Privacy policy

Last updated: [DATE — BEN'S TAKE NEEDED]

CueCan is run by [LEGAL ENTITY NAME AND ADDRESS — BEN'S TAKE NEEDED] ("CueCan", "we"). This policy explains what CueCan collects when you use cuecan.com and connect an AI agent or a YouTube channel to it, what we do with it, and the choices you have.

What we collect

Your account. Your name and email address. If you sign in with Google, we also store your Google account ID so we can recognize you next time. If you add a passkey, we store its public key, never anything that could sign in as you.

What you plan in CueCan. The videos you and your agent create: briefs, scripts and their options, title and thumbnail packages including the images you upload, assets and where they're placed, notes and todos.

Connected agents. When you connect an AI agent like ChatGPT or Claude, we store the access tokens it uses, the name it registered with, and when it last used CueCan.

YouTube data, if you connect a channel. See "YouTube and Google data" below.

Sign-in and security records. Sign-in codes (stored hashed, and only valid for a few minutes), the IP address a code was requested from, and session cookies that keep you signed in.

How we use it

We use your information only to run CueCan for you: to sign you in, show and save your plans, let the agents you connect read and change them on your behalf, keep your account secure, and contact you about your account. We don't sell your information, we don't show ads, and we don't use your content or your YouTube data to train AI models.

YouTube and Google data

CueCan uses the YouTube API Services. Connecting a YouTube channel is optional. When you connect one, Google asks you to let CueCan:

  • See your YouTube account (youtube.readonly): your channel's ID, title, handle and thumbnail, and your videos' titles, thumbnails, publish dates, durations and view counts.
  • View YouTube Analytics reports for your channel (yt-analytics.readonly): views, average view duration and audience retention for your videos.

This access is read-only. CueCan never uploads, edits or deletes anything on YouTube.

We use this data to show your published videos and their performance in CueCan, so you and your agent can plan new videos with them. We store it with your account, and we store the access tokens Google gives us encrypted. When you ask your connected agent about your videos, CueCan sends it the data its request needs, for example a published video's views. Your agent's provider handles that data under its own terms. [VERIFY: confirm this use is allowed under the Limited Use requirements before submitting for verification.] We don't share YouTube data with anyone else, except our service providers who run CueCan (see below) or where the law requires it.

CueCan's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

By connecting a channel, you agree to the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.

You can stop CueCan reading your channel at any time: disconnect it in Settings › Channels, which revokes CueCan's access at Google, or remove CueCan from your Google account's third-party access page. To have the YouTube data CueCan stored deleted, delete the channel's videos in CueCan, delete your account, or email us at [CONTACT EMAIL — BEN'S TAKE NEEDED].

Who else handles your data

We use service providers to run CueCan: [HOSTING PROVIDER — VERIFY: Laravel Cloud and its infrastructure providers] to host the app, its database and files, and [EMAIL PROVIDER — BEN'S TAKE NEEDED] to send sign-in codes. They process your data only to provide their service to us. We may disclose information if the law requires it.

Storage and security

Data is sent over HTTPS. YouTube and agent tokens are stored encrypted. Sign-in codes are stored hashed.

How long we keep it

Your plans stay until you delete them. Deleting a video, asset or package deletes it and its files for good. Completed todos are deleted 30 days after they're completed. Deleting your account deletes it and every workspace you're the only member of. Backups are kept for [BACKUP RETENTION — BEN'S TAKE NEEDED] and then deleted.

Cookies

CueCan uses only the cookies it needs to work: one that keeps you signed in, one that protects forms, and one that remembers whether the sidebar is open. There are no analytics or advertising cookies.

Children

CueCan isn't for anyone under 13. [VERIFY: the minimum age, and any regional rules that apply.]

Your choices and rights

You can change your name and email in Settings, disconnect agents and channels at any time, and delete your account in Settings › Profile. Depending on where you live, you may have the right to access, correct, export or delete your data. Email [CONTACT EMAIL — BEN'S TAKE NEEDED] and we'll help.

Changes

If we change this policy, we'll update the date at the top. If a change is significant, we'll tell you by email or in CueCan before it takes effect.

Contact

[CONTACT EMAIL — BEN'S TAKE NEEDED]