SecurityAbout Log in Get a demo
← Back to legal

Privacy Policy

Last updated: August 13th, 2026

  1. Introduction. This Privacy Policy describes how, along with our subsidiaries and affiliates (collectively referred to as "Contextuar," "we," "us," or "our"), Contextuar processes Personal Information when we provide services or when you use our websites, mobile, and other online applications and products and services (collectively, the "Contextuar Sites"). We are committed to ensuring the privacy and integrity of the Personal Information you share with us or we otherwise collect as we provide these Services. Throughout this Privacy Policy, "Personal Information" means any information relating to an identified or identifiable individual.
  2. Information We Collect. Contextuar is a business product. We collect information from business users of the Contextuar platform and visitors to our website, as described below. We do not sell personal information, and we do not use customer data for advertising. Our Contextuar Sites are not intended for children under 13 years of age. No one under age 13 may provide any information to or on Contextuar Sites. We do not knowingly collect personal information from children under 13. If you are under 13, do not use or provide any information on this Website through any of its features, register on the Website, make any purchases through the Website, or use any of the interactive or public comment features of this Website. If we learn we have collected or received personal information from a child under 13 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 13, please contact us at privacy@contextuar.com.

    California residents under 16 years of age may have additional rights regarding the collection and sale of their personal information. Please see Your State Privacy Rights for more information.

