Privacy policy

Summary

• We collect account, billing, support, and usage information, information about how you use our website and dashboard, and the content of the requests you send to our API.
• We use API request content to provide the Services and, unless a request uses zero data retention or we have agreed otherwise, to improve them, including by training machine learning models.
• When you use the Services to process personal data on behalf of your business, we act as your processor or service provider under our Data Processing Addendum.
• Our data products include professional information about people collected from public sources and data providers. Anyone can ask us to access, correct, or delete information about them, or to stop including it.
• We use advertising and analytics technologies, which may count as a “sale” or “sharing” under some US state laws. You can opt out with Global Privacy Control, our cookie banner, or by emailing us.
• You can exercise your privacy rights by emailing privacy@context.dev, and you can delete your account from your dashboard settings.

1. Who we are and what this policy covers

Context Dev Inc., 1007 N Orange St. 4th Floor Suite #1839, Wilmington, DE 19801, United States, is the controller of the personal data described in this policy. Context.dev was formerly known as Brand.dev.

This policy does not cover personal data contained in Customer Content or Output that we process on behalf of our business customers. For that data, we act as a processor or service provider under our Data Processing Addendum, and the customer’s own privacy policy governs how it is used. If you have questions about how one of our customers uses your personal data, please contact that customer, and we will help them respond.

This policy also does not cover third-party websites and services, including the websites our customers ask us to retrieve, which have their own privacy policies.

2. Information we collect

Information you give us

• Account and organization information: your name, email address, and password (stored by our authentication provider in hashed form), your organization’s name and website, team members you invite, and your answers to onboarding questions such as your role and use case.
• Billing information: billing contact details, billing address, and tax identification numbers. Our payment processor collects your payment card details. We do not store full card numbers.
• Communications: messages you send us through support chat, email, feedback tools, surveys, and forms such as contact, research grant, and affiliate applications, and testimonials you agree to share.

API requests and results

When you use the API, SDKs, CLI, MCP server, or playground, we receive the Customer Content you send, such as URLs, search queries, prompts, schemas, and files, and we generate the Output we return. Third-Party Content retrieved at your direction, such as a web page, may include personal data about people other than you. We also record request metadata, such as your organization and API key identifiers, IP address, user agent, timestamps, endpoints, status codes, and Credits used. Requests made with zero data retention are processed without keeping their request or response content.

Information collected automatically

When you visit our website or dashboard, we and our partners collect device and usage information, such as your IP address, browser and device type, operating system, language, referring URL, the pages you view and actions you take, and approximate location derived from your IP address. We collect some of this information using cookies and similar technologies, as described in Section 6.

Information from other sources

• Sign-in providers: if you sign in with Google, GitHub, or your organization’s single sign-on provider, we receive information such as your name, email address, profile picture, and account identifier, as described in Section 7.
• AI agents acting for you: if an AI agent registers for or connects to the Services on your behalf, we receive the email address it provides and information about the agent or client application.
• Payment processor: payment status and limited payment method details, such as card brand, last four digits, and billing country.
• Marketing, referral, and attribution partners: information about the ads, links, or referral partners that brought you to us.
• Fraud prevention and verification services: signals that help us detect abuse, such as whether an email address is deliverable or disposable, and verification results for our sign-up and free tools.

3. Information about people in our data products

Some of our Services return business information about companies and people, such as company profiles, news, and professional profiles returned by our People Enrichment API. Professional profiles may include a person’s name, job title, employer, work history, education, general location, profile photo, and links to public professional profiles, social profiles, or personal websites.

We collect this information from publicly available sources, such as websites, public profiles, and news, and from licensed third-party data providers. We use it to provide business data services to our customers, for purposes such as sales and marketing, recruiting, research, and fraud prevention, and to keep the data accurate. We rely on our legitimate interests, and our customers’ legitimate interests, in providing and using business information. We do not intentionally collect special categories of personal data for these products, and our Terms prohibit customers from using the data for decisions about a person’s eligibility for credit, employment, insurance, or housing.

Making this information available to our customers may be considered a “sale” of personal information under some US state privacy laws. If you want to know whether we hold information about you, or want us to correct it, delete it, or stop including it in our Services, email privacy@context.dev with your name and the profile URLs or email addresses the request relates to. When we delete your information, we may keep a minimal record so that it is not added back.

4. How we use information

We use personal data for the following purposes. Where the GDPR or similar laws apply, we rely on the legal bases shown in parentheses.

