Privacy Policy
Product: CueVanta (cuevanta.com and related free-tier services)
Effective (proposed): 2026-09-18
Status: Operator locked 2026-09-17 via Cos; effective proposed 2026-09-18; free tier; CueVanta only.
Scope: CueVanta.
Operator: CueVanta, LLC — Colorado limited liability company; jurisdiction Colorado, United States. CueVanta, LLC operates CueVanta.
Public contact: legal@cuevanta.com · support@cuevanta.com
Commercial model: Free. No payments, subscriptions, commissions, or paid usage tiers described here.
Non-human publication: Automated validate/scan/sandbox/test → auto-approve or auto-reject/quarantine; fail closed. Owner reserved: policies, prohibited categories, emergency shutdown, exceptional account action. Ratings = verified runs; auto-suspend on reports/failure/security.
1. Who we are
This Privacy Policy explains how CueVanta, LLC (“Operator,” “we”) handles personal data when you use CueVanta free-tier services on cuevanta.com and related APIs. CueVanta, LLC operates CueVanta.
Contact: legal@cuevanta.com
CueVanta account and product data are isolated to CueVanta. Isolation is an operational requirement of the project.
2. Data we may collect
Depending on which free-tier features are enabled:
| Category | Examples | Purpose |
|---|---|---|
| Account | Email, display name, password hash or SSO subject, verification status | Create/secure accounts |
| Agent credentials | Issued tokens, agent IDs, allowlist status | Authenticate API/agent use |
| Usage | Request logs, Cue IDs invoked, timestamps, rate-limit counters, IP/User-Agent | Operate, secure, quota, abuse prevention |
| Contributions | Cue packages, manifests, ownership attestations, submission metadata | Automated validate/scan/sandbox, publish or quarantine, license |
| Feedback | Ratings, reports, appeal text | Quality and trust & safety |
| Technical | Cloudflare / host logs, cookies or local storage strictly needed for session | Security and delivery |
We do not collect payment card data for CueVanta under these policies (no billing).
3. How we use data
Operate the Service; authenticate users and agents; enforce free quotas and AUP; review contributor submissions via automated systems; investigate reports; improve reliability and security; comply with law; communicate service notices.
We do not sell personal data.
4. Legal bases (where GDPR/UK GDPR may apply)
Contract necessity, legitimate interests (security, abuse prevention, product integrity), consent (where we ask for it), and legal obligation.
5. Sharing
We may share data with:
- Infrastructure processors (e.g., Cloudflare, hosting providers) under contracts;
- Automated trust-and-safety systems and, for exceptional account action or emergency shutdown, the Owner/operators acting for CueVanta;
- Authorities when legally required;
- A successor only if CueVanta ownership transfers and commitments continue.
We do not share CueVanta account data with unrelated storefronts as a marketing list.
6. International transfer / residency
Primary processing and storage for the MVP is in the United States. If you access from elsewhere, you understand US processing may apply. Additional transfer safeguards will be added if Operator expands regions.
7. Retention
Account data: while the account is active and a reasonable period after closure for security/legal holds.
Logs: retained for a limited operational window unless needed for abuse or legal holds.
Published Cue metadata may remain for provenance after unpublish, with personal data minimized where feasible.
8. Security
We use industry-reasonable measures (access control, TLS in transit on public edges, least privilege). No method is 100% secure. Report suspected incidents to support@cuevanta.com.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, delete, port, or object to certain processing. Email legal@cuevanta.com. We may need to verify identity. Some rights are limited when we must keep data for security, fraud, or law.
10. Children
The Service is not directed to children under 16. We do not knowingly collect personal data from children below that age. Contact us to delete if you believe we have.
11. Cookies
We may use essential cookies or similar tech for session/security. Non-essential analytics, if added later, will be disclosed and controlled as required.
12. Changes
We will post updates with a new effective date. Material changes will be noted on the legal index.
13. Contact
Privacy requests: legal@cuevanta.com
Support: support@cuevanta.com
Operator: CueVanta, LLC — Colorado, United States