Privacy Policy

1. What we collect

We collect a small amount of usage data to understand how the product is used and to keep improving it. Specifically:

• Account data: email address and authentication credentials (managed by Supabase Auth). Passwords are never stored in plain text.
• Usage events: anonymous events such as page views, file uploads, processing starts/completions, and billing flow actions. These are sent to our analytics providers (see §3).
• Job data: audio/video files and generated transcripts you submit. Files are stored in Google Cloud Storage and deleted according to our retention policy.
• Billing data: payment status and transaction identifiers. Card numbers never touch our servers — they are handled entirely by our payment provider.
• Device fingerprint (guests only): when you use the free trial without signing in, we compute a browser fingerprint (FingerprintJS, open-source MIT) to prevent the trial from being reused indefinitely by clearing cookies. We store only a salted one-way hash of the fingerprint — never the raw value — and use it solely for this abuse protection. It is not used for advertising, cross-site tracking, or analytics, and it is not linked to your account if you later sign in.

2. Cookies and consent

We use cookies and similar storage for analytics only. When you first visit, you'll see a banner asking for consent. You can choose:

• Accept — analytics cookies are stored on your device.
• Necessary only — only essential storage is used; analytics runs in cookieless mode (page views are still counted, but not linked to a persistent identifier).

Your choice is stored on your device for 12 months, after which you'll be asked again. You can revoke consent at any time by clearing site storage in your browser.

3. Third-party processors

We use the following third-party services that may process limited personal data when you use the product:

• Google Analytics 4 (Google's cookie policy) — web analytics. Stores cookies _ga and _ga_* (up to 14 months) only if you consent.
• Umami Cloud (Umami privacy) — privacy-friendly, cookieless web analytics.
• Supabase — authentication and account storage.
• Google Cloud — application hosting and file storage.
• lava.top — payment processing.

4. Data retention

Audio/video files and generated transcripts are deleted automatically after a fixed retention window. Account data is kept until you request deletion. Analytics data is retained according to each provider's default retention policy (GA4: 14 months; Umami: per their plan).

5. Your rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA, etc.), you may have the right to access, correct, export, or delete your personal data. To exercise any of these, email us at the address below.

6. Contact

Questions or requests about privacy? Email support@cuealign.com. We respond within 3 business days.