This Privacy Policy explains how ContextGuard (“ContextGuard”, “we”, “us”) handles information in two contexts: (1) this marketing website, and (2) the ContextGuard platform when we operate a hosted deployment on a customer’s behalf. It does not cover self-hosted deployments, where the customer is the data controller for content that passes through their own infrastructure.

1. Information We Collect

On this website

Contact and lead information you submit through forms — name, work email, company, and any message you include.
Usage data collected automatically via Google Analytics once you consent to analytics cookies — pages visited, referring site, device and browser type, and approximate location derived from IP address.

In the hosted platform

Account data — administrator names, emails, and role assignments used to sign in to the console.
Policy and configuration data — the rules, detectors, and integrations you configure.
Scan metadata and, where your policy requires it, content — the Service scans prompts and responses in transit to apply your DLP policies; what is retained afterward (violation records, redacted excerpts, full content) depends on your policy’s logging and retention settings, which you control.

2. Cookies

We use only the cookies needed to run the site and, if you accept them, Google Analytics cookies to understand aggregate traffic. Analytics cookies are not set until you accept the cookie banner shown on your first visit, and you can withdraw consent at any time by clearing your browser’s local storage for this site and reloading the page. We do not use advertising or cross-site tracking cookies.

3. How We Use Information

To operate, secure, and support the Service;
To respond to inquiries submitted through this website;
To understand aggregate usage of this website and improve it;
To meet legal, security, and contractual obligations.

We do not sell personal information.

4. Sharing and Subprocessors

We share information only with service providers who process it on our behalf under contractual confidentiality and security obligations — for example, hosting and infrastructure providers, the model provider your policies route requests to, and Google Analytics for website usage data. We do not share Customer Content with third parties except as your configuration directs (such as a model provider you’ve connected) or as required by law.

5. Data Retention

Website lead data is retained for as long as needed to respond to your inquiry and for a reasonable period after for record-keeping, unless you ask us to delete it sooner. In the hosted platform, retention of scan metadata and audit logs is governed by the retention settings in your policies and account.

6. Security

We use technical and organizational measures appropriate to the sensitivity of the data involved, including encryption in transit, access controls, and audit logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your Rights

Depending on your location, you may have rights to access, correct, delete, or port your personal information, and to object to or restrict certain processing (for example, under the GDPR or the CCPA). To exercise these rights, contact us at [email protected]. If you are an end user whose data was processed through a hosted deployment we operate for one of our customers, we will generally direct your request to that customer, who controls the data.

8. International Transfers

We may process information in countries other than your own. Where required, we rely on appropriate safeguards, such as standard contractual clauses, for international transfers of personal information.

9. Children’s Privacy

The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date above.

11. Contact

Questions about this Privacy Policy can be sent to [email protected].