Privacy

Cue is run by Veris Systems Limited, which decides how your data is used (the data controller). Contact: aiman@verissystems.co.uk.

• You can create an account with Google (“Continue with Google”) or with an email address and a password. With Google, Cue receives your name, your email address and your profile picture from Google, and nothing else from your Google account. With email, Cue keeps your address and the name you give, and Supabase keeps your password (hashed, never readable).
• A new account waits for approval: until Veris Systems approves it, it can see nothing in Cue. Cue records when you signed up, whether you are approved, and when you last used Cue.
• An approved tester's account (a reader) holds only their own things: the interests they follow, the X and YouTube accounts they connect to their Vault, the items read from those accounts, their labels, and how many X reads and AI sorts they used each day. No other user can see them, and a reader cannot see anybody else's.

• Your account email address, and a cookie that keeps you signed in.
• Your interests, and the digests and drafts Cue makes from them.
• For each X or YouTube account you connect: its name, its identifier and the access tokens that let Cue read it.
• For a Facebook Page and Instagram account you connect: the Page's name and identifier, the Instagram account's username and identifier, your Facebook user identifier, the access tokens that let Cue publish to them (stored encrypted), and when that access ends.
• The posts you liked or bookmarked on X, and the videos you liked on YouTube, read from those accounts: their text or title and description, the author or channel, the date, and the address of the picture or thumbnail.
• The labels you or AI give those items.

Only to show these things to you in Cue, to sort your saved items into labels with AI, and to write your digests. Cue does not sell your data, show you adverts, or share it with anyone except the services below.

• Supabase stores the data, in the EU (Frankfurt).
• Vercel hosts the site.
• Anthropic's AI sorts your saved items into labels and writes digests. For labels, Cue sends it a saved item's text: for a YouTube video, its title and description; for an X post, the post's text. The answer is used only for your own labels.
• X and Google (YouTube) are where your posts and videos are read from, using the accounts you connect.
• Meta (Facebook and Instagram) is where the posts you approve are published, and where hashtag posts are read from, using the Page and Instagram account you connect.

Cue reads your YouTube account with read-only access. When you connect it, Cue reads your channel's id and name, to show which account is connected and to find its Liked videos list; after that it reads that list. It cannot upload, like, comment on or change anything. Titles and descriptions of your liked videos are sent to Anthropic only to sort them into your labels (see above). It uses the YouTube API Services, under the YouTube API Services Terms of Service, and Google handles your data under the Google Privacy Policy. You can revoke Cue's access at any time at myaccount.google.com/permissions.

Cue connects to Facebook and Instagram only when you choose Connect with Facebook in Settings › Where Cue posts. You pick which Facebook Page to connect; the Instagram professional account linked to that Page comes with it.

• Cue uses this access only to publish posts you have approved to that Page and Instagram account, to show which accounts are connected and when access ends, and, if you add Instagram hashtags to an interest, to search public Instagram posts with those hashtags.
• Cue does not read your messages, friends, followers, adverts or personal profile, and never posts anything you have not approved.
• For each post it publishes, Cue keeps the post's identifier and when it was published, so you can see it in Queue › Recently posted. The post itself stays on Facebook or Instagram, where only you can delete it.
• Posts found by hashtag search (their caption, link, time and picture address) are shown only to you, in Cue, and are never posted by Cue.
• “Post yourself” connects nothing: it copies the caption and saves the picture on your device, then opens Instagram for you to post.
• Meta handles your data under the Meta Privacy Policy. You can also remove Cue's access in Facebook at Settings & privacy › Settings › Business integrations, or in Instagram at Settings › Website permissions › Apps and websites.

• Facebook and Instagram: in Cue, go to Settings › Where Cue posts › Facebook and choose Disconnect. Cue deletes the stored access tokens, Page and Instagram identifiers at once and asks Meta to withdraw its access. If you remove Cue in Facebook or Instagram instead (see above), Cue can no longer use the access, and you can email us to have the stored details deleted too.
• X and YouTube: disconnecting an account in Settings removes the account, its tokens and every item read from it. Its access is also revoked at X or Google.
• Remove (in a saved item's menu) takes one item out of your Vault and deletes its labels. Cue keeps a hidden record of it so the next check does not bring it back; that record goes when you disconnect the account.
• Everything, including your account: email aiman@verissystems.co.uk from the address you signed up with. Your account and everything that is yours (your interests, connected accounts and their tokens, saved items, labels, drafts and usage counts) are deleted within one month, and we reply to confirm. Interests other people also follow stay for them. Posts already published on your Page or Instagram account stay there; delete them in Facebook or Instagram.

Under UK data protection law (UK GDPR) you can ask to see the data Cue holds about you, to correct it, to delete it, to restrict or object to its use, and to receive a copy you can take elsewhere. Email aiman@verissystems.co.uk; you will get an answer within one month. If you are unhappy with the answer, you can complain to the Information Commissioner's Office at ico.org.uk.