  3. Information You Provide. We may collect information that you choose to provide on the Contextuar Sites in a variety of ways, such as when you:
    1. register for one of our products or services. This information may include your name, address, telephone number, email address, and credit information;
    2. express an interest in communicating or collaborating with participants in a business process or solutions offered by Contextuar;
    3. participate in chats, web forums, or other interactive sessions;
    4. provide payment card information for one of our products or services;
    5. subscribe to newsletters, access podcasts, or provide feedback; and
  4. Automated Information. Information regarding your use of the Contextuar Sites may be collected and/or aggregated through the use of automated means. This automatically collected information may include information such as:
    1. your IP address, the type of browser and operating system used;
    2. date and time you access the Contextuar Sites and pages you visit, and if you linked from or to another website, the address of that website;
    3. email you open and links you click on within those email;
    4. your ISP or mobile carrier, and the type of handheld or mobile device that you used; and
    5. your behavior while using our site, including the time you spend on portions of the site and how you interact with various aspects of the site.
  5. Data Technologies.
    1. Various technologies are used to automatically collect information, such as cookies and web beacons (generally referred to as "Data Technologies"). "Cookies" are small identifiers sent from a web server that are stored on your device for the purpose of identifying your browser or storing information or settings in your browser. A "web beacon," also known as an internet tag, pixel tag or clear GIF, links web pages to web servers and their cookies. When we refer to Data Technologies, we are including all current and similar future technologies.
    2. One or more Data Technologies may be used on the Contextuar Sites and other websites and mobile applications (that may not be the Contextuar Sites) by us, by another party on our behalf, or by third parties in accordance with their privacy policies. Data Technologies may be used by us and others, on our behalf and on their own behalf, to transmit information to you or about you and connect information about you from different sources, websites, devices, and mobile applications.
  6. Publicly Posted Information. Information that you make available to us and others via social media networks, forums, blogs, list serves, chat rooms or similar functionality is public information that we or others may share or use in accordance with the law.
  7. Combined Information and Information from Other Sources. We may combine information that you provide to us with information we receive from our affiliates and other sources, as well as with other information that is automatically collected. The combined information may include information about your use of the Contextuar Sites, your use of other websites, devices and mobile applications and information from our affiliates and other sources.
  8. How We May Use the Information We Collect. We may use information we collect for the following purposes:
    1. for everyday business purposes, such as establishing and managing your user account, providing products and services you request, processing and collecting payments and providing customer support;
    2. to offer our other products or services and/or the products or services of others to you;
    3. to enable you to interact with Contextuar and our users and others through various means, such as through our message boards, blogs and social media;
    4. to evaluate and improve our business, including developing new products and services and analyzing the effectiveness of products, services, applications and websites;
    5. to diagnose and address technical and service problems;
    6. to perform data analyses, including market and Consumer research, trend analysis, demographic analysis and financial analysis;
    7. to comply with applicable legal requirements and our policies; and
    8. to contact you via telephone, text or chat. We will obtain your consent to contact you when and in the manner required by law.
  9. How Contextuar Uses AI. Contextuar is an AI-powered work layer. When you or your organization enable Contextuar's analysis features, email content, attachments, and the business context your organization configures (such as customers, vendors, and projects) are transmitted to AI models to generate suggestions, classifications, and agent actions. All AI model access occurs through Microsoft Azure AI Foundry within BAQS's own Azure environment.
    1. No training. Customer data processed by AI models is not used to train those models — not by BAQS, and not by the model providers.
    2. Human approval. Actions suggested by Contextuar's AI agents (for example, entering an invoice into an accounting system) are executed only after review and approval by an authorized user, unless your organization has expressly converted a confirmed pattern into an automatic rule.
    3. Scope of analysis. Contextuar analyzes only the emails that users or organization rules have designated for analysis. It does not analyze every email in a connected mailbox.
    4. Zero-data-retention option. Organizations with specific data handling requirements may request an account-level zero-data-retention setting, under which email content and attachments are not persisted in Contextuar databases. This setting limits certain platform capabilities and is enabled per customer agreement.
    5. Workflow orchestration. For customers whose agent integrations use workflow orchestration, data required to execute approved agent actions is processed by our subprocessor n8n GmbH, as described on our Subprocessors page. These workflows are configured so that execution data is not retained after completion.
  10. Information We Share. We do not sell or otherwise share information about you that we collect or receive, except as described below:
    1. Affiliates. We may share information about you, including Personal Information, with our corporate affiliates, who will use it in accordance with their privacy policies.
    2. Our Service Providers. We may engage third parties to provide the services offered through or in connection with the Contextuar Sites on our behalf. We require such providers to maintain information about you as confidential and to use the information only to perform the services specified by us in a manner consistent with this Privacy Policy.
    3. Corporate and Asset Transactions. If we sell all or substantially all of our business or sell or transfer all or a material part of our assets, or are otherwise involved in a merger or transfer of all or a substantial part of our business, we may transfer all information we have collected and stored, including Personal Information, to the party or parties involved in the transaction as part of that transaction.
    4. Other. We may access or disclose information, including Personal Information, to:
      1. protect or defend our interests and the legal rights or property of Contextuar and our affiliates;
      2. protect the rights, interests, safety and security of users of the Contextuar Sites or members of the public;
      3. protect against fraud or for risk management purposes; or
      4. comply with prudent legal practice as we may determine, and applicable law or legal process.
  11. Data Retention and Deletion. We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements. To determine the appropriate retention period for your personal data, we consider the amount, nature, and sensitivity of the personal data, the purposes for which we process it, and whether we can achieve those purposes through other means. We also consider applicable legal requirements. In some circumstances, we will anonymize your personal data so that it can no longer be associated with you. We reserve the right to retain and use such anonymous data indefinitely without further notice to you. Once we no longer need to use your personal data for the purposes set out in this Privacy Policy, we will delete it from our systems. You may have certain rights to request deletion of your personal data. We will comply with such request unless we have a lawful basis for retaining your data, such as for compliance with a legal obligation or for the establishment, exercise or defense of a legal claim. We may retain your personal data where retention is necessary for compliance with a legal obligation to which we are subject or in order to protect your vital interests or the vital interests of another natural person.
  12. Protection Mechanism for Sensitive Data.
    1. We consider certain types of personal data to be sensitive and therefore require special precautions for its collection, storage, use, and disclosure. Sensitive data may include information related to demographic data, location information, and financial information. We take appropriate technical and organizational measures to ensure the security of sensitive data, including:
      1. Encryption of sensitive data during transmission and while at rest;
      2. Access controls to limit access to sensitive data only to authorized personnel on a need-to-know basis;
      3. Regular testing and evaluation of the effectiveness of security measures;
      4. Special contractual obligations for third-party service providers who may access sensitive data;
      5. Prompt incident response and breach notification procedures in case of any unauthorized access to sensitive data.
    2. Individuals may have the right to object to the processing of their sensitive personal data, subject to applicable legal restrictions. Requests can be in accordance with the terms herein.
    3. This section subject to applicable data protection laws and may need to be revised when the legal framework evolves.
  13. Your Choices. You are entitled to make certain choices about how we communicate with you.
    1. You may choose not to provide Personal Information, even though that might impact your ability to register or receive a particular product or service.
    2. If you do not want to receive marketing email from us, you can follow the unsubscribe link provided in those emails.
    3. If you do not want to receive interest-based advertisements, you can opt out by notifying us in writing.
    4. You have a number of choices regarding certain Data Technologies. Most web browsers automatically accept cookies, but you can usually modify your browser's setting to decline cookies if you prefer. You may also render some web beacons unusable by rejecting their associated cookies and disable or delete similar data used by browser add-ons, such as Flash cookies, by changing the add-on's settings or the website of the technology provider. If you choose to decline Cookies or similar technologies, however, please note that certain features may not function properly or at all as a result. You may be able to adjust the use of advertising identifiers on mobile devices through the settings on your device. Finally, if you do not want to use a uniquely generated telephone number, you may choose to not call us.
    5. If you do not want us to use Location Information, you can decline our initial invitation to provide that information, or opt out by changing the location services settings on your mobile device. However, please note that certain features may not function properly or at all as a result if you opt out.
  14. California Privacy Rights. If you are a Consumer receiving products or services for which we are a Business, as those terms and any other capitalized terms in this section are defined under the California Consumer Privacy Act of 2018 (California Civil Code §§ 1798.100 to 1798.199) and its implementing regulations, as amended or superseded from time to time (the "CCPA"), and is effective upon the date that the CCPA enters into operation, California law may permit you to request information regarding the:
    1. Categories of Personal Information (as defined by applicable California law) Collected, Sold or Disclosed by us;
    2. Purposes for which categories of Personal Information Collected by us are used;
    3. Sources of information from which we Collect Personal Information; and
    4. Specific pieces of Personal Information we have Collected about you.

