Privacy Policy

ContextGram ("ContextGram," "we," "us," or "our") has prepared this Privacy Policy to explain what Personal Data (defined below) we collect, how we use and share that data, and your choices concerning our data practices. Through our website https://contextgram.com/ (the "Site"), we provide an asynchronous email communication service (the "Service").

This Privacy Policy is referenced by our Terms of Service, which is also available on our website. Before using the Service or submitting any Personal Data to ContextGram, please review this Privacy Policy carefully and contact us if you have any questions. By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree to this Privacy Policy, please do not access the Site or otherwise use the Service.

Personal Data We Collect

We collect minimal information necessary to provide our Service:

Gmail Account Information

To provide our Service, we collect:

• Your Gmail email address
• Your name and profile picture from your Google account
• Basic account settings and preferences

Gmail Access and Permissions

Our Service adopts a minimal-access approach to ensure your privacy:

• We only request the gmail.send OAuth scope for sending replies and composition
• This basic scope allows sending emails from your address when you choose to respond or composition
• We do not request sensitive scopes like gmail.readonly or gmail.modify
• We do not request access to read your Gmail inbox
• Instead of API access to your inbox, we use standard Gmail forwarding

Email Access Through Forwarding

Our service uses Gmail's standard email forwarding feature:

• You set up forwarding through your Gmail settings
• Emails are forwarded to your personal ContextGram address (e.g., forward@contextgram.com)
• Forwarding is completely voluntary and fully controlled by you
• You can modify or stop forwarding at any time through Gmail settings
• This design choice aligns with our commitment to user control and data privacy

Email Processing

When you use our Service:

• We process only emails forwarded to your ContextGram address
• No direct access to your Gmail inbox
• Forwarded emails are stored securely on our email servers
• Email storage follows standard email service practices
• Data is protected using industry-standard security measures
• Storage duration is limited to service necessity

Technical Information

We collect standard technical information required for the Service to function:

• Browser type and version
• Operating system
• Access timestamps
• Basic usage analytics

How We Use Your Information

We use the collected information for these specific purposes:

• To process and respond to forwarded emails
• To send replies through your Gmail account (using gmail.send scope)
• To provide and maintain our service
• To notify you about changes to our service
• To provide customer support
• To detect, prevent and address technical issues

Use of Google Workspace APIs and Data Access

Our service is designed to minimize API access while maximizing user privacy and control:

Limited API Usage

• We exclusively use the gmail.send scope for sending emails
• We do not request or use broader Gmail API scopes
• Our service focuses on user-controlled data flow
• This minimalist approach reflects our privacy-first design

Email Access Method

• Instead of API access, we use standard Gmail forwarding
• You control email forwarding through your Gmail settings
• You can enable or disable forwarding at any time
• This approach eliminates the need for broad API permissions

Data Collection and Processing

Data Processing and Storage

We implement robust data handling practices that balance user privacy with service functionality:

• Emails are processed according to our service requirements once forwarded to our system
• We maintain necessary data retention periods to ensure service quality and compliance
• Industry-standard encryption protects all data in our systems
• Data deletion requests are processed within reasonable timeframes
• We reserve the right to retain certain data as required by law or for legitimate business purposes

AI/ML Data Usage Policy

Regarding our use of artificial intelligence and machine learning technologies:

• We strictly prohibit the use of your data for training or improving our AI/ML models
• Your data is processed solely for generating responses to your specific requests
• Each interaction is isolated and processed independently
• No data from your interactions is retained for model training purposes
• Our AI models are pre-trained and remain static during your data processing
• We maintain complete separation between model operation and user data
• Your data is never used to enhance, refine, or modify our AI capabilities

Data Usage and Protection

• We use data for service improvement and optimization
• Aggregated and anonymized data may be used for analytics
• We maintain appropriate security measures as determined by our policies
• Access controls are implemented based on our security framework
• We may update security measures without prior notice
• Continuous monitoring for service optimization

Third-Party Integrations

Vector Database Integration (Qdrant)

Regarding vector database integration:

• Users are required to provide and maintain their own Qdrant endpoint and valid API credentials
• Service interruptions due to Qdrant connectivity or configuration issues are not our responsibility
• We may process and cache vector data temporarily to optimize service performance
• Users must ensure their Qdrant setup complies with our technical requirements
• We reserve the right to modify our Qdrant integration methods to improve service delivery

Qdrant Data Management

• Users bear full responsibility for their Qdrant instance management and associated costs
• We are not liable for data loss or service disruptions related to Qdrant infrastructure
• Users must maintain adequate storage capacity and performance metrics
• We may terminate service access if Qdrant setup poses security or performance risks
• Technical support for Qdrant-related issues is provided on a best-effort basis

Other Third-Party Services

When using integrated services:

• Compliance with all third-party Terms of Service and Privacy Policies
• Industry-standard security configurations
• Regular security audits and updates
• Direct support channels for platform-specific concerns
• Clear documentation of security responsibilities

Security and Protection

Data Security Measures

Our security framework includes:

• Industry-standard encryption protocols
• Authentication mechanisms as deemed appropriate
• Regular security reviews and updates
• Incident response procedures
• Compliance with applicable security standards

Data Sharing and Disclosure

We may share data under the following circumstances:

• With service providers essential to our operations
• To comply with legal obligations or government requests
• In connection with business transfers or reorganization
• To protect our rights, property, or safety
• With user consent or as otherwise permitted by law

Service Terms and Limitations

Service Limitations and Liability

• We provide the service on an "as-is" and "as-available" basis
• We reserve the right to modify or discontinue features with reasonable notice
• We are not liable for any direct, indirect, or consequential damages
• Service availability and performance may vary based on factors outside our control
• We may suspend service access for technical, security, or policy compliance reasons

User Rights and Controls

Your Privacy Rights

Users may exercise certain rights subject to applicable limitations:

• Right to modify email forwarding settings
• Right to request access to personal data within reasonable timeframes
• Right to request data corrections where applicable
• Right to request data deletion subject to legal requirements
• Right to restrict processing where permitted by law
• Rights may be limited by technical or legal constraints

Additional Information

Children's Privacy

Our service is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Changes become effective immediately upon posting to our website. Continued use of our service constitutes acceptance of any modifications.

Contact Information

For privacy-related inquiries:

Email: support@contextgram.com

Response times may vary based on inquiry volume and complexity.