Privacy Policy
Last updated: 2026-09-29
This Privacy Policy explains what personal data ContextOwl (a product of Parikshram Technologies Pvt Ltd, registered in Bangalore, Karnataka, India, "we," "us," or "our") collects, why, and what rights you have over it. It applies to contextowl.com, the report widget, and the customer/agency dashboard.
1. What we collect
| Category | What | When |
|---|---|---|
| Identity | Email address | When you verify via one-time passcode (no password is ever collected — we don’t have one to lose) |
| Account/report data | Brand URL, competitor names, prompts, engine selections, agency/brand profile (logo, name, tagline if you’re an agency user) | When you configure a report |
| Payment records | Transaction records, line items, currency/locale at time of purchase | When you complete a purchase — we never see or store your card details; Razorpay handles that directly (PCI-DSS compliant) |
| Usage data | Pages viewed, widget step reached/abandoned, report generation status, IP address, browser/device info | Automatically, as you use the Service |
| Communications | Support requests, feedback you send us | When you contact us |
We do not independently scrape or collect data about your competitors’ websites — competitive insight in your report comes entirely from analyzing AI engine responses (mentions, citations, sentiment), never from an independent audit of a competitor’s site. This is a deliberate product boundary, not just a privacy one.
2. How we use it
- To generate your report: your brand URL is scraped and classified (via Firecrawl) to suggest competitors/attributes; your configured prompts are sent to third-party AI systems (OpenAI, Google, Perplexity, and any additional engines you add) to produce the analysis.
- To operate your account: sign-in, report history, billing history.
- To process payment: transaction records via Razorpay.
- To send transactional email: one-time passcodes, receipts, report-delivery links, and (only if you’ve reached checkout without purchasing) a one-time reminder email surfacing a real insight from your own report. Transactional email is never optional — it’s how the Service functions. You can opt out of non-transactional/remarketing email at any time from your dashboard notification settings.
- To improve the Service: aggregated, de-identified usage patterns (e.g., where people drop off in the widget) — never sold, never used to build a profile of you for advertising.
4. Data retention
We keep your account and report data for as long as your account is active, plus a reasonable period afterward for legal, tax, and dispute-resolution purposes. If you delete your account, we delete or anonymize your personal data within 30 days, except where we’re required to keep transaction records longer for tax/accounting law.
5. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise any of these, contact us at team@contextowl.com. We’ll verify your identity before acting on a request.
If you’re in the EU/EEA/UK (GDPR): our legal bases for processing are: performing our contract with you (generating your report, processing payment), our legitimate interests (improving the Service, preventing abuse), and your consent (marketing email). You have the right to lodge a complaint with your local data protection authority.
If you’re a California resident (CCPA/CPRA): we collect identifiers, account/report data, commercial (transaction) information, and internet activity, as described in the table above. We do not sell your personal information, and we do not knowingly share it in a way that would constitute a "sale" or "share" under CCPA/CPRA. You have the right to know, delete, correct, and opt out of any future sale/sharing, and the right to non-discrimination for exercising these rights.
If you’re in India: we process your personal data as a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (DPDPA). We collect and use your data only for the purposes stated in this policy, on the basis of your consent or as otherwise permitted under the Act. You have the right to access your data, seek correction or erasure, and withdraw consent at any time (withdrawal doesn’t affect processing already carried out lawfully before that point, or our ability to retain records required by other law, like transaction records). You can also register a complaint with our Grievance Officer (contact below) and, if unresolved, with the Data Protection Board of India. This section reflects the DPDPA, 2023 as currently in force; we’ll update it if the Act’s implementing rules, once notified, materially change our obligations.
6. Security
We use industry-standard measures to protect your data (encryption in transit, access controls on our infrastructure). No method of transmission or storage is 100% secure, and we can’t guarantee absolute security — but we treat this seriously and will notify affected users if we become aware of a breach affecting personal data, as required by applicable law.
7. International data transfers
Our infrastructure providers (Supabase, Vercel, OpenAI, Google, Perplexity, and others listed above) may process data outside your country of residence. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.
8. Children’s privacy
ContextOwl isn’t directed at anyone under 18, and we don’t knowingly collect personal data from anyone under that age. If you believe a minor has provided us data, contact us and we’ll delete it.
10. Changes to this policy
We’ll update the "Last updated" date above when this policy changes, and where the change is material, we’ll give you more direct notice (e.g., an email) before it takes effect.
11. Contact
Questions or requests about your data: team@contextowl.com
Grievance Officer (designated under the IT Rules, 2021 and the DPDPA, 2023): Director, reachable at grievances@contextowl.com.