Privacy Policy

Cüe is built on a simple principle: your privacy is not negotiable. We do not collect your personal data. This Privacy Policy explains what little data we do process, why we process it, and your rights regarding that data.

1. Data Controller

For purposes of applicable data protection laws (including the GDPR), the data controller is:

2. What We Collect

Minimal Data Collection: Cüe is designed to collect as little data as possible. Here's what we do and don't collect:

Data We DO NOT Collect

The following data is never collected, transmitted, or stored on our servers:

• Script content: Your teleprompter scripts remain entirely on your device
• Voice recordings: Voice processing happens on-device only
• Usage analytics: We do not track how you use the application
• Screen content: We do not capture or record your screen
• Camera feed: Your webcam feed is processed locally, never transmitted
• Personal identifiers: Name, email, address (unless you contact us directly)
• Device identifiers: MAC address, serial number, hardware IDs

Data We DO Collect

The following data is collected for limited, specific purposes:

License Verification Data

• What: License key hash (not the full key)
• When: When you activate the application
• Why: To verify your license is valid and not in use on another device
• Legal basis: Contract performance (necessary to provide the licensed software)
• Retention: For the duration of your license

Support Communications

• What: GitHub username, issue content (if you contact us)
• When: When you open an issue on GitHub
• Why: To respond to your inquiries and provide support
• Legal basis: Legitimate interests (responding to customer inquiries)
• Retention: Up to 2 years for support history

3. Website Data Collection

When you visit our website (cue.muicci.com), the following data is collected:

Vercel Analytics

We use Vercel Analytics to understand aggregate traffic patterns. This data is anonymized and never tied to individuals:

• Page views: Which pages you visit (anonymized)
• Geographic region: Country-level location only (derived from IP, then IP is deleted)
• Browser/device: Browser type, operating system, device type
• Referrer: Which website referred you (if any)

Legal basis: Legitimate interests (understanding website usage to improve user experience)

Retention: Analytics data is retained for up to 90 days

See our Cookie Policy for more details.

4. Payment & Purchase Data (Polar.sh)

All payments are processed by Polar.sh, our Merchant of Record. We do not process or store payment information on our servers.

What Polar Collects

Polar.sh collects and processes:

• Payment card information (encrypted, PCI-compliant)
• Billing address
• Email address
• Purchase history
• Tax information (VAT ID, etc.)

See Polar's Privacy Policy for complete details.

What We Receive from Polar

Polar.sh shares the following with us:

• Purchase confirmation: That a purchase was made
• Tier purchased: Backer ($19), Champion ($39), or Legend ($79)
• Custom field data: Name and social platform/url you provide at checkout (for Wall of Legends)
• Email address: For license key delivery and purchase confirmation

Legal basis: Contract performance (necessary to deliver your purchase and license key)

Retention: Purchase records retained for tax and legal compliance (up to 7 years)

5. Why We Process Data (Legal Basis)

Under GDPR, we must have a legal basis for processing personal data. We rely on the following:

Contract Performance (GDPR Art. 6(1)(b))

We process data necessary to:

• Deliver your license key
• Verify license activation
• Provide customer support
• Process your purchase

Legitimate Interests (GDPR Art. 6(1)(f))

We process data for our legitimate interests in:

• Understanding website usage (analytics)
• Improving our products and services
• Responding to inquiries
• Preventing fraud and abuse

These interests do not override your privacy rights.

Legal Obligation (GDPR Art. 6(1)(c))

We process data to comply with:

• Tax and accounting requirements
• Consumer protection laws
• Legal requests from authorities

6. How We Share Data

We do not sell, rent, or trade your personal data. We share data only in the following circumstances:

Service Providers

We use third-party services to operate Cüe. These providers have access to limited data only as necessary to perform their functions:

• Polar.sh: Payment processing, license key generation, tax compliance
• Vercel: Website hosting, analytics
• GitHub: Software distribution, community features, support communications

All service providers are contractually obligated to protect your data and use it only for specified purposes.

