.
- Billing information — plan, subscription status, and billing contact. Card payments are handled by our payment provider; we do not store full card numbers.
- Content from the tools you connect — when you connect a source such as Slack, Gmail, Google Drive, GitHub, or Notion, we access the messages, emails, files, issues, and pages you authorise so we can build your team’s context.
- Derived context — the vector embeddings, summaries, links, and metadata we generate from that content. We do not keep copies of your original source messages or files (see “How your content is processed” below).
- Usage and device data — log data, feature usage, approximate location from IP, browser and device information, and cookie identifiers, used to run and improve the service.
How your content is processed
When you connect a tool, ContextIQ reads the content you authorise, converts it into vector embeddings and structured context, and stores those representations together with metadata (such as source, author, and timestamp). We are designed so that the original raw content is not retained in our database after processing — we keep the derived context needed to answer your questions, not a second copy of your source material.
Disconnecting a source, or deleting an item, removes the associated context. This design keeps your footprint with us small and makes deletion meaningful.
How we use your information
We use the information described above to:
- Provide the service: retrieval, summaries, timelines, connections, and answers across your connected tools.
- Operate, secure, maintain, and improve ContextIQ and troubleshoot issues.
- Process your subscription, and send service, security, and support communications.
- Detect, prevent, and address fraud, abuse, and violations of our terms.
- Comply with legal obligations.
We do not sell your data. We do not use the content you connect to train public or third-party foundation models, and we do not share it for advertising.
AI processing and sub-processors
To generate embeddings, summaries, and answers, ContextIQ sends the relevant content to trusted infrastructure and AI model providers acting as our sub-processors. Under our agreements with our AI providers, your content is processed only to return results to you and is not used to train their models. Our key sub-processors include:
- Supabase — database and storage, hosted in the European Union.
- Railway and Vercel — application and website hosting, and basic product analytics.
- Nango — secure authentication to the tools you connect.
- AI model providers (such as OpenAI and Anthropic) — embeddings and answer generation, under no-training terms.
- Google Analytics — aggregate website usage, subject to your cookie choices.
We maintain the current list of sub-processors and will make it available on request. We require each sub-processor to protect your data to a standard consistent with this policy.
Legal bases for processing
Where UK and EU data protection law applies, we rely on the following legal bases:
- Performance of a contract — to provide the service you sign up for.
- Legitimate interests — to secure, maintain, and improve the service, provided your rights do not override those interests.
- Consent — for non-essential cookies and any optional communications, which you can withdraw at any time.
- Legal obligation — where we are required to process data by law.
Where your data is stored and transfers
Your workspace data is stored within the European Union. Some of our sub-processors may process limited data (for example, support or AI processing) outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
Data retention
We retain account and derived context data for as long as your workspace is active. When you disconnect a source, delete content, or close your account, the associated context is deleted from our live systems, with residual copies removed from backups on our routine backup cycle. We may retain limited information where required for legal, tax, or security reasons.
Your rights
Depending on your location, you have rights over your personal data, including the rights to access, correct, delete, export, restrict, or object to processing, and to withdraw consent. You can exercise many of these directly through your account settings, or by contacting us at hi@contextiq.co.
If you are in the UK or the EEA and believe we have not handled your data properly, you may lodge a complaint with your local supervisory authority (in the UK, the Information Commissioner’s Office).
Security
We protect your data with encryption in transit and at rest, access controls, EU-based hosting, and the minimised footprint described above. No system is perfectly secure, but we work to protect your data with appropriate technical and organisational measures and to notify you of any breach as required by law.
Cookies and analytics
We use essential cookies to run the service and, with your consent, analytics cookies to understand how the website and product are used. You can manage non-essential cookies through the consent banner and your browser settings.
Children
ContextIQ is a business tool and is not directed to children. We do not knowingly collect personal data from anyone under the age of 16.
Changes to this policy
We may update this policy as the product and our practices evolve. If we make material changes, we will update the date above and, where appropriate, notify you through the service or by email.
Contact us
For any privacy question or request, contact us at hi@contextiq.co.
Questions about this document? Email hi@contextiq.co.