Privacy Policy

1. Introduction

ContextFlow ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our browser extension and services.

2. Information We Collect

We collect information that you provide directly to us:

• Account information (email address, name)
• Profile and preference settings
• Usage data (websites blocked, focus session statistics)
• AI query history and responses
• Payment information (processed securely through Stripe)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your transactions and manage subscriptions
• Send you technical notices and support messages
• Respond to your comments and questions
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues or fraud

4. Payment Processing

We use Stripe as our payment processor. When you make a purchase, your payment information is collected and processed directly by Stripe. We do not store full credit card information on our servers.

Stripe's use of your personal information is governed by their privacy policy: stripe.com/privacy

5. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

6. Third-Party Services

We use the following third-party services that may collect information:

• Cloudflare Workers and D1 for authentication and data storage
• Stripe for payment processing
• AI providers you connect via bring-your-own-key (e.g. OpenAI, Anthropic, Google Gemini, OpenRouter) — your API key stays on your device and prompts are sent directly to the provider you choose
• Cloud hosting providers for data storage

7. Cookies and Tracking

We use cookies and similar tracking technologies to track activity on our service and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

8. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete or anonymize your personal information within a reasonable timeframe.

9. Your Rights

Depending on your location, you may have the following rights:

• Access and receive a copy of your personal data
• Rectify inaccurate personal data
• Request deletion of your personal data
• Object to or restrict processing of your personal data
• Data portability
• Withdraw consent at any time

10. Children's Privacy

Our service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

11. International Data Transfers

Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. We take appropriate safeguards to ensure that your personal information remains protected.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: support@getcontextflow.app