Privacy Policy

Last updated: March 2026

Overview

FOUND Studios, LLC, doing business as Open Context ("we", "us", or "our"), operates opnctx.ai and the Open Context Chrome extension. This policy explains what data we collect across all of these surfaces, how we use it, and your rights. We collect the minimum necessary to provide the service and do not sell your data.

Data We Collect

Account information

Your email address and chosen username, used to authenticate you, secure your account, and send transactional messages (e.g. password reset). We do not send marketing email.

Library content

Text, links, images, code snippets, files, and other content you explicitly save to your library — whether via the web app, the Chrome extension, the API, or a connected AI tool. This includes any tags, notes, and metadata you add.

Files and media

Files you upload (images, PDFs, documents, audio, video) are stored in cloud object storage. Files are associated with your account and are not publicly accessible unless you explicitly share them.

Profile data

Information you provide when creating a profile — your background, preferences, working style, and any other context you choose to include. Profiles are accessible to anyone with your profile URL. Do not include information in a profile that you would not want to be publicly readable.

Spaces

If you create or join a Space, content you add to that Space is visible to all members of the Space. Space owners control membership. We store member lists, roles, and shared content on our servers.

API keys and OAuth credentials

API keys are stored in hashed form. OAuth client secrets are stored encrypted. OAuth access tokens granted to third-party AI tools (e.g. Claude, ChatGPT) are stored to maintain those connections. You can revoke any connected application at any time from your Settings page.

Chrome extension

The extension stores your API key locally in your browser using chrome.storage. When you explicitly save content via the extension, the page URL, title, and any selected text or page content are sent to our API. The extension does not monitor your browsing, track visited pages, or collect data passively.

Usage and log data

Standard server logs including IP address, request timestamps, and user agent, retained for up to 30 days for security and debugging. Profile access counts and last-accessed timestamps are stored to show you usage statistics.

AI Processing

Content you save to your library may be processed by AI language models to generate tags, summaries, and search embeddings. This enrichment is performed to make your library more useful and searchable. Content sent for enrichment is used solely for that purpose and is not used to train third-party models. We use reputable AI providers under data processing agreements.

How We Use Your Data

To operate and deliver the Open Context service
To serve your library and profile content to you and to AI tools you connect via MCP
To enrich saved content with AI-generated tags and summaries
To enable search across your library using semantic embeddings
To authenticate your account and secure API and OAuth access
To share content within Spaces you belong to
To diagnose errors and maintain service reliability

We do not use your content to serve advertising or for any purpose outside of operating the service.

Data Sharing

We do not sell, rent, or share your personal data with third parties for their own purposes. Your data may be processed by the following categories of subprocessors acting on our behalf:

Cloud hosting and infrastructure providers
Cloud object storage providers (for uploaded files)
AI providers used for content enrichment
Caching and in-memory data store providers

Profile content is readable by anyone with your profile URL — this is intentional and by design. Space content is readable by all members of that Space.

Third-Party AI Integrations

When you connect a third-party AI tool (such as Claude or ChatGPT) to your account via MCP or OAuth, that tool can read and write to your library according to the permissions you grant. You control which tools have access and can revoke access at any time. We are not responsible for how third-party AI services handle data they receive through these integrations.

Data Retention

Your account data and library content are retained as long as your account is active. You can delete individual library items, profiles, and Spaces at any time from the app. To delete your account and all associated data, contact us at the address below and we will process the request within 30 days.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time. Depending on your jurisdiction you may have additional rights under GDPR, CCPA, or similar laws. To exercise any of these rights, contact us at privacy@opnctx.ai.

Security

We use HTTPS for all data in transit. API keys are stored hashed and OAuth credentials are encrypted at rest. We follow industry-standard practices for access control and infrastructure security.

Cookies and Local Storage

We use cookies and browser local storage solely to operate the Service. Specifically:

An authentication session cookie to keep you signed in
Local storage in the Chrome extension to retain your API key between sessions

We do not use advertising cookies, third-party tracking pixels, or analytics cookies. No cookie consent banner is shown because we set only strictly necessary cookies.

Changes to This Policy

We may update this policy from time to time. Material changes will be noted by updating the date at the top of this page. Continued use of the service after changes constitutes acceptance of the revised policy.

Contact

Questions about this policy: privacy@opnctx.ai