Privacy Policy

Effective date: 19 October 2026

Who we are

CNTXT_ is a product of Exponenture (Pty) Ltd, based in Cape Town, South Africa. We provide a shared memory layer for organisations: a private store of knowledge that your team’s AI tools can read from and write to, via an MCP connector and a dashboard.

In this policy, “we”, “us” and “our” refer to Exponenture. “You” means the person or organisation using CNTXT_. For the content your organisation stores in CNTXT_, your organisation is the controller of that data and we process it on your behalf.

What we collect

We keep this deliberately small. CNTXT_ holds three kinds of data:

• Account data. Your email address, display name and, optionally, a phone number — what we need to create your account, issue your key and reach you about the service.
• Organisational content. The memories, documents and goals your team chooses to store. This is your content; you decide what goes in and who in your organisation can see it.
• Usage events. Metadata about tool calls — which tool was called, when, and by which key — used for metering, troubleshooting and abuse prevention. Not the content of your conversations with your AI tools.

How your information is processed

CNTXT_ is hosted on Supabase (running on AWS, region eu-west-1). Your content is stored there, isolated per organisation at the database layer.

To make your knowledge searchable, we compute embeddings via OpenAI’s API, acting as a data processor. Content snippets are sent for embedding only; OpenAI does not train on data submitted through its API.

Transactional email (account and service notices) is sent via Postmark. This website and our API are served through Cloudflare, which provides CDN and security services. Each of these providers processes data only to deliver its part of the service.

Our commitments

• No training on your data. We never use your content to train AI models, and we require the same of our processors.
• No selling. We do not sell or rent your data to anyone, for any purpose.
• Organisation isolation. Each organisation’s data is isolated at the database layer — not just in the application.
• Private means private. Content saved with a private audience is visible only to its author — invisible even to your organisation’s admins.

Retention and deletion

We keep your data for as long as your organisation uses CNTXT_. When you delete content, it’s deleted. When you ask us to delete your account or your organisation’s data, we do so on request.

In line with our data-ownership promise, you can export everything you can see, any time, as documented JSON — including before deletion. See Your data for how portability works.

Your rights

We operate from South Africa and align our practices with POPIA (the Protection of Personal Information Act) and the GDPR. Wherever you are, you can:

• Access the personal information we hold about you;
• Correct information that is inaccurate or out of date;
• Delete your personal information, subject to legal retention obligations;
• Take it with you — receive your data in a portable, machine-readable format.

To exercise any of these rights, email us at the address below. We respond to every request.

Cookies

This website uses no analytics or tracking cookies. The dashboard uses a functional session cookie so you stay signed in — nothing more. There is no consent banner because there is nothing to consent to.

Changes to this policy

If we change this policy in a way that matters, we’ll tell you — by email or a notice in the dashboard — before the change takes effect.

Contact

Questions, requests or concerns about your data: dev@exponenture.com.