• To provide and operate the Services, including processing API requests and running batches and monitors (performance of our contract with you).
• To create and manage accounts and organizations, process payments, and provide support (performance of our contract with you).
• To secure the Services, prevent fraud and abuse, enforce our Terms, and debug problems (legitimate interests, and legal obligations where they apply).
• To improve and develop the Services, including by training and evaluating the machine learning models we use to provide them with API requests and results, as described in Section 7.3 of our Terms. Requests made with zero data retention are not used for this purpose (legitimate interests).
• To understand how our website and dashboard are used (consent where required, otherwise legitimate interests).
• To send you transactional messages, such as security alerts, low-balance notices, and invoices (performance of our contract with you).
• To send you product updates and marketing, which you can opt out of at any time (legitimate interests, or consent where required).
• To measure and deliver advertising for our Services, as described in Section 6 (consent where required, otherwise legitimate interests).
• To provide our data products, as described in Section 3 (legitimate interests).
• To comply with the law, respond to lawful requests, and protect our rights and the rights of others (legal obligations and legitimate interests).

5. How we share information

We share personal data only as described below.

• Service providers: companies that help us run the Services, such as cloud hosting and storage, authentication, payment processing, email delivery, analytics, customer support, logging and monitoring, AI model providers that help extract, summarize, and answer questions about content, and proxy and network providers that help retrieve web content. They may use personal data only to provide services to us. Our sub-processors are listed on our sub-processor page.
• Our customers: business information about people and companies in our data products, as described in Section 3. Within a customer organization, owners and admins can see members, API keys, and usage.
• At your direction: when you ask us to send data elsewhere, for example to your webhook endpoints, or to AI clients and other integrations you connect to the Services.
• Advertising and Analytics Partners: We may share identifiers (such as cookie identifiers), device and usage information, and, for conversion measurement, limited contact information in hashed form with the advertising and analytics partners described in Section 6 ("DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?"). Depending on your state of residence, this may be considered a "sale" or "sharing" of personal information under applicable US state privacy laws; Section 6 describes how to opt out.
• Affiliates: companies that control, are controlled by, or are under common control with us, which must honor this policy.
• Business transfers: in connection with, or during negotiations of, a merger, financing, acquisition, or sale of all or part of our business.
• Legal and safety: when we believe in good faith that disclosure is needed to comply with the law or legal process, to enforce our Terms, or to protect the rights, property, or safety of Context.dev, our customers, or others.
• With your consent, or in aggregated or de-identified form that does not identify you.

6. Do we use cookies and other tracking technologies?

Yes. We use cookies, pixels, and similar technologies to operate our Services, measure how they are used, and advertise our Services. You control non-essential technologies through our cookie banner, opt-out preference signals such as the Global Privacy Control, and your browser settings.

We and our third-party partners use cookies, pixel tags (web beacons), scripts, software development kits, local storage, and similar technologies (collectively, "Tracking Technologies") when you visit or use our Services. We group Tracking Technologies into the following categories:

• Necessary: required to operate the Services, such as authentication, security, fraud prevention, load balancing, and remembering your consent choices. These are always active. This category also includes privacy-friendly, cookieless analytics that does not build personal profiles and does not track you across other websites.
• Measurement (analytics): help us understand how visitors use the Services so we can improve them, such as product analytics, session recordings, and error diagnostics. If you decline this category, we do not set analytics cookies or persistent analytics identifiers in your browser.
• Marketing (advertising): set by us and our advertising partners to measure the performance of our advertising campaigns and to show you ads for our Services on other websites and apps. Where consent is required, these load only after you grant it.

Consent manager. Where required by applicable law (for example, in the European Economic Area, the United Kingdom, and Switzerland), non-essential Tracking Technologies load only after you give consent through our cookie banner, which also provides more information about the technologies in each category. You can change or withdraw your choices at any time: deleting cookies and site data for our websites in your browser causes the banner to be shown again, and you can also contact us at privacy@context.dev. Withdrawing consent stops future collection by the affected category but does not affect processing that already occurred while consent was in place.

Advertising and analytics partners. We work with third-party advertising and analytics partners, such as advertising networks and social media platforms, that use Tracking Technologies on our Services to measure the performance of our advertising campaigns and to deliver ads for our Services on other websites and apps. These partners may collect information such as your IP address, cookie and device identifiers, and the pages you visit. To measure the effectiveness of our advertising campaigns and attribute conversions (for example, account signups and purchases), we may also share limited information with these partners, such as your email address in hashed (pseudonymized) form. We also use attribution technology to credit partners in our affiliate and referral program.

