Privacy policy
This page is how ContextOS handles information. If our product design and this policy ever drift, the design constraint wins: your graph stays yours.
ContextOS is a desktop application you install on your computer. It reads work already on that machine (desktop AI tools, project files, and optional browser capture you turn on), builds a local project graph, and compiles briefings for the tools you use.
You do not need a ContextOS website account to use the local app. An account is for subscription billing and, when you use it with more than one device, encrypted sync between your devices.
By default, ContextOS processes and stores data on your computer:
~/.contextos (or %USERPROFILE%\.contextos on Windows).
127.0.0.1 only. Requests from elsewhere
are refused.
Depending on what you install and enable, ContextOS may read local data from tools and files such as desktop AI/coding hosts (for example ChatGPT desktop / Codex, Claude, Cursor, VS Code, Gemini, Cline, Zed, Copilot CLI, Windsurf, and similar tools wired through MCP or that host’s plugin slot), project files on disk, and an optional Chromium extension — capture stays off until you enable specific origins.
You can delete a source, a project, or the whole graph in the app. That removes the local data. If device sync is on, matching ciphertext for that purge is removed through the sync path as well; there is no intentional shadow copy of your graph kept for us to browse.
The desktop app contacts our systems to check for software updates. If you are on a licensed or subscription tier that requires it, the app also checks that your license or subscription is still valid. Those checks may include app/version information, license or account identifiers, and standard connection metadata (such as IP address) via our hosting.
ContextOS can generate an encrypted backup as files on your computer. You copy those files yourself (USB drive, folder, or any channel you choose). The backup is ciphertext (scrypt + AES-256-GCM): claims and thread headers, not chat transcripts. We do not receive those files unless you send them to us.
If you have an account and use ContextOS on more than one PC or device, those devices can sync with each other through our backend. The backend’s job is to transmit encrypted sync data between your devices. It is not a product feature for us to search or sell your claim text. As this feature matures we will keep this page aligned with exactly what account fields we store and how long transmission artifacts are retained.
Paid subscriptions are billed through Stripe. Stripe processes name, email, payment method, billing address, and transaction records as needed to charge you and manage the subscription. Northforged Labs does not store full card numbers. We use billing-related data to provide the subscription, prevent fraud, meet accounting and tax duties, and help with billing support.
Stripe’s practices: stripe.com/privacy. Cancelling a subscription stops future charges per the plan terms; it does not delete your local graph.
contextos.ca serves product copy and downloads. It is not a backend for your local graph. Claims are not sent there by the download pages.
Google Analytics. We use Google Analytics to understand site usage (for example page views, approximate location from IP, device/browser type, referral source). Google may use cookies or similar technologies. See Google’s Privacy Policy.
Server logs (Azure). Visits and downloads may create standard request logs (IP address, user agent, URL, timestamp). Those logs are kept in Microsoft Azure for security, abuse prevention, and reliable delivery of downloads.
Tools you already use (Cursor, Claude, ChatGPT, and others) stay under their privacy policies. ContextOS wires briefings into those tools locally; that does not make Northforged Labs the operator of those products.
We also rely on:
ContextOS is aimed at professionals. It is not directed at children under 13. We do not knowingly collect personal information from children through the product.
On your machine you can disable sources, turn off extension origins, export or delete projects, and purge the graph.
For account, billing, site analytics, or sync-related questions, email hello@northforged-labs.ca. Depending on where you live (including under Canadian privacy law and, where they apply, laws such as GDPR or CCPA), you may have rights to access, correct, or delete personal information we hold, or to ask how it is used. We will respond within a reasonable time.
We design for local-first storage, loopback-only access to the daemon, encryption for backup and sync payloads, and purge that follows your deletions. No system is perfectly secure; protect your devices, accounts, and backup files.
We may update this page when the product changes. The “Last updated” date will change when we do. When account sync, licensing, or billing details change in a material way, we will refresh this policy to match.
Northforged Labs
hello@northforged-labs.ca
https://contextos.ca