Privacy policy
Recontexture lets the AI assistant you already use (for example Claude) search your own email, calendar and documents while you chat with it. This page explains which data we process to do that, where it goes, how long we keep it and what you can do about it. Recontexture is an invite-only beta.
Who is responsible
Recontexture is ideated by Yuri Federigi and Alberto Visonà, and operated by Yuri Federigi in Switzerland. Contact for anything about your data: privacy@recontexture.com.
What we process
- Your account: the name, email address and Google account identifier you sign in with, and the organisation and role you were invited to.
- Google accounts you connect: their email address, the permissions you granted, and an access token that lets us read the sources you chose. The token is stored encrypted.
- Content of the sources you connect, read-only:
- Gmail: messages from the last 12 months (sender, recipients, subject, text, names of attachments). Messages in Trash or Spam are not kept.
- Google Calendar: events from one year back to one year ahead (title, time, place, description, organiser and guests).
- Google Drive: only the files in the folders selected for your account or organisation (name, folder path, owner, modification time and the text in the file, including text recognised in scanned PDFs).
- Derived data: the text split into short passages and, for each passage, a numerical representation ("embedding") used to find it by meaning.
- Logs: the searches your assistant sends us (kept 90 days), technical records of processing jobs (kept 30 days) and web server logs (IP address, time, page; secrets in sign-in links are removed).
We only read: we never send, change or delete anything in your Google accounts.
What we use it for
Only to provide the service you asked for: keeping a search index of your connected sources up to date and answering the searches of the AI assistant you connected to Recontexture. We do not sell data, do not use it for advertising and do not use it to build profiles for anyone else.
Who can see it
- Personal accounts: only you.
- Company accounts: files in the Drive folders your organisation's administrator selects are searchable by all members of the organisation. Gmail and Calendar items are searchable only by the person they come from. The administrator can change these settings for the organisation; the account page always shows who can see each source.
- Your AI assistant: when it searches, the matching passages are sent to it (for example to Anthropic for Claude) and are handled under your agreement with that provider.
Service providers
- Hetzner Online (Germany): the servers that run Recontexture.
- Neon (database hosted on Amazon Web Services in Frankfurt, Germany): stores the index.
- Voyage AI (United States): computes the embeddings. It receives passages of text, returns the embeddings and keeps nothing (zero data retention; our account is opted out of storage and model training).
- Google: the source of the data you connect, under Google's own terms.
Google user data
Recontexture's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
We do not use data obtained through Google Workspace APIs (Gmail, Calendar, Drive) to develop, improve or train generalised or non-personalised AI or machine-learning models, and we do not transfer it to anyone for that purpose. The only processing of this kind is computing embeddings for your own search index, at a provider that keeps nothing.
How long we keep it
- Content and its index: as long as the source stays connected. When something is deleted in your Google account, it is removed from the index at the next synchronisation.
- Disconnecting a source on your account page deletes everything indexed from it; disconnecting a whole Google account also revokes our access at Google.
- Deleting your account (write to us) deletes your data, revokes all access and, for a personal account, everything else related to it. In a company, files the organisation shared stay with the organisation.
- Logs: 90 days for searches, 30 days for processing records, a few weeks at most for web server logs.
Security
All connections are encrypted (HTTPS). Access tokens for your Google accounts are encrypted with a key that is not stored in the database. Every search is limited to what the signed-in person may see.
Your rights
You can ask to see, correct, export or delete your data, object to or restrict its processing, and withdraw your consent at any time by disconnecting your sources or writing to us. You can also complain to a data protection authority (in Switzerland the FDPIC, in the EU the authority of your country).
Children
Recontexture is not meant for people under 16.
Changes
We will update this page when what we do changes and show the date at the top.