Privacy policy

1.Who we are

Context Locker (“we”, “us” or “our”) runs the Context Locker service at context.locker, operated from New Zealand.

For privacy questions or requests, email privacy@context.locker. Our business address is available on request.

2.What this policy covers

This policy covers the personal information we handle for our own purposes: your account, billing, support, security, product use and our website. It also covers the content you keep in Context Locker, such as your preferences, skills, project context and notes.

Under UK and EU data protection law, we are the controller for your account information and for the content in your personal playbook. When team plans launch, the organisation that owns a team workspace will decide what goes in it, and we will process that content on its instructions as its processor.

3.What we collect

• Account: your name, email address, profile details and sign-in identifiers.
• Your playbook: the preferences, skills, project context and notes that you or your AI apps save, with every version, its change note and who made it. Please don't store passwords, keys or other secrets here. We reject anything that looks like one.
• Your AI apps: which AI apps you connect, a name for the computer each one runs on, what each is allowed to do, the version it last synced and when it was last active.
• Suggestions and history: the updates your AI apps suggest, what you approve or reject, and a record of every change, sync and sign-in.
• Billing: your plan, subscription status, Stripe customer reference, invoices and payment status. We never see or store your full card details.
• Security and usage: IP addresses, device and browser details, timestamps and diagnostic logs.
• Messages: support emails, feedback and your email preferences.

4.How we use it

• To run Context Locker: store your playbook, keep its history and give it to the AI apps you connect.
• To sign you in and manage your account, your AI apps and what each one may do.
• To keep the service and your content secure, and to find and stop abuse, fraud and misuse.
• To send service emails, such as sign-in codes, updates waiting for your approval, your monthly check-up, security notices and important product changes.
• To handle billing, plan limits, taxes and invoices.
• To understand how Context Locker is used and improve it, from activity records rather than by reading your playbook.
• To meet legal, tax, accounting and regulatory duties, and to resolve disputes.

5.Never used for training

We don't use your playbook, notes or skills to train AI models, and we don't let our service providers do so.

We don't run AI models on your content either. The AI apps you connect do that work, under your own accounts. If we ever offer a feature that runs a model on our side, such as running Gather for you, it will be optional and we'll update this policy before it launches.

6.The AI apps you connect

Context Locker gives your playbook only to the AI apps you connect, and only the parts that apply to the work in front of them.

Each AI app is run by its own provider, such as Anthropic, OpenAI or xAI. What an app does with what it reads is covered by that provider's terms and your settings there, not by this policy.

Coding agents such as Claude Code and Codex write your playbook into files on your computer and refresh them when a session starts. Those files stay on your computer, under your control.

You can disconnect an AI app at any time, and it stops getting updates straight away. Files it already wrote stay on your computer until you remove them.

7.Legal bases for UK and EU users

• Contract: to provide Context Locker and run your account.
• Legitimate interests: to keep the service secure, prevent fraud, give support, improve the service and run our business.
• Legal obligation: to keep records and answer lawful requests.
• Consent: for optional emails and anything else that needs it. You can withdraw consent at any time.

8.How we share information

We don't sell your personal information. We share it only to run the service or when the law requires it:

• Service providers that host, store, secure and monitor Context Locker, handle sign-in and send our emails.
• Stripe, which processes our payments.
• Professional advisers, regulators, law enforcement and courts, where the law requires or allows it.
• A buyer or successor if Context Locker is merged, sold or reorganised, with suitable safeguards in place.

9.Where your information is processed

We operate from New Zealand. Our providers may process information in the United States, the United Kingdom, the European Economic Area and other countries where they operate. Where the law requires safeguards for these transfers, we use contractual, technical and organisational measures.

10.How we protect it

Your content is encrypted in transit and at rest, with a separate key for each workspace. Our staff have no routine access to it. If emergency access is ever needed, for example to fix a serious fault, it's recorded in your history where you can see it.

Your playbook isn't end-to-end encrypted, because the AI apps you connect, including ones that run in the cloud, need to read it.

No service can promise perfect security. Please keep your account, devices and AI app connections safe, and check which AI apps you've connected from time to time.

11.How long we keep it

We keep personal information only as long as we need it to run the service, meet legal duties, resolve disputes, enforce our agreements and keep the service secure.

Your plan sets how far back your version history goes: 30 days on Free and a year on Pro.

When you delete your account, we delete your playbook and notes. We may keep some records, such as invoices and security logs, where the law or security requires it. Copies in backups are removed on our normal backup cycle.

12.Your choices and rights

You can view, change, export or delete your playbook at any time. An export gives you plain files and your full history.

Depending on where you live, you may also have the right to access, correct, delete, export or restrict your personal information, or to object to how we use it. UK and EU users can withdraw consent, object to processing based on our legitimate interests and complain to their data protection authority. New Zealand users can contact the Office of the Privacy Commissioner.

To make a request, email privacy@context.locker.

13.Children

Context Locker isn't meant for children, and we don't knowingly collect children's personal information.

14.Changes to this policy

We may update this policy. If a change is significant, we'll take reasonable steps to tell you, such as emailing you or showing a notice in the app, and we'll update the date at the top of this page.

15.Contact

Email privacy@context.locker. Our business address is available on request.