Privacy Policy

Last updated: 24 October 2026

The short version: we collect only what we need to answer you and run CueLens. We don't sell personal data or use it for advertising. When you connect your Intercom workspace, we process your customers' conversations only on your instructions, to produce your cues, and under a data processing agreement.

1. Who we are

CueLens is operated by Dream Ideas Tomasz Dąbrowski, a sole proprietorship registered in Poland in the Central Register of Business Activity (CEIDG), with its registered address at Aleja Komisji Edukacji Narodowej 19/5, 02-797 Warszawa, Poland, tax ID (NIP) 5832756805 ("we", "us").

For anything related to your personal data, write to contact@cuelens.ai or to the postal address above.

2. What this policy covers

This policy explains how we handle personal data when:

you visit this website (cuelens.ai),
you contact us through the form or the chat widget,
you or your team use the CueLens app as an account user.

For the conversation data that CueLens reads from your connected support tools, your company is the controller and we are its processor. Section 6 explains this.

3. What data we process, why, and on what legal basis

Situation	Data	Purpose	Legal basis (GDPR)
Contact / demo request form	Name, email, company name (optional), your message	To reply to you, arrange a demo or send you a quote	Art. 6(1)(b), steps you asked for before a contract, and Art. 6(1)(f), our legitimate interest in answering business enquiries
Chat widget (Intercom Messenger)	Your messages, the email address you choose to give, technical data such as browser, device, IP address and pages visited	To talk with you in real time and answer your questions	Art. 6(1)(f), legitimate interest in supporting visitors who start a chat. The chat loads only when you open it.
Spam and bot protection (Cloudflare Turnstile)	Technical browser and device signals, IP address	To stop automated abuse of our contact form	Art. 6(1)(f), legitimate interest in securing our services
CueLens account	Name, work email, the company you belong to, login and activity data, and your feedback on cues (confirm / dismiss)	To provide the service, keep it secure and improve how accurately it detects cues for your workspace	Art. 6(1)(b), performance of the contract with your company. Art. 6(1)(f), security and product improvement
Subscription and payments	Billing name, email and address, VAT number, the plan and its status, invoices, and the last four digits, brand and expiry date of the card. Full card details go straight to Stripe and never reach us.	To take payment for the paid plan, issue invoices and handle failed payments	Art. 6(1)(b), performance of the contract with your company, and Art. 6(1)(c), tax and accounting obligations
Business records	Correspondence, invoices and contract details	To meet accounting and tax obligations and to defend legal claims	Art. 6(1)(c), legal obligation, and Art. 6(1)(f), legal claims

You don't have to give us personal data. Without your email, though, we can't reply to you, and without an account you can't use CueLens.

We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

4. Who we share data with

We never sell personal data. We share it only with service providers who help us run CueLens, under contracts that bind them to protect it:

Intercom (United States): the chat widget on this website, and the source of conversation data for customers who connect their workspace.
Cloudflare: bot protection for our contact form (Turnstile).
Amazon Web Services (AWS): hosting of this website (Amazon CloudFront), hosting of the CueLens app, its database and file storage in the EU (Frankfurt, Germany), and sending of service emails (Amazon SES).
OpenAI (OpenAI Ireland Ltd., with processing in the United States): AI models, used through the OpenAI API, that analyse conversations and find cues. OpenAI doesn't use data sent through its API to train its models, and keeps it for at most 30 days for abuse monitoring.
Zoho (Zoho Mail, EU data centre): our business email, where messages you send us are received.
Auth0 (by Okta, data stored in the United Kingdom): sign-in to the CueLens app. It stores your account details (name, email address and login method) and security data such as login times and IP addresses.
Stripe (Stripe Payments Europe, Ltd., Ireland, with processing in the United States): payments for the paid plan. Stripe hosts the checkout and billing pages, stores the card, charges it each month and issues invoices. Stripe also processes payment data as an independent controller, for example to prevent fraud and meet financial regulations, as described in Stripe's privacy policy.

We may also disclose data where the law requires it, for example to courts or public authorities.

5. Transfers outside the EEA

Auth0 stores our account data in the United Kingdom, which the European Commission recognises as providing an adequate level of data protection. Some of these providers are based in the United States or process data there. When data leaves the European Economic Area, we rely on the EU–US Data Privacy Framework, where the recipient is certified under it, or on the European Commission's Standard Contractual Clauses, together with any extra safeguards needed. You can ask us for a copy of the relevant safeguards.

6. Conversation data from your support tools

When your company connects an Intercom workspace, CueLens reads your support conversations, including images attached to them, with read-only access, and analyses the message text to produce cues, clusters and notifications. Those conversations can contain personal data about your end customers.