Legal Requirements

We may disclose data if required by law, regulation, legal process, or government request. We will notify you of such requests unless legally prohibited.

Business Transfers

In the event of a merger, acquisition, or sale of assets, customer data may be transferred as part of the transaction. You will be notified via email or website notice before data is transferred.

7. International Data Transfers

Where Data Is Processed:

• Website: Hosted on Vercel (servers may be in US, EU, or other regions)
• Payments: Processed by Polar.sh (EU-based company, may transfer data internationally)
• Software distribution: GitHub (Microsoft, US-based with global infrastructure)

Safeguards: For transfers from the EEA to countries without adequate protection, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Service providers' certification under privacy frameworks (e.g., EU-U.S. Data Privacy Framework)

8. Your Data Protection Rights

Depending on your location, you have the following rights:

GDPR Rights (EU/UK Residents)

• Right of access: Request a copy of your personal data
• Right to rectification: Correct inaccurate or incomplete data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restriction: Request limitation of processing
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to processing based on legitimate interests
• Right to withdraw consent: Withdraw consent at any time (where processing is consent-based)
• Right to lodge a complaint: File a complaint with your local data protection authority

CCPA/CPRA Rights (California Residents)

• Right to know: Request disclosure of what personal information we collect, use, disclose, and sell
• Right to delete: Request deletion of personal information
• Right to opt-out: Opt out of the "sale" or "sharing" of personal information
• Right to correct: Correct inaccurate personal information
• Right to limit: Limit use and disclosure of sensitive personal information
• Non-discrimination: Not be discriminated against for exercising privacy rights

How to Exercise Your Rights

To exercise your rights, open an issue on our GitHub community repository with:

• Your name and contact information
• The right you wish to exercise
• Any relevant details (e.g., purchase email for access requests)

Response time: We will respond within 30 days as required by GDPR/CCPA.

Verification: We may need to verify your identity before fulfilling your request.

No fee: Exercising your rights is free, except for manifestly unfounded or excessive requests.

9. Do Not Sell My Personal Information

We do not sell your personal information. We never have and never will sell personal data to third parties for their marketing or commercial purposes.

Under CCPA, certain sharing for advertising purposes may be considered a "sale." We do not engage in such sharing. Our analytics (Vercel) is anonymized and does not constitute a sale.

10. Children's Privacy

Cüe is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16.

If we become aware that we have collected personal data from a child under 16, we will delete it promptly. If you believe a child under 16 has provided us with personal data, please open an issue on our GitHub community repository.

Age requirement: By using Cüe, you represent that you are at least 16 years old (or the age of digital consent in your country, if higher).

11. Data Security

We implement appropriate technical and organizational measures to protect personal data:

• Encryption: Data transmitted between your device and our servers is encrypted (HTTPS/TLS)
• Access controls: Limited access to any stored data
• Service provider vetting: We use reputable providers with strong security practices

No guarantee: While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

Breach notification: In the event of a data breach affecting your rights, we will notify you and relevant authorities as required by law.

12. Data Retention

We retain personal data only as long as necessary:

• Purchase records: Up to 7 years (tax/legal compliance)
• Support communications: Up to 2 years
• Analytics data: Up to 90 days
• License verification: Duration of license

After these periods, data is deleted or anonymized.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Updating the "Last updated" date
• Email notification for significant changes (optional)

Your continued use of Cüe after changes constitutes acceptance of the updated policy.

14. Contact Us

Questions about this Privacy Policy or our data practices? Contact us at:

Related Legal Documents

Please read these related policies to understand how we handle your data and your rights:

• Terms of Service — Overall terms for using Cüe
• Refund Policy — Our refund terms and exceptions
• End User License Agreement (EULA) — Software license terms
• Cookie Policy — Detailed information about cookies and analytics
• DMCA & Copyright Policy — Copyright infringement procedures
• Accessibility Statement — Our accessibility commitments

Polar.sh Privacy Resources

• Polar Privacy Policy
• Polar Terms of Service