IntentOne

Privacy Policy

Introduction

ContextOne, Inc. ("we", "our", "us") operates IntentOne, a macOS desktop application that helps users communicate using voice input, AI-assisted writing, call recording, and a local personal CRM. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

We built IntentOne with a local-first architecture — the majority of your data, including all audio and your entire CRM, never leaves your device. The text we do send to our backend for AI processing is not stored.

Data We Collect

Data That Stays On Your Device (never sent to our servers)

All local data is scoped per signed-in user under ~/Library/Application Support/IntentOne/{your-user-id}/.

Data Sent to Our Backend (processed, not stored)

To provide AI features, the following content is sent to our backend, passed to our AI provider, and discarded after the response is returned. We do not store, log, or retain this content in production.

• The text you want to polish, rewrite, or draft (your dictation or typed message)
• Conversation context you explicitly added (via Cmd+C or screen capture)
• App context (e.g., "Slack", "Email" — so the AI adjusts tone appropriately)
• Your profile summary (the "About You" text you entered, if any)
• Contact context (name and relationship summary for the person you're writing to, if detected)
• Call transcript text — after a call is transcribed on-device, the resulting transcript text (not the audio) is sent to generate summaries, identify speakers, and extract context
• Imported message text — when you import a message export, message text is sent in batches to segment conversations into topics and (if you opt in) extract relationship context. Raw message archives stay on your device.
• Screenshots for contact identification — when a feature needs to determine who you're messaging, a screenshot of the active window may be sent to the AI provider for one-time identification (see System Permissions below)

Audio is never sent to our servers. All transcription and speaker diarization happen on your device.

Data Stored on Our Servers

We do not store message content, transcriptions, audio, contact names, imported messages, or any personal CRM data on our servers.

System Permissions

IntentOne requires the following macOS permissions to function. You can revoke any permission at any time via System Settings → Privacy & Security.

Accessibility

What it does: Detects focused text fields so IntentOne can place input controls near them, and injects polished text back into the field after processing.

What it does not do: Does not read other text fields, does not log keystrokes, does not monitor input outside of active IntentOne interactions.

Microphone

What it does: Records your voice when you explicitly activate recording (by clicking the mic button, holding the Push-to-Talk key) and records your microphone track when you start a call recording.

What it does not do: Does not record in the background. Audio is transcribed entirely on your device and is never sent to any server.

Screen Recording

What it does: Used for two opt-in features:

• Auto screen context: captures a screenshot of your active window when you start recording. The screenshot is processed on-device via OCR to extract visible text as context. A screenshot may also be sent to our AI provider for one-time contact identification (determining who you're messaging).
• Call recording (system audio): captures the audio your Mac is playing (the other participants' voices) so calls can be recorded and transcribed on-device.

What it does not do: Does not record video, does not capture continuously outside of an active recording, does not capture windows other than the active foreground window for screenshots.

Full Disk Access (optional)

What it does: Required only if you choose to import your iMessage history. It lets IntentOne read your local Messages database (chat.db) to build relationship history on your device.

What it does not do: Is not required for any other feature. iMessage data is read locally; raw messages stay on your device.

Call Recording

Call recording is an opt-in feature you start manually, with a one-time consent acknowledgment before first use.

• Audio never leaves your device. Both tracks (your mic and system audio) are recorded, transcribed, and diarized entirely on-device.
• After transcription, the transcript text (not the audio) may be sent to our AI provider to generate summaries, identify speakers, and extract context — then discarded.
• A floating indicator is shown while recording, and the indicator is hidden from screen-shares.

Your responsibility: Recording laws vary by jurisdiction and some require the consent of all parties. You are solely responsible for complying with the laws that apply to you and for obtaining any consent required before recording a call. See our Terms of Service.

Importing Message History

You can optionally import message exports from LinkedIn, Telegram, WhatsApp, or iMessage to enrich your CRM with relationship history.

