Privacy Policy

Last updated: June 1, 2026

1. Introduction

ctxshare ("we", "us") is committed to protecting your privacy. This policy explains what data we collect, why, and your rights.

2. Data We Collect

Account data:

• Email address
• Full name (optional)
• Password (stored as a one-way hash — we cannot read it)

Usage data:

• Messages and content you write to flows
• API keys (stored as hashes — we cannot read the plaintext)
• IP addresses (for security and audit purposes)
• Browser and device information (user agent)
• Timestamps of actions

3. How We Use Your Data

• To provide, maintain, and improve the Service
• To authenticate you and secure your account
• To send transactional emails (verification, password reset, security alerts)
• To detect and prevent abuse, fraud, and security threats
• To comply with legal obligations

We do NOT:

• Sell your data to any third party
• Use your data for advertising
• Read your message content except for security investigations
• Share your data except as described in this policy

4. Third-Party Services

We use the following third-party services to operate:

AWS (Amazon Web Services):

• Hosts our servers and database
• Sends transactional emails via SES
• Privacy policy: aws.amazon.com/privacy

Cloudflare:

• Protects our network and routes traffic
• Privacy policy: cloudflare.com/privacypolicy

These providers may process your data as part of providing their services to us. We have agreements with them to protect your data.

5. Data Retention

• Account data: retained until account deletion
• Messages: retained until deleted by you or account deletion
• Audit logs: retained for 12 months for security purposes
• After account deletion: data removed within 30 days

6. Your Rights

You have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Request deletion of your account and data
• Object to processing of your data
• Data portability

To exercise these rights, contact: [email protected]

We will respond within 30 days.

7. Security

We implement industry-standard security measures including:

• Encryption in transit (HTTPS/TLS)
• Argon2 password hashing
• HMAC-SHA256 API key hashing
• Secrets stored in AWS Secrets Manager
• Rate limiting and brute-force protection
• Audit logging of all actions

No system is 100% secure. In the event of a data breach that affects your rights, we will notify you as required by law.

8. Cookies

See our Cookie Policy at ctxshare.com/cookies

9. Children

The Service is not directed to children under 18. We do not knowingly collect data from children.

10. Changes

We may update this policy. We will notify you of significant changes by email. Continued use constitutes acceptance.

11. Contact

For privacy-related requests: [email protected]