Privacy Policy

This policy covers two things: the CtxCore website (ctxcore.io) and CtxCore Relay, our email and communication automation platform. If you just requested a call through the contact form, only the first part applies to you.

Who's responsible for your data

Stefan Parge, trading as CtxCore. Reach me at stefan@ctxcore.io. There's no separate data protection officer — for a business this size, that's me too.

The website

The contact form sends your name, email, company, and message to my inbox via Resend. I use that to reply to you and for nothing else. It isn't added to a mailing list.

The site uses Google Analytics (gtag.js) to see which pages get read and where visitors come from. Analytics runs on all pages, including this one.

CtxCore Relay

Relay lets a business connect its email and messaging accounts so the platform can help draft and manage replies. What Relay stores depends on how you use it.

Signing in with Google

Relay's login only asks Google for your account ID, email address, and name (the openid, email, and profile scopes). This is used to create or match your Relay account and to sign you in. Signing in this way does not give Relay access to your email or any other Google data.

Connecting a Gmail account

If you separately connect a Gmail account inside Relay's admin panel, you're granting a different, broader set of permissions: reading messages in that mailbox and sending messages from it on your behalf. Relay only requests this when you explicitly start that connection — it's never bundled with login.

Relay's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Relay does not use Gmail data to serve advertising, and no human reads your messages except where needed to service a support request you've raised, or where required by law.

You can revoke Relay's access at any time from Relay's admin panel or directly at myaccount.google.com/permissions.

Where your data lives

Relay's database and email processing run on AWS in Stockholm (eu-north-1). OAuth tokens are encrypted at rest. Outbound platform email goes through AWS SES. None of this data leaves the EU except for the calls Relay itself makes to Google's or Microsoft's APIs on your behalf, which are necessary for the connector to work.

How long we keep it

Connection credentials and message data are kept for as long as your account or channel connection stays active. Disconnecting a channel or closing your account deletes the associated tokens. Contact form submissions are kept only as long as needed to handle your inquiry.

Your rights

Under GDPR you can ask to see what we hold on you, correct it, delete it, or object to how it's processed. Email stefan@ctxcore.io and I'll handle it directly — usually within a few days, not weeks.

Changes

If this policy changes in a way that matters, I'll update the date at the top and, for Relay users, note it in the app.

Contact

Questions about this policy: stefan@ctxcore.io.