Privacy Policy

1. Who We Are

Cue is a product of Caldea Labs LLC, a limited liability company registered in Puerto Rico (“we,” “us,” or “our”). This Privacy Policy describes how we collect, use, store, and protect your information when you use Cue.

2. Information We Collect

Account Information

When you create an account, we collect your email address, name, and password. Your password is cryptographically hashed by our database provider — we never have access to it in plain text.

Follow Up Boss Credentials

To connect your CRM, you provide either an API key or authorize via OAuth. API keys are encrypted at rest using industry-standard encryption (Fernet/AES-256). OAuth tokens are stored securely and refresh automatically.

Conversation History

We retain your most recent 30 messages to maintain conversation context. This window may contain CRM data referenced during your interactions (such as contact names or deal amounts). Older messages are automatically trimmed.

Voice Memos & Photos

Voice memos are transmitted to OpenAI's API for transcription and are not stored after processing. Photos and images are processed during your request and are not stored permanently.

Payment Information

Payment is processed by Stripe. We do not store your credit card number, expiration date, or CVC. We retain only your Stripe customer ID and subscription status.

Usage Data

We log anonymized usage metrics including token counts, AI cost, timestamps, and message source (web or iOS). These logs do not contain message content or CRM data. We also maintain a PII-free audit trail that records action types and entity IDs only — no names, emails, phone numbers, or message content.

3. How We Use Your Information

We use your information to:

• Provide, operate, and maintain Cue
• Process your CRM requests through Follow Up Boss
• Transcribe voice memos and analyze photos
• Process payments and manage your subscription
• Communicate with you about your account and service updates
• Monitor usage for billing, cost management, and service improvement
• Prevent fraud and abuse

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. CRM Data

CRM data from Follow Up Boss is fetched in real time and is not permanently stored on our servers. Cue can read, create, and update records but cannot delete anything in Follow Up Boss. CRM data may appear transiently in your conversation history (subject to the 30-message retention window).

5. Third-Party Services

Cue integrates with the following third-party services, each of which operates under its own privacy policy:

• Anthropic (Claude) — processes your CRM requests. Your data is sent for inference only and is not used for model training.
• OpenAI — transcribes voice memos only. Audio data is not retained after processing and is not used for model training.
• Stripe — processes payments. We never see or store your full card details.
• Follow Up Boss — your CRM. Cue accesses it on your behalf using the credentials you provide.

6. AI & Model Training

Your data is sent to Anthropic and OpenAI solely for inference — processing your requests in real time. No user data is sent to any AI provider for model training. Your conversations are never used to train or fine-tune any AI model.

7. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of FUB API keys at rest (Fernet/AES-256)
• HTTPS for all data in transit
• JWT-based authentication with automatic session rotation
• Row-level security on all database tables
• Webhook signature verification for Stripe events
• Rate limiting on API endpoints

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

8. Cookies

We use essential cookies for authentication and session management only. We do not use tracking cookies, advertising cookies, or third-party analytics.

9. Data Location

All data is processed and stored in the United States.

10. Data Retention & Deletion

We retain your account data for as long as your account is active. Conversation history is limited to 30 messages and older messages are automatically trimmed. Usage logs are retained for billing and operational purposes.

You may request full account deletion by emailing support@caldea.ai. Upon receiving your request, we will permanently delete your user record, conversation history, audit logs, and usage data within thirty (30) days. Deletion is irreversible. We may retain anonymized, aggregated data that cannot be used to identify you.

11. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and data
• Disconnect your Follow Up Boss account at any time
• Cancel your subscription at any time

To exercise any of these rights, contact us at support@caldea.ai.

12. Children's Privacy

Cue is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us at support@caldea.ai.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on our website and update the effective date. We will notify you of material changes by email or through the app. Your continued use of Cue after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions about this Privacy Policy, contact us at:

Caldea Labs LLC
Email: support@caldea.ai
Website: cuefollowup.com