1. Who we are

ContextuAI LLC ("ContextuAI", "we", "us", or "our") is a limited liability company organized under the laws of the State of North Carolina, USA, and based in Charlotte, North Carolina. We operate the website at contextuai.com and publish the ContextuAI Solo and ContextuAI Enterprise software.

For personal information collected through this website, ContextuAI LLC is the data controller. For personal information processed inside a self-hosted Enterprise deployment, see Section 5 — in that case you, not us, are the controller.

2. What this policy covers

This policy covers three distinct things, and the differences matter:

• This website (contextuai.com) — the only place where we routinely receive personal information about you.
• ContextuAI Solo — the desktop application. It runs locally on your device and does not transmit your content to us.
• ContextuAI Enterprise — the self-hosted platform. It runs on infrastructure you operate and control.

This policy does not cover third-party services you choose to connect to our software — for example a cloud AI model provider, a database you connect through a connector, or a social channel you publish to. Those services handle your data under their own privacy policies and terms.

3. Information the website collects

3.1 Information you give us

The website has one form: the contact form. When you submit it, we receive and store the fields you filled in:

Along with your submission we record a timestamp and a note that the source was the marketing site. Submissions are stored in a Google Cloud Firestore database and forwarded by email to our internal contact address. Anything you voluntarily include in the free-text message field is also stored — please don't put sensitive personal information there.

3.2 Information collected automatically

The website is a static site hosted on Firebase Hosting. Like nearly all web servers, the hosting provider generates request logs that may include your IP address, user-agent string, requested URL, referrer, and timestamp. These are standard server operations and security logs, generated and retained by Google as our hosting provider.

3.3 What we deliberately do not collect

We want to be specific here, because "we value your privacy" is meaningless without detail. This website has:

• No analytics. There is no Google Analytics, no Plausible, no PostHog, no Mixpanel, no Segment — no analytics or product telemetry script of any kind.
• No advertising or tracking pixels. No Meta pixel, no LinkedIn Insight Tag, no Google Ads remarketing tag, no conversion tracking.
• No third-party tracking cookies. See Section 9.
• No user accounts. There is nothing to sign up for on this website, so there is no profile, password, or account history.
• No sale or sharing of personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law.

4. ContextuAI Solo

ContextuAI Solo is a desktop application that you download and run on your own computer. It is designed so that your work stays on your machine.

4.1 Data stays on your device

Your conversations, documents, knowledge base contents and embeddings, memory entries, agent and crew configurations, automation history, workspace projects, and any credentials you enter for connectors are stored in local files and a local database on your computer. They are not transmitted to ContextuAI, and we operate no service that receives them. When you run a local AI model, inference happens on your own hardware and your prompts never leave the device.

4.2 Connections you choose to make

Solo can connect to outside services when you configure it to. When you do, data leaves your machine — not to us, but to the provider you chose:

• Cloud AI model providers. If you supply an API key for a hosted model, the prompts and context you send to that model are transmitted to that provider and handled under their privacy policy and terms.
• Connectors. If you connect a database, REST API, MCP server, or web search tool, Solo communicates directly with that system using the credentials you supplied. Those credentials are stored locally.
• Distribution channels. If you publish output to a channel such as Telegram, Discord, LinkedIn, or X, that content goes to the channel provider under their terms.
• Model downloads and updates. Downloading a local model or checking for an application update contacts the relevant distribution host (for example Hugging Face or the release host), which will see your IP address as any download does.

These connections are entirely under your control, and Solo is fully usable with local models and no outbound connections at all.

4.3 Verify it yourself

Solo's source code is published at github.com/contextuai/contextuai-solo. You do not have to take these claims on faith — you can read the code, or watch the application's network traffic, and confirm them.

5. ContextuAI Enterprise

ContextuAI Enterprise is self-hosted software. You deploy and operate it on your own infrastructure, and your data lives in databases you control.

For personal information processed within your Enterprise deployment — your employees' accounts, your documents, your business data — you are the data controller and are responsible for your own privacy notices, lawful basis, retention, and data subject requests. ContextuAI does not have access to your deployment, its databases, or its contents, and we do not receive that data.

Where we provide support, professional services, or a hosted arrangement under a separate written agreement, that agreement (including any data processing addendum) governs how we handle any customer data we are exposed to, and takes precedence over this policy.

6. How we use information

We use the limited personal information we receive only to:

• Respond to your inquiry, demo request, or partnership question;
• Provide support and follow up on a conversation you started;
• Operate, secure, and troubleshoot the website;
• Comply with legal obligations and enforce our Terms of Service.

