Privacy Policy
Last updated August 26, 2026
In short
CueCard stores your account, your business information, and the contacts you capture. Your contacts belong to you. We only process them so CueCard works. We never sell your contacts.
CueCard helps businesses share a digital card and stay in touch with people who choose to connect. This policy explains what we collect, why, and the choices you have.
The two roles, read this first
CueCard handles personal data in two distinct capacities:
- As a controller, for information about you, the business owner: your name, email, business details, billing, and how you use the product.
- As a processor, for information about your leads, the people who tap your card. You decide what to collect and why. We process it on your instructions.
What we collect about you
Name, business name, email address, phone number, business address, logo and images you upload, payment information (processed by Stripe; we do not store card numbers), and your login credentials.
What we collect about your leads, on your behalf
Name, email address, phone number, and any answers to questions you configure. Where relevant, the event at which they were captured and the date they mentioned.
We also store the contents of email conversations between you and your leads, because replies pass through our relay so we can stop your follow-up sequence when someone answers.
Usage data
We collect standard technical data: IP address, browser, device type, pages viewed, and actions taken.
We use Microsoft Clarity to record sessions in the CueCard dashboard. This captures how you navigate the product. We do not record sessions on public card pages, so the people who tap a business's live card are not recorded. We also use Clarity on the claim-link page a prospective business sees from a cold-outreach email, before they've created an account, to help us understand how that page is used.
AI and automation
CueCard may automatically personalize pages, recommend content, organize information, or automate follow-up based on the information you provide. Business owners remain responsible for reviewing their content.
Push notifications
If you enable them, we store a push subscription identifying your browser or device, used only to notify you about activity in your account.
Who we share data with
Service providers who process data on our behalf:
| Provider | Purpose |
|---|---|
| Postmark | sending and receiving email |
| Supabase | database and hosting |
| Microsoft Clarity | dashboard session analytics |
| Google Places | business information lookup during setup |
| Stripe | payment processing |
| Card production and shipping vendor | producing and shipping physical cards |
| Domain registrar | domain registration |
We do not sell personal data. We do not share your contacts with anyone other than the providers above. If we add or replace a provider that handles your leads' data, we will update this list and email account owners at least 30 days before the change takes effect.
Security practices
We encrypt data in transit. Passwords are never stored in plain text. Access to customer information is restricted.
How long we keep data
- Account data: while your account is active. After cancellation, following a 30-day grace period, we delete your account data within 90 days, except payment and invoice records, which we keep for 7 years for tax purposes.
- Lead data: until you delete it, or until your account data is deleted as described above. You can export or delete your leads at any time while your account is active.
- Email content: kept while your account is active so we can run and stop your follow-up sequence, deleted on the same schedule as your account data.
- Backups: deleted data can persist in encrypted backups for up to 35 days, then expires.
- Session recordings: retained by Microsoft Clarity under their own retention schedule.
Your rights
Whatever state or country you're in, you can ask us to give you a copy of the personal information we hold about you, correct it if it's wrong, export it in a portable format, or delete it. You can do most of this yourself from your account settings at any time. To make a request another way, email support@trycuecard.com.
We will respond within 45 days. If a request is complex we may take up to another 45 days, and we'll tell you before we do. We won't charge you for a request, or treat you differently for making one.
We do not sell personal information, and we do not share it for cross-context behavioral advertising.
Leads' rights
If you are a lead, the business that captured your details controls that information, so start with them. You can also unsubscribe from any email using the link in the footer, which takes effect right away. If you cannot reach the business, email us at support@trycuecard.com and we'll pass your request to them and follow up. Where we can act on our own, such as stopping emails sent through CueCard, we will.
Contact
Questions about privacy? Email us at support@trycuecard.com.