Last updated October 31, 2026
Privacy policy
Draft — needs legal review before launch.
This policy explains what personal data Tappius Mobile LLC (“we”, “us”) collects when you use Cue (the After Effects panel, its helper software, and our website and online services), why we collect it, and what control you have over it. We are the controller of this data.
Short version: we collect what we need to sign you in, run your requests, bill you and improve the product. We don’t sell your data, we don’t use advertising cookies, and we don’t use your projects to train AI models.
What we collect
Account data. Your email address. If you sign in with Google, we also receive your Google account id and email; we don’t get your Google password or access to your Google services.
Request data. When you send a request in the panel, the panel sends us:
- your message and the conversation so far;
- information about the parts of your project the request needs, such as composition, layer and property names, settings, keyframe values and expressions;
- preview frames and contact sheets the panel renders so the AI can check its work;
- the results of the editing steps (for example “layer created” or an error message).
Your project file and your footage are not uploaded. They stay on your computer.
Tutorial videos. When you paste a YouTube link, we pass the link to Google for analysis. For TikTok, Instagram or local files, the panel downloads a small low-resolution copy on your computer and uploads it to us, and we pass it to Google for analysis. We don’t keep the video after the analysis finishes.
Conversations. We store your conversations (messages, the AI’s replies and tool results, including preview frames) so you can pick up where you left off on any computer. You can delete a conversation from the panel at any time, and it’s then permanently removed from our servers.
Billing data. Your plan, credit balance, purchases and credit usage per request. Payments are processed by Polar, our merchant of record, which collects your payment details, billing address and tax information directly. We receive order and subscription details from Polar, but not your full card number.
Website analytics. Our website uses Cloudflare Web Analytics, which counts page views, referrers and page-load performance without cookies and without identifying you. We also record a small set of product events (for example “visited the pricing page”, “clicked download”, “started checkout”) tied to a random anonymous id that’s stored in your browser’s local storage. On your first visit we also record the referring site and any campaign tags in the link (UTM parameters). We use this only to understand which pages and channels work. If you sign in, we link the anonymous id to your account. We don’t use advertising or cross-site tracking cookies.
Panel diagnostics and usage. Events such as “panel opened”, “signed in”, “request finished” or “request failed”, with the error type, the panel and After Effects versions and your operating system. These don’t contain your prompts or project content.
Support. Anything you send us when you email support@cue.example.
Why we use it, and the legal basis
| Purpose | Data | Legal basis (EU/UK) |
|---|---|---|
| Sign you in and keep your account secure | account data | contract |
| Run your requests and tutorial analysis | request data, tutorial videos | contract |
| Keep your conversation history | conversations | contract |
| Meter credits, bill you, prevent abuse | billing data, usage | contract, legitimate interests |
| Understand and improve the website and product | analytics, diagnostics | legitimate interests |
| Answer support requests | support messages | contract, legitimate interests |
| Meet legal and tax obligations | billing records | legal obligation |
Who processes it
We use these service providers. They process data on our behalf and under contract:
- Google (Gemini API). Runs the AI model for your requests and analyzes tutorial videos. Google processes the request data and videos we send to produce a response. Under its paid API terms, Google does not use this data to train its models.
- Cloudflare. Hosts our website, API and database, runs the AI gateway that routes model requests, sends sign-in emails, and provides Web Analytics. Data may be processed in Cloudflare data centers worldwide.
- Polar Software Inc. Our merchant of record for payments, taxes, receipts and the customer billing portal. Polar is an independent controller for the payment data it collects. See Polar’s privacy policy.
We don’t sell or rent your personal data, and we don’t share it for advertising.
We may disclose data if required by law, to protect the rights and safety of our users or the public, or as part of a merger or acquisition (in which case we’ll tell you).
International transfers
Our providers may process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as the EU Standard Contractual Clauses.
How long we keep it
- Account data: while your account exists, then deleted within 30 days of an account deletion request.
- Conversations: until you delete them or your account.
- Tutorial videos: only for the duration of the analysis.
- Billing records: as long as tax law requires (often 7–10 years).
- Analytics and diagnostics: up to 24 months, in aggregate after that.
- Sign-in codes: expire after 10 minutes and are deleted shortly after.
Your rights
Depending on where you live, you can ask us to access, correct, delete or export your data, and to restrict or object to how we use it. You can also withdraw consent where we rely on it, and complain to your local data protection authority. Email support@cue.example. We’ll respond within 30 days.
You can delete individual conversations yourself in the panel. To delete your whole account, email support@cue.example from your account’s email address.
Local storage on your computer
- Website: a random anonymous id and your first-visit referrer/campaign tags, in your browser’s local storage. Clearing your browser’s site data removes them.
- Panel: your sign-in refresh token, stored in your operating system’s secure credential store (macOS Keychain or Windows Credential Manager), plus panel settings and a cache of downloaded helper tools in your user application-support folder.
Children
The Service isn’t meant for children under 16, and we don’t knowingly collect their data.
Security
We use encryption in transit (HTTPS), short-lived sign-in tokens, hashed and single-use refresh tokens, and access controls for our systems. No system is perfectly secure. If a breach affects your data, we’ll tell you as the law requires.
Changes
We’ll post changes here and update the date above. For significant changes, we’ll also email you.
Contact
Tappius Mobile LLC, TODO Country. Privacy questions: support@cue.example. Everything else: support@cue.example.