We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects. We do not send marketing email to addresses submitted through the contact form unless you ask us to.

7. Legal bases (EEA/UK)

If you are in the European Economic Area or the United Kingdom, we process your personal information on these legal bases under the GDPR:

• Consent (Art. 6(1)(a)) — you chose to submit the contact form and send us your details.
• Legitimate interests (Art. 6(1)(f)) — responding to inquiries, keeping the website secure and available, and preventing abuse. We have assessed that these interests are not overridden by your rights, given how little data is involved.
• Legal obligation (Art. 6(1)(c)) — where retention or disclosure is required by law.

8. Sharing and service providers

We do not sell, rent, or trade personal information. We share it only with the service providers required to run the website and reply to you, and only to the extent necessary:

We may also disclose information if required by law, valid legal process, or to protect the rights, safety, and property of ContextuAI, our users, or the public. If ContextuAI is involved in a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction; we will provide notice before your information becomes subject to a materially different privacy policy.

9. Cookies and local storage

This website sets no cookies. It uses your browser's local storage for exactly one thing: remembering whether you chose light or dark mode, so the site doesn't flash the wrong theme on your next visit. That value is a single preference (theme), it stays in your browser, and it is never transmitted to us or to anyone else.

You can clear it at any time through your browser's "clear site data" controls, with no effect other than resetting the theme to the default.

10. Data retention

• Contact form submissions — retained for as long as needed to handle your inquiry and maintain a record of our correspondence, and in any case no longer than 24 months after our last exchange, unless a longer period is required by law or the conversation became an ongoing business relationship. You may ask us to delete them sooner.
• Server logs — retained by our hosting provider according to their standard log retention schedule, typically a matter of days to weeks.
• Theme preference — stays in your browser until you clear it.

11. Security

Traffic to the website is encrypted in transit with HTTPS/TLS. Contact form submissions are stored in a Firestore database whose security rules deny all direct client access — only our server-side function can read or write them, and access to the underlying Google Cloud project is limited to authorized personnel.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. We encourage you not to send sensitive personal information — health, financial, or government identifiers — through the contact form.

12. Your privacy rights

Depending on where you live, you may have some or all of the following rights over the personal information we hold about you:

• Access — ask what personal information we hold about you and get a copy.
• Correction — have inaccurate information corrected.
• Deletion — ask us to delete your information.
• Portability — receive your information in a portable, machine-readable format.
• Objection and restriction — object to, or ask us to restrict, processing based on legitimate interests.
• Withdraw consent — where we rely on consent, withdraw it at any time (this does not affect processing already carried out).
• Non-discrimination — we will not treat you differently for exercising any of these rights.

California residents. Under the CCPA as amended by the CPRA, you have the rights to know, delete, correct, and opt out of sale or sharing of personal information, and to limit use of sensitive personal information. We do not sell or share personal information, and we do not collect sensitive personal information as those terms are defined by California law, so there is nothing to opt out of — but the rights to know, delete, and correct apply and we honor them.

How to exercise a right. Email contact@contextuai.com from the address you contacted us with, or use the contact form. We will verify your request by confirming control of that email address and respond within the time required by applicable law (generally 30 days, or 45 days under California law, with extensions where permitted). You may use an authorized agent where the law allows.

If you are in the EEA or UK and believe we have not handled your information properly, you also have the right to lodge a complaint with your local supervisory authority — though we'd appreciate the chance to resolve it first.

13. International transfers

ContextuAI is based in the United States, and the service providers listed in Section 8 process data on infrastructure that includes servers in the United States. If you contact us from outside the US, your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country. Where required, we rely on the European Commission's Standard Contractual Clauses or an equivalent transfer mechanism made available by our service providers.

Note that this applies only to information you send us. ContextuAI Solo processes your data on your own device, wherever that device is, and Enterprise processes it wherever you deploy it — no cross-border transfer to us occurs in either case.

14. Children's privacy

Our website and products are intended for business and professional use and are not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

15. Do Not Track and Global Privacy Control

Because this website performs no tracking and runs no analytics or advertising scripts, there is nothing for a Do Not Track or Global Privacy Control signal to disable. We honor these signals by default in the most straightforward way available: we don't track anyone in the first place.

16. Changes to this policy

We may update this policy as our products and practices evolve. When we do, we will revise the "Last updated" date at the top of this page. If the changes are material — for example if we begin collecting a category of information we don't collect today — we will provide a more prominent notice on the website. Continued use of the website or our products after an update means you accept the revised policy.

17. Contact us

See also our Terms of Service.