contextflow

Privacy Policy

Last updated: June 13, 2026

This Privacy Policy explains how contextflow (“contextflow”, “we”, “us”) collects, uses, and protects information when you use our website and service (the “Service”). We are committed to handling your data responsibly and only collecting what we need to run the Service.

1. Information we collect

  • Account information. When you sign up with email, we store your email address and a securely hashed password. If you sign in with Google, we receive your verified email address from Google; we never receive or store your Google password.
  • Content you create. The projects and context presets you save (company summaries, rules, notes, and similar text) are stored so we can provide the Service.
  • Billing information. Payments are processed by our payment provider (Dodo Payments). We do not store your full card details; we receive only a subscription status and identifiers needed to manage your plan.
  • Technical data. Basic logs (such as IP address and request metadata) generated automatically by our hosting provider for security and reliability.

2. How we use your information

  • To provide, maintain, and improve the Service.
  • To authenticate you and keep your account secure.
  • To process subscriptions and payments.
  • To respond to support requests and communicate important service notices.
  • To comply with legal obligations and prevent abuse.

3. Cookies

We use a single, strictly necessary cookie to keep you signed in (a secure, HTTP-only session cookie) and a short-lived cookie to protect the Google sign-in flow. We do not use advertising or third-party tracking cookies.

4. How we share information

We do not sell your personal data. We share information only with service providers that help us operate the Service — our hosting and database providers and our payment processor — and only to the extent necessary. We may also disclose information if required by law.

5. Data retention

We keep your account and content for as long as your account is active. If you delete a project or your account, the associated data is removed from our active systems. Backups and legally required records may persist for a limited period.

6. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at contact@shanow.com.

7. Security

We use industry-standard measures including encrypted connections (HTTPS), hashed passwords, and access controls. No method of transmission or storage is completely secure, but we work to protect your information.

8. International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards for such transfers.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

10. Changes to this policy

We may update this Policy from time to time. Material changes will be reflected by the “Last updated” date above and, where appropriate, additional notice.

11. Contact

Questions about this Policy? Email us at contact@shanow.com.