1. Information We Collect
We collect information that you provide directly:
- Account data: Name, email address, and password when you register
- Content: Audio files, comments, transcriptions, and documents you upload
- Payment data: Billing information processed securely by Stripe — we never store card details
- Usage data: How you interact with the Service, collected to improve your experience
2. How We Use Your Information
- Provide, maintain, and improve the Service
- Process transactions and send billing notifications
- Send product updates and feature announcements (you can opt out)
- Respond to support requests
- Detect and prevent fraud or abuse
3. Data Storage & Security
Your audio files and attachments are stored on Cloudflare R2. Application data is stored in Supabase (PostgreSQL). All data is encrypted in transit via TLS and at rest. We follow industry-standard security practices to protect your information.
For a detailed description of our controls — workspace isolation, share-link protections, encryption, and our current compliance status — see our Security page.
4. Third-Party Services
We use trusted third-party services to operate the platform:
- Supabase: Authentication and database
- Cloudflare: File storage and content delivery
- Stripe: Payment processing
- Resend: Transactional emails
- OpenAI and Anthropic: Audio transcription (OpenAI Whisper) and AI-powered workspace features — see our AI Transparency page for details
These providers process data on our behalf under strict agreements. We do not sell your data to third parties.
5. Google Integration & User Data
Cuevue offers optional integrations with Google services. When you connect a Google account, we access only the data you explicitly authorize through Google's consent screen. Here is how we use each service:
- Google Drive (drive.file): Import audio/video files you pick through the Google Picker, and export files and folders that Cuevue creates. We can only reach files you explicitly select and files Cuevue itself created — we do not browse, scan, or index the rest of your Drive.
- Google Calendar (calendar.readonly, calendar.events): List your calendars so you can choose which ones sync into Cuevue's production schedule, read events from the calendars you select, and — if you grant write access — create, edit, move, resize, or delete an event when you explicitly do so in Cuevue. Those writes can cover the event's title, description, location, colour, schedule, guest list, and Google Meet link. We only write to events you act on yourself, and guests are notified only when you choose to send them an update. Connections made before August 2026 may instead hold the older calendar.events.readonly scope, which we still honour for reading.
- YouTube (youtube, youtube.upload): Upload finished productions to your channel (youtube.upload), then set each video's title, description, visibility, scheduled publish time, and playlists (youtube). To do that we read your channel name, your existing playlists, and the metadata of videos uploaded through Cuevue. We do not read your watch history, subscriptions, or analytics.
- Gmail (gmail.send): Send review links and collaboration invitations to team members via your Gmail account. We only send emails you initiate — we do not read your inbox.
Google OAuth tokens are encrypted at rest using AES-256-GCM. You can disconnect any Google service at any time from your account settings, which immediately revokes our access. We do not sell, share, or transfer Google user data to third parties, use it for advertising, or retain it after disconnection.
Cuevue's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.
7. Data Retention
We retain your data for as long as your account is active. When you delete your account, we remove your personal data and content within 30 days, except where required by law.
8. Your Rights
You have the right to:
- Access and export your data
- Correct inaccurate information
- Request deletion of your account and data
- Opt out of marketing communications
9. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or through the Service.