For this data, your company is the controller and we are the processor (Art. 28 GDPR). We process it only to provide CueLens to you and in line with your instructions.
Our Data Processing Agreement governs this processing. It lists our sub-processors and security measures.
Contact details are removed first. Before a conversation is stored or sent to an AI model, CueLens automatically replaces names of the people taking part, email addresses, phone numbers, card numbers, IP addresses and street addresses with placeholders such as [NAME] or [EMAIL]. Postal codes, cities and countries are not removed. It doesn't store contact profile fields at all. Automatic removal can miss things, such as the name of someone else mentioned in a message, so whatever remains is still protected under the Data Processing Agreement.
Images in conversations. CueLens also stores images attached to conversation messages, whether sent by the end customer, a support agent or a bot, so your team can see them with the conversation in the app. They're kept in encrypted file storage in the EU (Frankfurt, Germany). Images are not sent to AI models and are not included in cues sent to tools such as Trello. Contact details can't be removed from images automatically, so a screenshot or photo may still show names, email addresses or other personal data.
We don't use your conversation data to train general-purpose AI models or share it with other customers. Your confirm / dismiss feedback is used only to tune detection for your own workspace.
Sending cues to your own tools. If your company connects a destination such as Trello, CueLens sends cue content there on your company's instructions. For Trello, it creates a card with the cue's title and description, which can include conversation excerpts with contact details already removed. About every 15 minutes, it then reads only which list each of those cards is in, to close cues whose card has been moved to the done list. CueLens stores the Trello API token your company provides and the IDs of the chosen lists and created cards. It doesn't read Trello profiles or email addresses. Trello (Atlassian) is your company's own provider, not ours, and cards in Trello are governed by your company's agreement with Atlassian. The token and IDs are deleted when the integration is disconnected. Cards already created stay in Trello until your company deletes them.
If you're an end customer of a company that uses CueLens, please send privacy requests to that company. We'll help them respond.

7. How long we keep data

Contact and demo requests: as long as needed to handle your enquiry, and then up to 24 months unless we start working together.
Account data: for as long as your company's account is active, and then up to 30 days for deletion from active systems and backups.
Conversation data, including stored images: as set out in the Data Processing Agreement. By default, it is deleted within 30 days after the account ends or the integration is disconnected.
Subscription and payment data: for as long as your company's account is active. Invoices are then kept as described below. Stripe keeps its own payment records for the periods that financial regulations require of it.
Invoices and accounting records: for the period Polish tax law requires (currently 5 years from the end of the relevant tax year).

8. Cookies and similar technologies

Browsing this website stores nothing on your device. We don't use analytics, advertising or tracking cookies, so we don't show a cookie banner.

Chat (Intercom Messenger): the chat loads only when you click the chat button. From then on, Intercom stores cookies in your browser (intercom-id-*, intercom-device-id-* and intercom-session-*) so your conversation keeps working and its history is kept. The chat can't work without them, so they count as strictly necessary for a service you asked for. The intercom-id-* cookie lasts about 9 months, the session cookie about a week.
Contact form (Cloudflare Turnstile): Cloudflare checks whether a form submission comes from a human. It doesn't set tracking cookies.

The CueLens app (app.cuelens.ai): when you sign in, Auth0 sets cookies that keep you logged in and protect your account. They're strictly necessary for the app to work.

Payments: subscribing and managing billing take you to pages hosted by Stripe, which sets its own cookies there to process the payment and prevent fraud. See Stripe's cookie policy.

You can delete these cookies in your browser settings at any time. The chat will then start a fresh conversation.

9. Your rights

Under the GDPR, you have the right to:

access your personal data and get a copy of it,
have inaccurate data corrected,
have your data erased,
restrict how we process it,
data portability,
object to processing based on our legitimate interests,
withdraw consent at any time, where processing is based on consent. This doesn't affect processing that happened before you withdrew.

To use any of these rights, write to contact@cuelens.ai. We'll reply within one month.

You also have the right to complain to a supervisory authority. In Poland, that's the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. You can also complain to the authority in your own EU country.

10. Security

We use technical and organisational measures to protect personal data, including encryption in transit, access controls, least-privilege access to connected tools (read-only for support tools, and only what's needed to create and track items in destinations such as Trello), and suppliers that meet recognised security standards. No system is perfectly secure, and we'll notify affected customers and authorities of a personal data breach where the law requires it.

11. Changes to this policy

We may update this policy as CueLens evolves. The "Last updated" date at the top always shows the current version. If we make significant changes, we'll let account holders know by email or in the app.