Privacy Policy

Last updated: April 2, 2026

ContextLayer ("we", "our", or "us") operates the ContextLayer service (the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy. If you have questions, contact us at privacy@contextlayerai.io.

1. Information We Collect

Account information: When you sign in, we collect your email address.

Documents and files: You may upload documents, transcripts, notes, and other files to the Service. These are stored and processed to provide search and AI-powered features.

Google Drive data: If you choose to connect your Google Drive account, we access files in the specific folder(s) you select. We use read-only access to download files for ingestion into the Service. OAuth access and refresh tokens are stored server-side only. We do not access any files outside the folders you explicitly link, and we do not modify or delete any files in your Google Drive.

Usage data: We collect basic usage information such as pages visited and features used to improve the Service.

2. How We Use Your Information

• To provide, operate, and improve the Service
• To process and index documents you upload or sync from Google Drive
• To power AI-based search, summarization, and analysis features
• To send transactional emails (e.g. sign-in links, invitations)
• To manage billing and subscriptions

3. Google Drive Integration

ContextLayer's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

• We only access Google Drive files in folders you explicitly select
• We use Drive data solely to provide the document search and AI features within ContextLayer
• We do not transfer Google Drive data to third parties except as necessary to operate the Service through our listed subprocessors
• We do not use Google Drive data for advertising
• We do not allow humans to read your Google Drive data unless required for support you request or for security/legal reasons

4. Data Storage and Third-Party Services

We use the following infrastructure providers to operate the Service:

• Convex — database, background jobs, and file storage; stores account records, document metadata, and Google OAuth tokens server-side
• OpenAI — AI embeddings, chat, and signal extraction features; receives document excerpts required to provide those features
• Qdrant — vector search; stores embeddings and retrieval metadata for document search
• Stripe — payment processing
• Resend — transactional email

We do not sell your data to any third parties.

5. Data Retention

We retain your data for as long as your account is active. You may delete documents at any time within the Service. Deleting a document removes the stored file and related processing artifacts, including derived chunks and queued vector cleanup. Unlinking a Google Drive folder removes synced files for that deal, and disconnecting Google Drive deletes stored Google OAuth tokens and stops future syncs until you reconnect. To request full account deletion, contact us at privacy@contextlayerai.io.

6. Security

We take reasonable measures to protect your information, including encryption in transit (TLS) and at rest. No method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Children's Privacy

The Service is not directed to children under 13. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the Service. Continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact

For privacy questions or requests, contact us at privacy@contextlayerai.io.