Privacy Policy

Our privacy policy and how we use your data

Last updated: September 2026

Who we are

Context (contextfor.me) is a campaign management tool for music and culture marketers, built and operated by In Cahoots Group Pty Ltd (ABN 12 687 932 949), based in Victoria, Australia.

What data we collect

When you create an account, we collect:

  • Account info, your name and email address, provided during sign-up via email, magic link, or Google OAuth
  • Campaign data, project names, budgets, briefs, dates, notes, and anything else you enter into the tool
  • Integration tokens, OAuth tokens for connected services (Spotify, Meta, Google, Eventbrite, Harvest), stored encrypted in Supabase so we can pull your data on your behalf. You can disconnect any integration at any time.

How we use your data

Your data is used to:

  • Provide and operate the service: authenticate you, sync your campaigns, display your dashboards
  • Pull data from connected integrations on your behalf
  • Improve the product. We look at aggregate usage patterns, not individual campaign data
  • Send transactional emails about your account via Resend. You can unsubscribe from non-essential emails at any time
  • Power the AI assistant, described below

We do not sell your data. We do not share it with advertisers. We do not use it for profiling or retargeting.

Data storage

Your data is stored in a Supabase PostgreSQL database hosted in the ap-southeast-2 (Sydney, Australia) region. All data is transmitted over HTTPS. Authentication is handled by Supabase with industry-standard security practices.

AI data processing

Context includes an AI assistant (Ask Context) powered by Claude (Anthropic) with OpenAI embeddings. Here's how your data is handled:

  • Your queries are sent to Anthropic and OpenAI to generate responses
  • Your campaign data is not used to train AI models
  • AI responses are generated on demand and not stored permanently
  • Queries are not sent to third parties beyond those API calls, which process them under their standard API data retention policies
  • You can opt out of AI features entirely by not using them

Integrations and Google data

When you connect third-party integrations, Context accesses your data via read-only access. We do not modify your data on connected platforms. This applies to all Google integrations (YouTube Analytics, Google Analytics, Google Ads, Google Drive, Google Sheets), Spotify for Artists, Meta Ads, Eventbrite, and Harvest.

OAuth tokens are stored encrypted in Supabase. You can disconnect any integration at any time from your account settings, which revokes our access.

Ticketing data from Moshtix, Oztix, and Humanitix is imported manually by you via CSV or PDF. We don't maintain live connections to these services.

Cookies and local storage

Context uses minimal cookies. We don't use marketing cookies, analytics cookies, or tracking pixels. See our Cookie Policy for the detail.

Data retention

Your data is kept for as long as your account is active. If you want your data deleted, ask and we'll take care of it.

Your rights

You have the right to:

  • Access the personal data we hold about you
  • Correct any inaccurate information
  • Delete your data. We'll remove your account and all associated data on request
  • Export your data in a portable format
  • Withdraw consent for data processing at any time

To exercise any of these rights, email hello@contextfor.me. We'll respond within a reasonable timeframe.

Australian Privacy Principles

We comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth). We collect only what we need, use it for stated purposes, store it securely, and give you access to it on request.

International users

If you're using Context from outside Australia, including from the EU or EEA:

  • Your data is stored in Australia, in the Sydney region
  • We don't sell your data to anyone
  • You can request access to, correction of, or deletion of your data at any time
  • We don't do behavioural profiling or automated decision-making

While we're an Australian business and not formally subject to the GDPR, we respect the principles behind it and handle your data accordingly.

Data security

All data is transmitted over HTTPS. Authentication is handled by Supabase with industry-standard security. OAuth tokens for integrations are stored securely in our database with row-level security enabled.

Changes to this policy

We may update this policy from time to time. If we make material changes, we'll let you know via email or an in-app notification. The date at the top reflects the most recent revision.

Contact

Questions about your data or this policy? Email hello@contextfor.me.

In Cahoots Group Pty Ltd, ABN 12 687 932 949, Victoria, Australia.