Legal

Privacy Policy

Last updated October 13, 2026

Karan Joshi (“Cue”, “we”, “us”)operates Cue, a social media scheduling tool that lets agencies plan, schedule, and publish posts to their clients' LinkedIn, Instagram, and YouTube accounts. This policy explains what we collect, why, and the choices you have.

Information we collect

  • Account data. The email address you sign in with (via a passwordless one-time code we email you) and a display name you choose.
  • Connected social accounts. When you connect a LinkedIn, Instagram, or YouTube account, we receive and store an access token (and, where provided, a refresh token) plus that account's platform id, username, and display name. When you connect a LinkedIn Company Page, we receive the list of Pages you administer so you can choose one, and store only the chosen Page's id and name. Tokens are encrypted at rest and used only to identify the connected account, keep the connection active, and publish on your behalf.
  • Content you create. Post captions, scheduling times, and any images, videos, or documents you upload for publishing. Media is stored in Cloudflare R2, or in the storage provider your workspace connects in Settings.

How we use your information

We use the data solely to provide the service:

  • Authenticate you and keep your workspace isolated.
  • Schedule and publish your posts to the LinkedIn, Instagram, and YouTube accounts you connect, at the times you set.
  • Show publishing status, history, and account health.

We do not sell your data or use it for advertising.

Platforms and third parties

Cue integrates with the official APIs of LinkedIn, Meta (Instagram), and YouTube. When you publish, your content and the relevant access token are sent to those platforms to create the post. Our use of the Instagram Platform complies with the Meta Platform Terms and Developer Policies, and our use of LinkedIn's APIs complies with the LinkedIn API Terms of Use. We also rely on these processors:

  • Supabase - authentication and database.
  • Cloudflare R2 - storage for the media you upload, unless your workspace connects its own storage.
  • Vercel - application hosting.
  • Resend - delivers the sign-in code emails.
  • Zoho Mail - our business email, for messages you send us.

YouTube API Services

Cue uses YouTube API Services to upload videos to the channel you connect. By connecting a YouTube channel you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

  • What we access. Your Google account id, email address, and name - used only to label the connected channel - plus permission to upload videos on your behalf. We do not read your existing videos, comments, subscribers, or analytics.
  • Limited Use. Cue's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not sell this data, use it for advertising, or let humans read it except where required for security or by law.
  • Revoking access. Disconnect the channel from the Clientspage, which deletes its stored tokens, or revoke Cue's access at any time through your Google security settings.

Data retention

  • Access tokens are kept until you disconnect the account or delete the client, then removed.
  • Posts, their captions, and the media you upload are kept until you delete them, so your publishing history stays available. A lightweight record of each published post (platform, link, date) is also kept for your history.
  • Deleting a post removes its media from Cue's storage. Deleting a client or workspace removes its accounts, posts, and media. Files in storage your workspace connected itself stay in your bucket, under your control.

Your choices and data deletion

You can disconnect any social account at any time from the Clients page, which immediately deletes its stored tokens. To request deletion of your account and all associated data, see our Data Deletion instructions or email us at karan@trycue.space.

Security

Traffic is served over HTTPS and social access tokens are encrypted at rest. No system is perfectly secure, but we work to protect your data using industry-standard measures.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

Contact

Questions? Email karan@trycue.space.