Privacy Policy

1. Introduction

Cueflow ("we," "our," or "us") operates the Cueflow in-app messaging platform accessible at cueflow.so and app.cueflow.so. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By accessing or using Cueflow, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use our services.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your name, email address, and workspace details.
• Payment Information: If you subscribe to a paid plan, our payment processor collects billing information. We do not store complete credit card numbers.
• Content: Messages, banners, modals, checklists, changelogs, and other content you create using our platform.
• Communications: Information you provide when contacting our support team.

2.2 Information Collected Automatically

• Usage Data: Pages visited, features used, clicks, and interactions within the platform.
• Device Information: Browser type, operating system, IP address, and device identifiers.
• Cookies and Tracking: We use cookies and similar technologies to maintain sessions and analyze usage patterns.

2.3 End User Data (Embed Script)

When our customers integrate the Cueflow embed script on their websites, we collect data about their end users on behalf of our customers, including:

• User identifiers provided by the customer
• Email addresses and names (if provided by the customer)
• Custom attributes defined by the customer
• Page URLs and navigation events
• Interaction data (message views, clicks, dismissals)
• Feedback responses and checklist completions

This data is processed on behalf of our customers, who act as the data controller. We act as a data processor for this information.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Process transactions and send related information
• Send administrative messages, updates, and security alerts
• Respond to your comments, questions, and support requests
• Analyze usage patterns to improve user experience and develop new features
• Detect, prevent, and address technical issues and fraud
• Comply with legal obligations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf, such as hosting, analytics, and payment processing.
• Legal Requirements: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• With Your Consent: When you have given us explicit permission to share your information.

5. Cookies and Tracking Technologies

We use the following types of cookies:

• Essential Cookies: Required for the platform to function, including authentication and session management.
• Analytics Cookies: We use Google Analytics to understand how visitors interact with our website. This helps us improve our services.
• Preference Cookies: Remember your settings and preferences for a better experience.

You can control cookies through your browser settings. However, disabling certain cookies may limit your ability to use some features of our services.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit using TLS/SSL
• Encryption of sensitive data at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure cloud infrastructure with reputable providers

While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. We may retain certain information as required by law or for legitimate business purposes, such as:

• Resolving disputes and enforcing agreements
• Complying with legal and regulatory requirements
• Preventing fraud and abuse

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

8. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

8.1 For All Users

• Access and update your account information at any time
• Delete your account and associated data
• Opt out of marketing communications
• Control cookie preferences through your browser

8.2 For EEA/UK Residents (GDPR)

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time (where processing is based on consent)

8.3 For California Residents (CCPA)

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information
• Right to opt out of the sale of personal information
• Right to non-discrimination for exercising your rights

To exercise any of these rights, please contact us at [email protected].

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses approved by the European Commission
• Transfers to countries with adequate data protection laws
• Other legally recognized transfer mechanisms

10. Third-Party Services

Our services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Third-party services we use include:

• Google Analytics (analytics)
• Cloud hosting providers (infrastructure)
• Payment processors (billing)
• Email service providers (transactional emails)

11. Children's Privacy

Cueflow is not intended for use by children under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child under 16, we will take steps to delete that information promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

Your continued use of Cueflow after any changes indicates your acceptance of the updated Privacy Policy.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at: