Privacy Policy

Effective September 11, 2026

What ctxual does

ctxual is an email assistant you talk to by text message. You sign in with your mobile phone number and connect your Gmail. ctxual reads your mail to track conversations, notice replies you owe or are owed, and send you reminders and short summaries. It can draft, send, archive or label email only when you explicitly confirm each action in chat.

What we store

• Your mobile phone number, which is your account.
• The email address of the Gmail account you connect.
• Encrypted OAuth tokens that let ctxual access your Gmail.
• Message metadata and content from your connected mailbox.
• Notes ctxual derives about your contacts and conversations.
• The text messages exchanged between you and the assistant.

Website analytics

We count visits to this website ourselves. When you arrive, we set a first-party cookie holding a random identifier for your browser, and a second one recording which printed flyer or link you came from, so we can tell which ones work. We store the page you viewed, the site that referred you, and whether you are on a phone or a computer. There is no third-party analytics service, no advertising network, and no cross-site tracking. Nothing in these records identifies you personally, and they are never combined with the contents of your mailbox.

How we use it

We use this information only to provide ctxual to you: reading and organising your mail, producing summaries and reminders, and carrying out the actions you confirm. We do not sell your data and we do not use it for advertising.

Google API data

ctxual's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Your Gmail data is never sold, never used for advertising, and never read by a human except with your permission, for support or security purposes.

Who else processes your data

• Google provides the Gmail API.
• Anthropic provides the AI model that reads your messages to produce summaries and draft replies. Under Anthropic's API terms, data sent to the model is not used to train models.
• Twilio delivers the text messages between you and ctxual.
• A hosting provider and a database host run the service and store its data.

We share only what each provider needs to do its job.

Group texts

If someone adds ctxual to a group text, we store that group's messages so ctxual can answer when a message is marked with ©. Group replies use only the group's own messages; nothing from any member's connected mailbox is used or shared in a group. Anyone in the group can stop this by removing ctxual from the group.

SMS messages and mobile information

Signing in sends one text: the six-digit code you asked for by entering your number and tapping "Text me a code". Recurring texts (reminders about your own email and replies to what you ask) are a separate, optional choice: an unchecked box on the sign-in page, or the "Turn texts on" button in your account. Consent to those texts is not a condition of signing up or using ctxual; without it you use the assistant in the web workspace. We record when you turned texts on, and you can turn them off in your account or by replying STOP at any time. If you text our number yourself, we treat that as turning texts on. If you text our number without having signed up, we reply once pointing you to the sign-up page and send nothing further until you have signed up there. The program is described in full at ctxual.com/messaging. Messages are one-to-one assistant replies and reminders about your own email. We never send marketing by SMS. Message frequency varies with your email activity, typically a few messages a day at most. Message and data rates may apply.

We do not share, sell, or provide your mobile phone number or messaging consent data to third parties or affiliates for marketing or promotional purposes. All the categories above exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties. Your number is used only to deliver the messages you asked for, through our SMS delivery provider.

Reply STOP at any time to cancel. Reply START to re-subscribe. Reply HELP for help. Because your number is your account, cancelling texts pauses the assistant; you can delete your account and data by emailing the ctxual project on GitHub. Carriers are not liable for delayed or undelivered messages.

Retention and deletion

We keep your data while your account exists. Disconnecting Gmail immediately deletes the tokens and everything we stored from your mailbox (messages, threads, contacts, the open loops and observations built from them). "Delete account and data" in your account, or texting ctxual "delete everything you have on me" and confirming, deletes your account and all of it, immediately and permanently; group-chat transcripts you took part in keep their messages but no longer link to you. You can also ask by emailing the ctxual project on GitHub.

Security

OAuth tokens are encrypted at rest. All data moves between you, ctxual and our providers over TLS. No system is perfectly secure, but we take reasonable steps to protect what you entrust to us.

Changes

If we change this policy in a meaningful way, we will update the effective date above and let you know within the service.

Contact

Questions about privacy: the ctxual project on GitHub.