CueCrux Limited / Privacy notice

Privacy notice

Effective 1 October 2026. CueCrux Limited (company 16885471), 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom, is the controller of the account and product-service data described here. Contact us through the support page with privacy questions.

What we process

We process your account name and email address, salted password hash, hashed recovery credentials, account sessions, terms acceptance, subscription identifiers and status, purchased seats, device labels and public keys, activation records, licence allocations and operational audit events. Passwords and recovery credentials are stored as one-way hashes. The licensing service does not require your model geometry.

Service infrastructure processes IP addresses and request/security information to operate HTTPS, diagnose faults and limit abuse. If you contact support or explicitly submit a diagnostic report, we process the content you choose to send. Please exclude unrelated personal or confidential information.

Purposes and legal bases

We use account, payment-status and device information to perform our contract: create your account, provide access, allocate licences and support the service. We use limited operational and security data for our legitimate interests in preventing abuse and maintaining reliability. We retain records needed to meet legal obligations. Optional consent-based uses, if introduced, will be presented separately.

Payments, hosting and AI

Paddle processes payments as merchant of record under its own privacy notice. We receive identifiers and subscription information needed to supply access; we do not receive or store your complete payment-card details. The service is hosted on CueCrux-managed infrastructure with Hetzner in Europe. Authorised infrastructure providers may process data to deliver hosting and security.

Connecting a third-party AI provider may transmit the information you select for an agent task to that provider. Review its terms and your organisation’s data policy before use. The licensing dashboard does not automatically upload your design files to an AI provider. Managed AI uses OpenAI with global processing after you enable sharing in the desktop. The selected design context, your messages and supported tool results are transmitted; model files are not automatically uploaded. We request store:false; this is not a promise of contractual zero retention or EU-only processing. Usage counters, payment identifiers and credit ledger records are retained for billing and reconciliation.

Support

Support tickets, replies and any diagnostics you choose to attach are stored with your account. To help our staff answer, the ticket reference, subject, category, product and app version, your licence status, the recent public messages on that ticket and the attached diagnostics excerpt may be sent to OpenAI through its EU endpoint to draft a reply. Credentials, local paths, email addresses and phone numbers are removed from messages first, and your name, email address, files and internal notes are not sent. We request store:false. A person reviews every draft; drafts are not sent to you automatically. Support emails, including replies you send by email, are delivered through Resend.

Waiting list

If you join the waiting list, we store your name, email address, join date and consent to contact you about access reopening. This does not create a customer account or subscription. Only authorised administrators can view the list. Contact support to ask for your entry to be removed.

Cookies and browser storage

We use a secure, HttpOnly account-session cookie lasting up to seven days. It is necessary for sign-in and is cleared on sign-out. Temporary checkout identifiers may be kept in browser session storage to recover payment status; they are not licence authority. Paddle checkout uses its own technologies when you choose to purchase. We do not add advertising analytics to this website.

Optional TypeSafe evaluation

If you separately enable JEV shadow evaluation in your account, the current message from each managed CAD turn is also processed by TypeSafe. This shadow evaluator excludes saved context, prior conversation, reference metadata and CAD binaries. Information you include in the message itself is shared. It is used to assess advisory routing, not to authorise geometry changes. You can disable future sharing in your account. We retain a hash of the evaluated context, typed decisions, model version, timing and supplier usage; we do not retain the submitted text in the JEV evaluation log. Processing is global; enterprise zero-retention arrangements have not been established for this service. See TypeSafe’s legal and privacy information.

Retention and security

Account and device records are retained while needed to provide the service, address support requests and resolve disputes. We review deletion requests individually and retain only records required for legitimate operational or legal purposes. Accounting records may need to be retained for the applicable statutory period. Expired sessions and rate-limit records are cleared by the service. Backup copies are subject to the backup retention cycle and access restrictions.

We use HTTPS, restricted service access, hashed credentials and device-bound signatures. No system is completely secure. Keep your recovery and activation codes confidential. International processing by payment or optional AI providers may occur; their notices describe applicable safeguards and locations.

Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to certain processing. Contact support with a privacy request; we may need proportionate proof that the account is yours. You can also complain to the UK Information Commissioner at ico.org.uk or your relevant supervisory authority. This professional product is not directed at children.