    In addition, if you are a Consumer you may:

    1. Opt-out of the Sale or Disclosure of your Personal Information, in some circumstances;
    2. Opt-out of receiving marketing communications from us; however, you may still receive administrative communications regarding the Services; and
    3. Request deletion of your Personal Information by us and our Service Providers, in some circumstances.

    The CCPA also provides Consumers with the right not to receive discriminatory treatment by a Business for the exercise of these rights regarding Personal Information. You can make requests related to your California privacy rights emailing privacy@contextuar.com or in writing to:

    BAQS, Inc.
    ATTN: Legal Department
    P.O. Box 1441
    Carolina Beach, NC 28428
  15. Your US State Privacy Rights. A number of US states have comprehensive privacy laws granting their residents rights over personal information, which may include the right to confirm whether we process your personal information, to access, correct, or delete it, to receive a portable copy, to opt out of targeted advertising, sales of personal information, or certain profiling, and to appeal a decision on a rights request. Based on our current size and the business nature of our service, BAQS may not be subject to these laws; however, we honor these rights voluntarily for all US residents. We do not sell personal information and do not use personal information for targeted advertising. To exercise any of these rights or to appeal a decision, email privacy@contextuar.com. We will respond within 45 days.
  16. Google User Data. We may access Google user data obtained from using Google's API services including your email contacts, calendar messages, image avatar, first name, last name, company name, roles within your company (if applicable) (collectively, "Google User Data"). Our use of Google User Data will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
    1. Intended Use. We may use the Google User Data to:
      1. Import and store your emails in the Contextuar Sites so such emails can be associated with projects in the solution.
      2. Allow you to send emails through Gmail from the Contextuar Sites.
      3. Store your Google User Data to improve your appearance to other users you have connected with.
      4. If you are associated with a company account, establish the following roles so that you can see a user's emails even if you are not an addressee on the email:
        1. Company account administrators.
        2. Managers of projects where the email has been assigned.
      5. Allow you to search your own Gmail contacts from the Contextuar Sites to compose emails.
      6. Access your calendar to associate events with projects.

