Privacy Policy

At Cuelane, we take your privacy seriously. This Privacy Policy explains what data we collect, how we use it, and your rights under the GDPR.

1. Data Controller

Cuelane is the data controller for the personal data processed through this service. We are based in the Netherlands.

2. Personal Data We Collect

When you create an account, we collect: your email address (for authentication and communication), your password (stored as a secure hash by Supabase Auth), your language preference, and your full name (optional). When you subscribe to Pro, Stripe processes your payment data; we only store your Stripe customer ID.

3. Presentation Data

We store the presentations and slides you create, including uploaded files (PDFs, images, videos), slide content and speaker notes, subject/chapter structure, and timer settings. This data is necessary to provide the service and is only accessible to you and viewers you share it with.

4. Anonymous Analytics

We collect anonymous product analytics to improve the service: slide count, timing data (over/under time), device type, and presentation mode. No personal data is included. You can opt out of anonymous analytics in Settings.

5. Local Storage

We use localStorage in your browser to store your analytics opt-out preference. This data never leaves your device.

6. Data Processors

We use the following third-party processors: Supabase (database, authentication, file storage - hosted in EU), Stripe (payment processing - PCI DSS compliant), and Vercel (hosting and CDN). All processors are GDPR-compliant and process data under data processing agreements.

7. Legal Basis

We process your data based on: contract performance (providing the service you signed up for), legitimate interest (anonymous analytics to improve the product), and consent (optional contact form submissions).

8. Your Rights (GDPR)

Under the GDPR, you have the right to: access your personal data, rectify inaccurate data, erase your data ("right to be forgotten" - via account deletion in Settings), restrict processing, data portability, and object to processing. To exercise these rights, contact us at hello@cuelane.com.

9. Data Retention

Your data is retained as long as your account is active. When you delete your account, all personal data and content is permanently deleted. Anonymous analytics data (which cannot be linked to you) may be retained indefinitely.

10. International Transfers

Your data is primarily stored in the EU (Supabase EU region). Where data is transferred outside the EU (e.g., Stripe, Vercel edge network), this is protected by Standard Contractual Clauses or equivalent safeguards.

11. Cookies

Cuelane uses only essential cookies required for authentication and session management. We do not use tracking cookies or third-party advertising cookies.

12. Children

Cuelane is not intended for children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time. Significant changes will be communicated via email or in-app notification. The date at the top of this page indicates when it was last updated.

14. Contact

For privacy-related questions or to exercise your GDPR rights, contact us at hello@cuelane.com. You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).