State privacy laws ("sale" or "sharing"). Depending on your state of residence, our use of advertising Tracking Technologies described above may be considered a "sale" of personal information, "sharing" of personal information for cross-context behavioral advertising, or "targeted advertising" under applicable US state privacy laws. You can opt out at any time by enabling an opt-out preference signal recognized under applicable law, such as the Global Privacy Control (GPC), which we honor, by declining the Marketing category in our cookie banner where it is shown, or by contacting us at privacy@context.dev. If you opt out, you may still see generic ads for our Services, but they will not be personalized based on your activity on our Services.

Third parties. Our advertising and analytics partners operate under their own privacy policies, and we do not control how they process information they collect or how they combine it with information from other sources. We encourage you to review their policies. You can also opt out of interest-based advertising from participating companies through the Digital Advertising Alliance, the Network Advertising Initiative, and, in the EU, Your Online Choices. We do not control these third-party opt-out mechanisms and are not responsible for their availability or accuracy.

7. Sign-in providers

You can sign in with an email address and password, or with a third-party account such as Google, GitHub, or your organization’s single sign-on provider. If you use a third-party account, the provider shares profile information with us, such as your name, email address, profile picture, and account identifier, depending on the provider and your settings. We use it to create and secure your account. The provider’s own privacy policy governs what it does with your information.

8. International transfers

We are based in the United States, and we and our service providers process personal data in the United States and other countries whose data protection laws may differ from those where you live. When we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, which are incorporated into our Data Processing Addendum for customer data.

9. How long we keep information

We keep personal data only as long as we need it for the purposes in this policy, unless a longer period is required or permitted by law. For example:

• We keep account and organization information while your account is open. After you delete your account, we delete or de-identify it within a reasonable period, except for information we must keep for legal, tax, fraud prevention, or dispute resolution purposes.
• We keep billing and transaction records for as long as tax and accounting laws require.
• We keep API request logs, which include request and response content unless a request uses zero data retention, for as long as we need them to operate, secure, troubleshoot, bill for, and improve the Services.
• We keep files the Services produce for you, such as batch results and hosted copies of screenshots and images, for the periods described in our documentation.
• We keep information about people in our data products while it remains relevant and accurate, and we stop including it when you ask us to, as described in Section 3.

When we no longer need personal data, we delete or de-identify it. If that is not immediately possible, for example because it is stored in backups, we keep it securely and isolate it from further processing until it can be deleted.

10. Security

We use administrative, technical, and physical safeguards designed to protect personal data, including encryption in transit, access controls, and monitoring. No system is completely secure, so we cannot guarantee the security of your information. Security reports and controls are available in our Trust Center.

11. Children

The Services are not intended for anyone under 18, and we do not knowingly collect personal data from children under 18 through the Services. If we learn that we have collected personal data from a child under 18 through the Services, we will delete it and close the account. If you believe we have, please contact us at privacy@context.dev.

12. Your privacy rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and receive a copy in a portable format;
• correct inaccurate personal data;
• delete your personal data;
• object to or restrict certain processing, including processing based on legitimate interests;
• withdraw consent where we rely on it, without affecting processing that already took place;
• opt out of the “sale” or “sharing” of personal data and of targeted advertising, as described in Sections 3 and 6;
• appeal our decision on your request; and
• not be discriminated against for exercising these rights.

To exercise these rights, email privacy@context.dev. To delete your account, go to Settings → Danger zone in your dashboard and follow the confirmation steps, or email us from the address associated with your account. You can review and update most account information in your dashboard settings, and you can unsubscribe from marketing emails with the link in any of them.

We will verify your request before acting on it, for example by asking you to confirm control of your email address, and we will respond within the time required by applicable law. You may use an authorized agent to make a request on your behalf, and we may ask the agent for proof of authorization. If your personal data is in content we process for one of our customers, we may refer you to that customer. If you are in the European Economic Area, the United Kingdom, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

13. Controls for do-not-track features

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. We do, however, honor opt-out preference signals recognized under applicable law, such as the Global Privacy Control (GPC), as described in Section 6 ("DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?"). If a standard for online tracking that we must follow is adopted in the future, we will inform you about that practice in a revised version of this privacy notice.

14. Changes to this policy

We may update this policy from time to time and will post the new version on this page with a new “Last updated” date. If we make material changes, we will notify you by email or in the dashboard, or by posting a prominent notice on our website, before the changes take effect.

15. Contact us

If you have questions about this policy or our privacy practices, email privacy@context.dev or write to us at: