Cueoffer Privacy Policy
Last updated: October 24, 2026
Cueoffer is operated by an individual under the Cueoffer brand. For privacy questions or requests, contact [email protected].
Information we process
When you sign in with Google, we request your basic profile and email address to identify your account. We do not request access to your Gmail messages, Google Drive files, or contacts. Email sign-in uses your email address and a single-use verification code.
When you use the workspace, we process the information you submit, such as resumes, job and company details, knowledge documents, screenshots, audio, transcripts, and your requests. The information processed depends on the features you choose. Interview records, transcripts used as questions, and generated responses may be saved so you can review your work. Live interview audio is streamed for speech recognition; the current Cueoffer speech path does not save a separate raw-audio recording on the API server.
We also process technical information needed to operate and protect the service, including request logs, IP addresses, authentication events, and usage or entitlement records. New-account trial limits use a hashed network identifier: an IPv4 address or an IPv6 /64 network. The trial-limit log records this hash rather than the raw IP address or email address.
How information is used
We use this information to authenticate you, provide the features you request, maintain your workspace, manage access and payments, answer support requests, and investigate errors or misuse. Google profile information is used for account authentication and identification.
AI responses may be inaccurate. Avoid submitting sensitive information that is unnecessary for your task, and only submit information you are entitled to share.
Subprocessors
The following services support the current production configuration. Only the information needed for the selected feature is sent to a provider. Regions describe configured processing locations or service scope, not a guarantee that every provider operation is confined to one country.
| Provider | Purpose | Data involved | Processing region |
|---|---|---|---|
| Amazon Web Services | Lightsail API hosting, database and cache | Account and workspace records, transcripts, usage and payment-status records, service logs | Oregon, United States (us-west-2) |
| Cloudflare | DNS, CDN, Pages, Turnstile, transactional email, private R2 storage and encrypted backups, Workers AI embeddings and Vectorize search | Network and security metadata, email address and sign-in email, uploaded files, knowledge text and vectors, encrypted database backups | Global service infrastructure; locations depend on the service and request routing |
| Microsoft Azure | Speech recognition and Neural text-to-speech | Live audio, language and phrase hints, text selected for speech playback | Configured speech regions: West US 2, Japan East, Southeast Asia and North Europe; TTS: West US 2 |
| Alibaba Cloud Model Studio | Qwen AI answers, image understanding, resume and interview features | Selected prompts, transcripts, screenshots, resume and knowledge context | US East entry point with global inference scope enabled |
| Optional Google sign-in | Account identity, basic profile, email address and authorization metadata | Google's global authentication infrastructure | |
| Stripe | Checkout, payment status, refunds and disputes | Checkout identity, selected package, payment and transaction information | Stripe's international payments infrastructure |
Payments are handled by Stripe. Stripe receives the payment information you enter on its checkout page. Cueoffer receives checkout and payment status information needed to manage purchases and access; the Cueoffer checkout flow does not collect your full card number or card security code.
We may disclose information when required by applicable law or when necessary to investigate abuse and protect users or the service.
International transfers
Your information may be processed in the United States and other countries whose privacy laws differ from those where you live. Where applicable law requires a transfer safeguard, the relevant arrangements must provide an appropriate mechanism, such as the EU-U.S. Data Privacy Framework for a certified recipient and covered transfer, or Standard Contractual Clauses where applicable. A provider's inclusion above does not by itself mean that every transfer is covered by the Framework. Contact us for information about the safeguards applicable to your data.
Login storage and security
The web app stores a session token in your browser. The desktop app uses the operating system's credential store. Google authorization also uses a temporary cookie to protect the sign-in flow. Signing out revokes your Cueoffer session.
Core workspace storage is used for sign-in, security and preferences. We do not use advertising analytics in the core workspace. If you open an embedded third-party tutorial video, its provider can receive your network information and may use its own cookies or storage under its privacy policy.
Access controls and encrypted connections help protect information. Offsite database archives use authenticated AES-256-GCM encryption. No service can guarantee that information will never be lost or accessed without authorization.
Retention and your choices
- Email verification codes expire after 10 minutes and are consumed after a successful verification.
- New sessions have a seven-day idle expiry and can renew while active, up to 30 days from issue. Sessions issued before this change keep their original expiry. Signing out revokes the session immediately.
- Authentication and trial rate-limit counters expire within 24 hours. Temporary Google and Turnstile transactions expire sooner.
- Closed Stripe checkout-tracking records are retained for 90 days. Purchase, refund, dispute and accounting records may need to be retained longer for reconciliation or legal obligations.
- Local database backups rotate on an approximately seven-day schedule. Encrypted offsite archives are held in separate private storage. Their deletion schedule is managed independently; contact us for the current backup-retention details. Deleting live records does not immediately remove them from existing backups.
- Account and workspace information, including saved transcripts and responses, is retained to provide the service until deleted or no longer needed. There is currently no automatic age-based deletion of saved interview transcripts. The speech provider's handling of streamed audio is also subject to its service terms and applicable data-processing arrangements.
We do not sell or share personal information, including for cross-context behavioral advertising. Where applicable under the CCPA/CPRA and other privacy laws, you may request access to, a copy of, correction of, or deletion of your personal information, and exercise applicable rights without discriminatory treatment. Contact [email protected]; requests are currently handled manually and we may need to verify your identity. Records needed for security, unresolved transactions or legal obligations may need to be retained.
You can stop submitting content, sign out, clear browser storage, or remove Cueoffer's access from your Google Account. Revoking Google access does not itself delete information already stored in your Cueoffer account; contact us for an account deletion request.
Changes and contact
We may update this policy as the service changes. The date above identifies the current version. For questions about the handling of your information, email [email protected].