Privacy Policy
Effective Date: October 27, 2026 · Controller: ContextShim (https://contextshim.com)
1. Data Minimized at the Wire Edge
ContextShim evaluates outbound LLM payloads in transient Cloudflare Worker memory to match rules and apply context injections. Wire trace records stored in contextshim_traces retain cryptographic SHA-256 digests, protocol metadata, latency, token counts, and automatically redacted preview snippets.
2. Credential & BYOK Non-Persistence
Caller upstream provider keys (Authorization, x-api-key, x-upstream-key) are used strictly in-memory for the single upstream HTTP forward and are never written to D1, logs, or trace previews. Self-serve cshim_live_* developer keys are stored solely as irreversible SHA-256 hashes.
3. Retention & Deletion
Wire traces expire automatically according to plan tier (24 hours on Free Developer, 30 days on Pro, 90 days on Team). Customers may request immediate workspace purge at privacy@contextshim.com.