Legal
Privacy policy
Contexxt is a tool for design system teams. This page describes exactly what we store, why we store it, and how to get it removed. It reflects what the product does today, not what it might do later.
Who is responsible
The controller for this data is Contexxt. For anything in this policy, write to hello@contexxt.app.
Email from us
If you gave us your email address, for example by creating an account or by joining an earlier waitlist, we use it only to reach you about Contexxt. Every email carries a one-click unsubscribe link that works without signing in, and we never sell, rent or share your address.
Your account
Signing in is handled by Clerk, which stores your name, email address and, if you upload one, a profile photo. Inside Contexxt we store your workspace, its members and their roles, and the design systems you create.
What we never store
Contexxt reads your repository to derive a source of truth: tokens, component APIs and rules. Your source code is never stored, not in the database, not in logs, and not in error reports. Extraction runs in a worker that clones the repository, derives the specification and then discards the files. Only that derived specification is kept.
The same applies to feedback reported by CI and AI tools: we accept a rule name, a file path, a line number and a suggested token. Never a fragment of code.
Figma
When you import tokens or assets, your Figma token is used for that single request and then discarded. We store the file key, the source type and the resulting tokens, never the token itself.
Payments
Paid plans run through Stripe. Card details go straight to Stripe and never touch our servers. We store a Stripe customer reference, a subscription reference and which plan is active.
Who processes data on our behalf
- Clerk, for accounts and sign-in.
- Stripe, for payments, only once you subscribe.
- Resend, for sending email.
- Figma and GitHub, only when you connect them yourself.
- Our own database and application server, which we host ourselves.
Cookies
We set a session cookie through Clerk so you stay signed in, and we remember your light or dark preference in your browser. There is no advertising, no tracking pixel and no analytics script on this site.
How long we keep things
- Email addresses: kept until you unsubscribe and ask for removal.
- Workspace data: until you delete the workspace, which removes its systems, tokens, documentation and API keys immediately.
- Account data: managed by Clerk and removed when you delete your account.
Your rights
Under the GDPR you can ask for a copy of your data, have it corrected, have it deleted, object to its use, or withdraw your consent at any time. Write to hello@contexxt.app and we will respond within one month. You can also complain to the Autoriteit Persoonsgegevens.
Changes
If we change what we store or why, we update this page and the date at the top. If the change is significant, we tell you before it takes effect.