Privacy Policy

1Who we are

UseMyContext is operated by Instawell Pte. Ltd. ("we", "us", "our"), a company registered in Singapore (UEN 201532257W). We are the data controller for the personal data described in this policy.

2What this policy covers

This policy covers the UseMyContext website and service (the "Service"). It does not cover the third-party AI assistants you choose to connect (for example Claude, ChatGPT, Gemini or Perplexity) - those are governed by their own providers' privacy policies.

3What personal data we collect

• Account data. Your email address, used to sign you in with a one-time code. Your account is identified by a one-way hash derived from your email, not the email itself.
• Your context. The profile, facts and files you choose to add - the personal context you curate for your AI to read. You decide what goes in, and what stays out.
• Usage data. Metadata-only activity (for example, that an AI client connected, or how many tool calls were made) used to operate and improve the Service. This telemetry does not include the content of your context.
• Billing data. If you subscribe to Premium, payment is processed by Stripe. We do not store your full card details.
• Technical data. Standard server and security logs (such as IP address and request metadata) generated when you use the Service.

4How we use your data

• To provide the Service: to authenticate you, store the context you create, and serve that context to the AI assistants you connect.
• To operate, secure and improve the Service.
• To process payments and manage subscriptions.
• To respond to your questions and provide support.
• To comply with our legal obligations.

5Privacy by design

The Service is built so that the public, internet-facing parts cannot read your private context. Each user's data is isolated to that user. You can review what your AI assistants can read, curate it, and revoke access at any time. Sharing your context with another person or another AI only happens when you deliberately choose to.

6Who we share data with

We do not sell your personal data. We use a small number of service providers (processors) to run the Service:

• Cloudflare - hosting, storage and compute, including the on-platform AI used by in-product features.
• SendGrid - to send your one-time sign-in codes by email.
• Stripe - to process Premium payments.
• Attio - the contact record we keep for people who actively use the product, so we can support and talk to our users. It holds contact details, never the content of your context.
• Google Analytics - aggregate, privacy-respecting website analytics.

These providers process data on our behalf under their own security and privacy terms. We may also disclose data where required by law.

7International transfers and residency

Where users are in the EU, their private context is stored in EU-based infrastructure. When you deliberately share a context across regions, that one shared copy may be served from another region. We take reasonable steps to ensure any transfer of personal data has a comparable standard of protection as required under the PDPA.

8How long we keep your data

We keep your personal data for as long as your account is active or as needed to provide the Service. You can delete any fact, file or project at any time, and you can delete your whole account yourself. The next section sets out exactly what that removes, when it is gone, and the short list of things that survive.

9Deleting your account

Sign in, open Settings, choose "Delete account", and type the confirmation we ask for. Deletion starts immediately - there is no queue, no waiting period, and no need to contact us first. How long the run takes depends on how much you are holding, so keep the tab open until it finishes: we show you a receipt of exactly what was removed, and because your session ends with the account it cannot be fetched again afterwards. Two things have to be settled before we will start: cancel an active paid plan, and disband any team you are the only admin of. The app tells you if either applies to you.

If you cannot sign in, email hello@usemycontext.ai from the address on the account and we will delete it for you. That route removes your data on the same terms set out below, with one difference: it does not release your @handle, which stays reserved to you.

What is deleted, and when

• Immediately. Your profile, facts, files and their extracted text, search indexes, projects, share grants, connections, audit trail and sessions are hard-deleted from our primary systems. Each account's data lives in its own isolated store, so deleting an account deletes that store rather than flagging rows as hidden.
• Within 3 days. We take a rolling daily backup and keep only the 3 most recent days, so deleted data leaves every backup we hold within 3 days. Backups exist for disaster recovery and are restored for nothing else. A restore never brings back a deleted account.

Your @handle

Deleting your account releases your @handle. We remove it from our registry, its public page stops resolving immediately, and the name becomes claimable again.

Deleting a single project is different. While your account is open, making a project private or deleting it does not free that project's @handle - it stays reserved to you, so nobody can pick up a name people already associate with you and pose as you.

What survives, and why

• Records we are required by law to keep. If you ever held a paid subscription, the billing and tax records for those payments are kept, by us and by Stripe, for the period the law requires. We do not use them for anything else.
• Transactional email delivery logs. Our email provider keeps short-lived delivery logs for the transactional emails we sent you, such as your one-time sign-in codes. They expire on that provider's own schedule and we do not use them after your account is gone.
• Pseudonymous usage telemetry. Our metadata-only telemetry (for example, that a tool call happened) is keyed to a hashed identifier and rolls off after about 90 days. It never contained the content of your context, and once the account is deleted there is nothing left to tie it back to.

Everything else goes with the account, including the contact record in our CRM, which only exists for people who actively used the product.

10Your rights under the PDPA

You have the right to:

• Access the personal data we hold about you, and information on how it has been used.
• Correct personal data that is inaccurate or incomplete.
• Withdraw consent to our collection, use or disclosure of your personal data.
• Delete your account and the personal data with it - yourself, in Settings, as described above.

To exercise any of these, contact us at hello@usemycontext.ai.

11Security

We use industry-standard measures to protect your data, including encryption in transit, per-user isolation, and the ability to revoke a session or disconnect all access. No method of transmission or storage is completely secure, but we work to protect your data and continually improve our safeguards.

12Cookies and analytics

We use a small number of cookies and similar technologies for essential functionality (such as keeping you signed in) and for aggregate analytics. You can control cookies through your browser settings.

13Children

The Service is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact us and we will delete it.

14Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you. Your continued use of the Service after a change means you accept the updated policy.

15Contact us