Privacy Policy
This Privacy Policy explains how Cue Labs collects, uses, and shares personal information in connection with CueSign. By using CueSign you agree to this Policy and our Terms of Service.
CueSign processes document and signer data to provide e-sign workflows. If you are a business customer, you typically act as a “controller” of signer and document personal data; Cue Labs acts as a “processor” for that Customer Content, and as a controller for account and site administration data.
1. Information we collect
1.1 Account and profile
- Name, email address, phone number, company, job title;
- Password (stored hashed) and authentication session data;
- Billing identifiers and subscription status when you purchase a paid plan (card data is handled by our payment processor; we do not store full card numbers).
1.2 Documents and signing
- Files you upload or generate (e.g. PDFs), field placements, and template data;
- Names and email addresses of signers and recipients you invite;
- Signature images or typed/drawn signatures, completion certificates, and audit-oriented events (e.g. viewed, signed, declined);
- IP address, user agent, and timestamps associated with signing and access events.
1.3 Anonymous / free usage
- When free or anonymous flows are enabled: usage counters, device or browser identifiers, IP-based rate limits, and abuse-prevention signals (e.g. CAPTCHA/Turnstile tokens);
- Email addresses entered to send signature requests even without a full account.
1.4 Technical and communications
- Log data, cookies and similar technologies for session, security, and preferences;
- Support messages you send us;
- Email delivery metadata (to, from, delivery status) for transactional mail.
We do not intentionally collect special-category data unless you choose to put it in Customer Content. Avoid uploading sensitive data the Service is not designed to handle.
2. How we use information
- Provide, secure, and maintain CueSign (accounts, documents, signing, audit trails);
- Send transactional email (invites, OTPs, completion notices) you initiate;
- Enforce plan limits, branding rules, and abuse prevention;
- Process payments and prevent fraud;
- Monitor performance, debug, and improve the product;
- Comply with law and enforce our Terms;
- Communicate product or account notices (you can opt out of non-essential marketing if we send any).
We do not sell your personal information.
3. How we share information
We share personal information only as needed to run CueSign:
- Service providers / subprocessors — hosting (e.g. cloud VMs), DNS/CDN, email delivery (e.g. Resend), databases/storage, payment processing (e.g. Stripe), monitoring. They may process data only on our instructions.
- Counterparties you invite — signers and recipients receive the document content and related notices you send.
- Legal — if required by law, regulation, legal process, or to protect rights, safety, and security.
- Business transfers — in connection with a merger, acquisition, or asset sale, with notice where required.
Current infrastructure for CueSign dogfood typically includes Hetzner (compute/storage), Cloudflare (DNS/CDN/proxy), and Resend (transactional email), plus application databases and file storage on our systems. We may update providers as the product evolves.
4. International transfers
We may process data in the United States and other countries where we or our providers operate. Where required, we use appropriate transfer mechanisms. You are responsible for ensuring your use of CueSign is lawful for signers in their jurisdictions.
5. Retention
We retain account data for the life of the account and a reasonable period afterward for backups, disputes, and legal compliance. Document and audit data are retained while your account remains active and as needed to provide the Service or meet legal obligations. Free/dogfood environments may be wiped or reset; do not treat them as long-term archives. You may request deletion of account personal data subject to retention needs (for example completed signature audit trails that you or a counterparty still require).
6. Security
We use administrative, technical, and organizational measures designed to protect personal information (access controls, encryption in transit to the Service, isolation of environments). No method of transmission or storage is fully secure. Notify us promptly at [email protected] if you suspect unauthorized access to your account.
7. Cookies and similar technologies
We use cookies and local storage for authentication, preferences, security, and (where enabled) abuse prevention. You can control cookies through your browser; disabling them may break login or signing flows.
8. Your rights and choices
Depending on your location, you may have rights to access, correct, delete, export, or restrict processing of personal information, or to object to certain processing. To exercise rights regarding data Cue Labs controls (account data), contact [email protected]. For Customer Content controlled by a business customer, contact that customer first; we will assist them as processor where applicable.
California residents may have additional rights under the CCPA/CPRA. We do not sell or “share” personal information for cross-context behavioral advertising as those terms are commonly defined. You may designate an authorized agent as permitted by law.
9. Children
CueSign is not directed to children under 16 (or the age of digital consent in your region). We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.
10. Changes
We may update this Policy by posting a new version and changing the “Last updated” date. Material changes will be communicated by reasonable means when practicable.
11. Contact
Cue Labs — CueSign Privacy
[email protected]
Legal: [email protected]
Terms of Service
· cuesign.ai
This Policy is intended to describe CueSign’s real data practices for the product as shipped. Enterprise customers may receive a Data Processing Addendum (DPA) under separate agreement. Have counsel review before regulated or high-volume production use.