1. Introduction
SaveContext ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our Service.
2. Information We Collect
Account Information
When you create an account, we collect:
- Email address
- Name (from OAuth provider)
- Profile image (from OAuth provider)
- OAuth provider identifiers
Customer Data
Data you store using the Service:
- Context items (tasks, decisions, progress notes)
- Session information and checkpoints
- Project paths and metadata
- Memory items and tasks
Usage Data
We automatically collect:
- API request logs and timestamps
- Service usage metrics
- Error logs for debugging
- IP addresses for security purposes
3. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Process payments and manage subscriptions
- Send important service notifications
- Respond to support requests
- Improve and optimize the Service
- Detect and prevent fraud or abuse
- Comply with legal obligations
4. Data Sharing
We do not sell your personal data. We may share data with:
- Service providers: AWS (hosting, database), Stripe (payments), authentication providers
- Legal requirements: When required by law or to protect our rights
- Business transfers: In connection with a merger, acquisition, or sale of assets
5. Data Security
We implement industry-standard security measures including:
- Encryption at rest and in transit (TLS/SSL)
- Database encryption (AWS RDS)
- Secure authentication via OAuth providers
- Regular security audits and monitoring
- Access controls and audit logging
While we strive to protect your data, no system is completely secure. You are responsible for maintaining the security of your account credentials.
6. Data Retention
We retain your data as follows:
- Customer Data: Retained indefinitely while your account is active
- Account Information: Retained until account deletion
- Usage Logs: Retained for 90 days
- Deleted Accounts: Data deleted within 30 days of account closure
7. Your Rights
Depending on your location, you may have the right to:
- Access: Request a copy of your personal data
- Correction: Request correction of inaccurate data
- Deletion: Request deletion of your data
- Portability: Request your data in a portable format
- Opt-out: Unsubscribe from marketing communications
To exercise these rights, contact us at privacy@savecontext.dev
8. International Transfers
Your data may be transferred to and processed in the United States where our servers are located. By using the Service, you consent to this transfer. We ensure appropriate safeguards are in place for international data transfers.
9. Cookies and Tracking
We use essential cookies for:
- Authentication and session management
- Security and fraud prevention
- Service functionality
We do not use third-party advertising or tracking cookies.
10. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.
11. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes via email or through the Service. The "Last updated" date at the top indicates when this policy was last revised.