Privacy Policy

Overview

SecureContext is designed to run inside your infrastructure. By default, SecureContext does not collect, store, or process customer data outside your environment.

This Privacy Policy explains what information is (and is not) handled by SecureContext and under what circumstances.

What data SecureContext processes

Customer data

• SecureContext processes only the data you explicitly connect (e.g. Slack, Jira, internal APIs).
• All customer data is processed within your deployment (VPC, on-prem, or approved environment).
• SecureContext does not retain copies of your knowledge, messages, or documents.

End-user content

• Queries made by developers (e.g. questions to internal systems) are processed locally by your SecureContext instance.
• SecureContext does not log or transmit prompts or responses externally by default.

What SecureContext does not collect

By default, SecureContext does not:

• Collect telemetry or usage analytics
• Track individual developers
• Train AI models on your data
• Transmit data to third-party servers
• Monitor customer systems

Optional diagnostics or support logging may be enabled only with explicit customer consent.

Deployment responsibility

Because SecureContext is customer-hosted:

• You control networking, storage, and access
• You determine data retention and logging policies
• You are responsible for complying with internal and regulatory requirements

SecureContext operates as an internal service under your existing security controls.

Security

SecureContext supports:

• Role-based access control (RBAC)
• Integration with enterprise identity providers (SSO, OIDC, mTLS)
• Audit logging (Enterprise plans)
• Air-gapped and restricted network deployments

Security configuration and enforcement remain under customer control.

Third-party services

SecureContext may connect to third-party systems only when you configure connectors. Each connector operates using credentials and permissions you provide.

SecureContext does not introduce new third-party data sharing beyond what you explicitly configure.

Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through our website or documentation.

Contact

For privacy or security questions, contact:

Email: contact@securecontext.org