• Raw message bodies are stored only on your device (in per-platform local archives).
• To organize imports, message text is sent to our backend in batches to segment conversations into topics; if you opt in to message-based enrichment, message text is also sent to extract relationship context. This text is processed and discarded — it is not stored on our servers.
• Only you control which exports you import. You should only import data you have the right to use.

Lead Research, Enrichment & Prospecting

IntentOne can enrich contacts and research people using public data sources. When you use these features, a name, company, or LinkedIn URL you provide is sent to third-party data providers to return publicly available profile and web information.

• Apify — retrieves publicly available LinkedIn profile data, recent posts, and X/Twitter data
• Serper.dev — performs Google searches to discover public sources
• GitHub public API — retrieves public developer profiles
• trafilatura (on-device) — extracts content from public web pages

These features return publicly available information about third parties into your local CRM. You are responsible for using this information lawfully and in accordance with the source platforms' terms.

Connecting External Services (MCP)

IntentOne lets you connect external Model Context Protocol (MCP) servers. When you connect and use a server, data you send to it flows to that third party under its privacy practices, not ours. You control which servers you connect; authentication tokens are stored in your macOS Keychain.

How We Use Your Data

• To provide the service: Processing your text, transcripts, and imports through AI for polishing, drafting, summarizing, and CRM enrichment
• To manage your account: Authentication, subscription and credit management, billing
• To track usage for billing: Token counts, credit consumption, and processing costs (no message content)
• To improve the service: Aggregate, anonymized usage statistics (e.g., feature reliability and processing times)

How We Share Your Data

We share data only with the third-party services required to operate IntentOne (our subprocessors):

Anthropic's Data Policy

Anthropic operates under a Zero Data Retention (ZDR) policy for their Messages API. This means:

• Your text is not stored by Anthropic after processing
• Your text is not used to train Anthropic's AI models
• Anthropic processes your request and discards it

We Do NOT

• Sell your data to third parties
• Share your data for advertising purposes
• Use your message content, transcripts, or imports for AI model training
• Share your personal CRM data with anyone
• Provide data to data brokers

Data Retention

Data Security

• In transit: All communication between the app and our servers uses TLS 1.2+ encryption
• Auth tokens: Stored in macOS Keychain (encrypted by the operating system)
• Local data: Protected by macOS app sandbox and FileVault (if enabled on your Mac)
• Payment data: Handled entirely by Stripe; we never process or store card numbers
• Production logging: No user content is logged in production — only metadata (token counts, costs, error codes)

Your Rights

Access and Portability

• Your CRM contacts, history, communication patterns, imports, and recordings are stored as local files that you can access directly on your Mac
• You can request a copy of your server-side data (account info, usage history) by contacting us

Deletion

• Account deletion: Available in the app (Settings → Account). Removes all server-side data (account, subscriptions, credit balance, usage history)
• Local data: Delete by uninstalling the app or removing ~/Library/Application Support/IntentOne/
• Stripe data: Managed through Stripe's data retention policies after account deletion

Correction

• Update your account information through the app or by contacting us

Objection and Restriction

• You can revoke any macOS permission at any time to restrict IntentOne's data access
• You can disable optional features (screen context, contact detection, call recording, imports) in Settings

Children's Privacy

IntentOne is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will delete it.

International Data Transfers

• Our backend runs on Google Cloud Platform (US region)
• Authentication is provided by Supabase (AWS-hosted)
• AI processing is provided by Anthropic (US-based)
• Research/enrichment providers (Apify, Serper.dev) process the public-data queries you initiate
• However: No message content, transcripts, audio, or imports are stored by these services. Only account metadata (email, name, subscription/credit status) is stored server-side.

Changes to This Policy

We may update this Privacy Policy as IntentOne evolves. We will notify users of material changes via the app or email. The "Last updated" date at the top indicates when the policy was last revised.

Contact Us

For privacy questions, data requests, or concerns:

• Email: rr@contextone.app
• Phone: +1 (650) 550-1240
• Address: 1111B S Governors Ave STE 40942, Dover, DE 19904