1. Information We Collect
We collect information that you provide directly:
- Account data: Name, email address, and password when you register
- Content: Audio files, comments, transcriptions, and documents you upload
- Payment data: Billing information processed securely by Stripe — we never store card details
- Usage data: How you interact with the Service, collected to improve your experience
2. How We Use Your Information
- Provide, maintain, and improve the Service
- Process transactions and send billing notifications
- Send product updates and feature announcements (you can opt out)
- Respond to support requests
- Detect and prevent fraud or abuse
3. Data Storage & Security
Your audio files and attachments are stored on Cloudflare R2. Application data is stored in Supabase (PostgreSQL). All data is encrypted in transit via TLS and at rest. We follow industry-standard security practices to protect your information.
4. Third-Party Services
We use trusted third-party services to operate the platform:
- Supabase: Authentication and database
- Cloudflare: File storage and content delivery
- Stripe: Payment processing
- Resend: Transactional emails
- OpenAI and Anthropic: Audio transcription (OpenAI Whisper) and AI-powered workspace features — see our AI Transparency page for details
These providers process data on our behalf under strict agreements. We do not sell your data to third parties.
5. Google Integration & User Data
Cuevue offers optional integrations with Google services. When you connect a Google account, we access only the data you explicitly authorize through Google's consent screen. Here is how we use each service:
- Google Drive (drive.file): Import and export audio/video files you select through the Google Picker. We only access files you explicitly choose — we do not browse, scan, or index your Drive.
- Google Calendar (calendar.readonly, calendar.events.readonly): Read-only access to sync selected calendars into Cuevue's production schedule. We do not modify or delete calendar events.
- YouTube (youtube, youtube.upload): Publish finished productions directly to your YouTube channel with metadata, scheduling, and playlist management.
- Gmail (gmail.send): Send review links and collaboration invitations to team members via your Gmail account. We only send emails you initiate — we do not read your inbox.
Google OAuth tokens are encrypted at rest using AES-256-GCM. You can disconnect any Google service at any time from your account settings, which immediately revokes our access. We do not sell, share, or transfer Google user data to third parties, use it for advertising, or retain it after disconnection.
Cuevue's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6. Cookies
We use essential cookies for authentication and session management. We do not use third-party advertising or tracking cookies.
7. Data Retention
We retain your data for as long as your account is active. When you delete your account, we remove your personal data and content within 30 days, except where required by law.
8. Your Rights
You have the right to:
- Access and export your data
- Correct inaccurate information
- Request deletion of your account and data
- Opt out of marketing communications
9. Changes to This Policy
We may update this policy from time to time. We will notify you of material changes via email or through the Service.