      We will only request access to Google User Data within the permitted scope of the Contextuar Sites. In addition to the terms of the Privacy Policy, our use of the Google User Data shall be limited by Google's limited use policy below.

    2. Limited Use. When accessing or using Google User Data, we will:
      1. Limit our use of Google User Data to providing or improving user-facing features that are prominent in the Contextuar Sites;
      2. Not transfer Google User Data, except:
        1. To provide or improve our appropriate access or user-facing features that are visible and prominent in the Contextuar Sites's user interface and only with your consent;
        2. For security purposes (for example, investigating abuse);
        3. To comply with applicable laws; or
        4. As part of a merger, acquisition, or sale of assets of Contextuar after obtaining explicit prior consent from you.
      3. Not allow humans to read Google User Data, unless:
        1. We first obtain your affirmative agreement to view specific messages, files, or other data, with the limited exception of use cases approved by Google under additional terms applicable to the Nest Device Access program;
        2. It is necessary for security purposes (for example, investigating a bug or abuse);
        3. It is necessary to comply with applicable law; or
        4. The Google User Data (including derivations) is aggregated and used for internal operations in accordance with applicable privacy and other jurisdictional legal requirements.
    3. Restricted Use. All other transfers, uses, or sales of Google User Data are prohibited, including:
      1. Transferring or selling Google User Data to third parties like advertising platforms, data brokers, or any information resellers.
      2. Transferring, selling, or using Google User Data for serving ads, including retargeting, personalized or interest-based advertising.
      3. Transferring, selling, or using Google User Data to determine credit-worthiness or for lending purposes.
  17. Microsoft User Data. When you connect a Microsoft 365 or Outlook account, we access Microsoft user data through the Microsoft Graph API under permissions you or your organization's administrator grant, which may include your email messages and attachments, contacts, calendar data, profile name, and email address (collectively, "Microsoft User Data"). Our use of Microsoft User Data complies with Microsoft's API Terms of Use and the Microsoft identity platform requirements.
    1. Intended use. We use Microsoft User Data to: (a) import and associate your emails with workspaces and projects in Contextuar; (b) allow you to send email through your Outlook account from Contextuar; (c) enable workspace roles so that authorized teammates (such as account administrators and project managers) can see emails shared into a workspace; (d) allow you to search your own contacts when composing email; and (e) associate calendar events with projects, where enabled.
    2. Limits. We request only the minimum permissions required for these features. We do not sell Microsoft User Data, do not use it for advertising, and do not permit humans to read it except with your agreement, for security purposes, to comply with law, or in aggregated form for internal operations.
    3. Retention and revocation. You or your administrator may revoke Contextuar's access at any time through your Microsoft account or Microsoft 365 admin center. Upon revocation or account deletion, we delete associated Microsoft User Data in accordance with our retention practices and Data Processing Addendum.
  18. Browser Extension and Add-in Data. The Contextuar Chrome extension and Outlook add-in operate within your email interface. They read page-level signals from the email you are viewing in order to establish context and pass information to Contextuar's APIs, which perform all operations server-side. The extension and add-in do not independently read or store your mailbox, do not collect your browsing history, and do not track your activity on other websites. Data handled through the extension and add-in is used only to provide Contextuar's user-facing features and is governed by this Privacy Policy.
  19. Disputes. If you choose to visit the Contextuar Sites, your visit and any dispute regarding privacy is subject to this Privacy Policy and our Website Terms of Use and, for platform customers, the Platform Access Agreement, including limitations on damages, resolution of disputes, and application of the law of the state of Delaware.
  20. Updates to this Privacy Policy. We may update this Privacy Policy to provide clarification or notice of changes to our practices. If we make changes, we will revise the date at the top of this Privacy Policy. We will provide you with additional notice of material changes by posting notice of the changes for thirty (30) days before we implement those changes.
  21. How to Contact Us. If you have any questions or comments about this Privacy Policy, or if you would like us to update information we have about you or your preferences, please contact us by email at privacy@contextuar.com.