What we keep, where it lives, and how to make it go away.

sudorigin is responsible for it.

The controller of the data described here is sudorigin, the trading name of an independent developer ("we"); our legal name and address are on file with Paddle, our merchant of record, and available on request. For the people you write about in your notes, you decide what to record and why, so for that information we act on your instructions and you carry the responsibility toward them; section 05 says what that means in practice.

Questions, requests and complaints: support@sudorigin.com. We answer within five business days.

No cookies, no analytics. One form, and the fonts.

Hosting. This site is served by Netlify (Netlify, Inc., United States). Netlify keeps standard server logs, including your IP address and the pages you request, for its own security and operations under its privacy policy. We do not read those logs and set no cookies of our own.

The application form. When you send the form on the apply page, Netlify Forms stores what you typed and passes it to us: your email address (the only required field), and, if you filled them in, your segment, the deals you work, a rough contact count, how you track people today, how you heard about us, and what you want from us. The form also records which link you arrived from (the utm values in the address and the referring page) so we can tell one outreach message from another. We use all of it for one purpose: to reply to you and decide about a seat. It stays in Netlify and in our mailbox for as long as we are in conversation, and at most twelve months after the last message, unless you become a customer.

Fonts. The page loads its typefaces from Google Fonts. Your browser sends Google your IP address to fetch them. Google's terms for the service are here. Nothing else on the site calls a third party; the demo video is served from this site.

Email. Mail to and from any sudorigin.com address is hosted by Zoho Mail (Zoho Corporation).

Your Telegram identity, your notes, and what we extract from them.

Your account	Your Telegram user ID and the name Telegram shows for you. That is the whole login; there is no password and no email on the account today. Telegram itself sees your messages to the bot under Telegram's privacy policy.
Notes	Every text message and every voice transcript you send the bot, kept verbatim and in order. Notes are immutable by design; corrections are recorded beside them, and the erasure paths in section 07 are the only things that remove one.
Voice audio	The audio file of a voice note is written to a private disk before transcription, so a crash cannot lose your capture, and deleted the moment the transcript is saved. It is retained only when transcription fails, so you can retry, and then it is removed on the retry or on erasure. At steady state we hold almost no audio.
Extracted facts	What the models pull out of each note: the people and companies named, what they want or offer with amounts, locations and timing, and personal context you stated about them. Each extraction is shown to you as a card and saved only when you approve it. You can correct or remove any fact afterwards.
Embeddings	Numeric vectors computed from your notes and facts so matching can find "wants an HVAC group" beside "selling an HVAC group". They are derived from your data, stored with it, and deleted with it.
Matches and drafts	The matches the system proposes, the evidence it cites, the introduction drafts it writes, and any deal outcome you record. Drafts are never sent by us to anyone.
Operational logs	Application logs with timestamps, account IDs and error messages, kept for thirty days on the hosting platform. They do not contain note text. Erasure logs record counts and record IDs, never names.

Six processors. Each named, each with a reason.

Railway	Runs the bot, the API and the database (PostgreSQL) in the United States. Customer data on Railway is encrypted at rest at the storage level. Railway privacy.
OpenAI	Transcribes voice notes, extracts facts from notes, writes briefs and introduction drafts, and computes embeddings, through the OpenAI API. Under OpenAI's API terms, data sent to the API is not used to train its models, and inputs and outputs are retained by OpenAI for up to thirty days for abuse monitoring, then deleted. OpenAI enterprise privacy.
Cloudflare	Holds a nightly backup of the database in Cloudflare R2 object storage. Each backup is encrypted before it leaves Railway, to a key whose private half is kept offline and never on any machine the service can reach. Backups are kept on a rolling window and expire within thirty days. Cloudflare privacy.
Telegram	The channel you talk to the bot through. Telegram delivers your messages and voice files to us and holds its own copies under its own policy. We cannot delete what Telegram keeps on its side of the chat; you can, from your Telegram client.
Paddle	Our merchant of record. When you buy a plan, Paddle collects your name, email, billing country and payment details, issues the invoice and handles tax. We receive your name, email, plan and payment status, never your card number. Paddle privacy.
Netlify, Zoho, Google Fonts	The website, email and font providers described in section 02.

No other company receives your data. We do not sell it, do not share it for advertising, and do not enrich your contacts from data brokers. We disclose data outside this list only if the law compels us, and we tell you first where the law allows.

Transfers. Your data is stored and processed in the United States. Where you are in the EU, the UK or another country whose law requires a transfer mechanism, we rely on the standard contractual clauses in each processor's data processing agreement, which we sign as part of the account.

They are your contacts, not ours. We never reach them.

Almost everything in Contexta is about someone other than you: a buyer, a seller, a lawyer, a founder you had coffee with. You chose to record them, so you are responsible for having a lawful basis to do so where you operate, and for how you use what Contexta suggests. We hold that information only to run the service for you.

Concretely: we never contact or message anyone on your behalf, never send a draft, never notify a person that they appear in your notes, never combine your notes with another customer's, and never look people up in outside sources to add to what you said. A person who appears in your notes exists, to us, only inside your account.

If someone named in your notes asks us what we hold about them, we tell them who to ask: you. If you instruct us to delete a person, the per-contact delete removes their record and every note that mentions only them; a note that also names someone else stays, because it is that other person's record too, and we tell you which ones.

Kept while you use it. Gone within thirty days of asking.

While active	Your notes, facts, matches and drafts are kept for as long as your account exists, because remembering is the product.
Per contact	A delete command in the bot removes one person, their facts, and every note that is only about them, at once.
Whole account	Email support@sudorigin.com. We send you an export first if you want one, then delete the account and everything under it from the live database within thirty days. Encrypted backups that still contain it expire within a further thirty days and are never restored except to recover from a disaster, in which case we re-apply your deletion.
After cancelling	If you cancel without asking for deletion, the account is kept for ninety days so you can come back, then deleted as above.
Billing records	Paddle keeps invoices and tax records for the period its own law requires. We keep the same invoices for as long as tax law requires us to.

One account cannot see another. The database is not on the internet.

Every row in the database carries your account, and the database itself enforces that a query from your account can only read your rows. The database and the API are not reachable from the public internet. Backups are encrypted with a key held offline. Model calls carry only the content needed for each task. Access to production is limited to the people who operate the service and is logged.

No system is perfectly secure. If we learn of a breach that affects your data, we tell you by email within seventy-two hours of confirming it, say what was exposed, and say what we did. Where the law requires, we also notify the relevant authority.

Your rights: access, export, correction, deletion, objection.

Wherever you live, you can ask us to tell you what we hold about you, to send it to you as files you can open, to correct it, to delete it, to stop processing it for a given purpose, or to explain a decision the software made about you. Under the GDPR, the UK GDPR, California's CCPA and the privacy law of the country we operate from these are rights, and you have the further right to complain to your local data-protection authority. We honour them for everyone, not only where the law forces us to.

Email support@sudorigin.com from the address on your account, or message the bot. We reply within five business days and complete the request within thirty. We do not charge for it and do not treat you differently for asking.

Our legal basis, where one is required: performing our contract with you (running the service, billing, support), our legitimate interest in keeping the service secure and in replying to people who write to us, and compliance with tax law. We do not rely on consent for anything except marketing email, which we send only if you ask for it and stop the moment you say so.

Not for anyone under 18. Changes announced by email.

Contexta is a business tool. We do not knowingly collect data from anyone under 18; if you believe we have, tell us and we delete it.

We update this policy when the product or its processors change. A material change is announced by email at least fourteen days before it takes effect, and the date at the top is the version in force. Old versions are available on request.