CUE/IO privacy policy

Controller and contact

The controller for the CUE/IO website, account and licensing service is SIA Stared; Registration no.: 43603092341; VAT no.: LV43603092341; Registered address: Jelgava, Garozas iela 68 - 11, LV-3002, Latvia. Privacy contact: info@cueio.app. Paddle acts separately under its own privacy notice when it processes orders and payments as Merchant of Record.

Data we use

We use your email address and password hash, account and billing-contact details, order and licence records, Paddle transaction status and identifiers, security logs, consent state, and support correspondence. CUE/IO does not store full card details; Paddle and its payment partners process them.

Why and how long

Account, checkout, licence and requested support data is processed to take requested pre-contract steps and perform the product contract (GDPR Article 6(1)(b)). Records required for tax, accounting or legal claims are processed for legal obligations (Article 6(1)(c)). Proportionate security, fraud prevention and service-protection logs rely on legitimate interests (Article 6(1)(f)). Optional analytics relies on consent (Article 6(1)(a)). Account and licence data is kept while the account or licence remains active and then only as required for legal obligations or claims. Purchase records are kept for the period required by law. Support correspondence and short security logs are kept only as long as needed to resolve requests and protect the service. Detailed consented browser events are kept for up to 30 days, aggregated statistics for up to 400 days, and short-lived daily HMAC abuse-prevention buckets for up to 2 days.

Service providers and international purchases

Necessary data may be shared with Paddle as Merchant of Record and its payment partners, email and hosting providers acting for the service, and public authorities where required. Paddle applies its own privacy notice in its separate role. Paddle.js is loaded only when a customer opens a Paddle payment step, not on ordinary product, legal or account pages. Where a recipient processes data outside the EEA, the applicable provider terms, adequacy decision or GDPR Article 46 safeguards must cover that transfer.

Your choices and rights

You can reject or withdraw optional analytics at any time through Cookie settings as easily as accepting it. Global Privacy Control and Do Not Track disable all optional analytics. You may request access, correction, deletion, restriction, portability or object where the law provides. Contact info@cueio.app for a privacy request. You may also complain to the Latvian Data State Inspectorate (Datu valsts inspekcija) or the supervisory authority in your country.

Cookies and optional analytics

Optional categories are off until you choose otherwise, no optional analytics request is sent before consent, and the policy explains each browser-storage item and retention period: Cookie policy.

Paddle buyer documents

Paddle terms govern the payment transaction and Paddle privacy notice explains Paddle’s separate processing of buyer and payment data.

Paddle Privacy Notice