Cuebor is an operations platform for agencies: a workspace for their clients, work, documents and invoices, and a private portal each agency shares with its own clients. This policy covers cuebor.com, the Cuebor app, and those client portals.
Cuebor plays two roles. For your account and your workspace's settings, we decide how data is used. For what an agency puts into Cuebor about its clients (their contacts, documents, messages and invoices), the agency decides, and we process it on the agency's behalf and on its instructions, under our data processing agreement (cuebor.com/dpa).
Your account. You sign in with Google, which gives us your name, email address, profile picture and Google account ID. During setup you add your agency's name, website, timezone and currency.
Your workspace. The clients, contacts, projects, content, documents, messages, invoices, payment records, reports and files that you and your team add or create.
Client portals. When a client opens their portal, views and document opens are recorded for the agency. If the agency requires email verification, the visitor's email address and a one-time code are used to confirm it.
Services you connect, only if you do. Google: reading your Gmail so client conversations stay in context, sending email as you when you approve a draft, and creating calendar events. If your workspace connects Google Drive, reading (never changing) the files a client message links to and the folder you choose for each client: Cuebor keeps short facts with a link back, not the text. Only if you allow it when connecting, and each time on a person's approval, Cuebor also creates a folder for a new client; it never edits or deletes your files, except that undoing a setup within a day removes the folder Cuebor created. Microsoft: your Outlook mail and calendar (and, each time you approve it, booking, moving or cancelling a meeting there), and Teams: your chat with Cuebor and the channels you choose. Teams sends Cuebor every message of a team it is added to; a message from a channel nobody chose is dropped as it arrives, and only a count of how many is kept. Slack: the channels you choose, and your direct messages with Cuebor; Cuebor never sees direct messages between other people. To suggest what a channel is, Cuebor looks only at its name and who is in it, never its messages. In a channel it replies when someone tags it, where your team allows that, and posts where a client reads only a message someone on your team approved. On a person's approval it can also create a private channel for a new client and send the client Slack's invitation to it. WhatsApp Business: your one-to-one chats with clients (never groups); a chat with a number that is not a client yet is read once your team has replied, only to see whether work was agreed, and its text is erased within an hour; a voice note in such a chat is transcribed once and the audio is not kept. Accounting and work tools you link, such as QuickBooks, Xero, Fireflies, Fathom, tl;dv, Zoom, Asana, ClickUp, PandaDoc, DocuSign, Notion and Figma: invoices, meeting summaries, tasks, document status, and the pages and files you link to a client, and the comments on them (to notice an approval or a change request). Instagram and Facebook: read-only page and post metrics.
Email you forward. Each workspace has its own forwarding address. A teammate who forwards a client's email to it adds that message to the client's record; mail from anyone who is not on the team is ignored.
Technical data. Sign-in cookies, your IP address (to limit abuse and protect accounts), page views measured by Vercel Web Analytics, and counts of AI requests per workspace (to apply plan limits).
The waitlist. If you join it, your email address.
To run Cuebor for you: showing your workspace, sending the emails it sends (portal verification codes, notifications to your clients on your agency's behalf, team invites), and keeping your account secure.
For the AI features: the assistant reads your workspace's content to draft replies, summarise, extract facts and flag accounts that need attention. That content is sent to Google's Gemini API, and the messages Cuebor reads for you to Anthropic's Claude API, to produce the result. Neither uses it to train its models. An agency can switch any client to confidential mode, which stops background AI processing for that client. Each question someone asks Cuebor, in the app, Slack or Teams, is also noted for the workspace's Owners: who asked, where, the clients it touched and the steps Cuebor took, never the answer. The note is kept for a year, or until that person's account or the workspace is deleted.
Messages Cuebor reads are kept as a short summary, the facts they contain and a link back to the original. The message text itself is stored encrypted for up to 72 hours so it can be read and replied to, and is then erased.
Data from Microsoft, Slack, Meta and the tools you connect is used only to provide the features you turned on, under the same promises as Google data below: not sold, not used for advertising, not used to train AI models.
We do not sell personal data, use it for advertising, or share it with anyone except the services below, which process it for us.
Cuebor's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data from your Google account is used only to provide the features you turned on. It is not used for advertising, not sold, not used to train AI models, and not read by people at Cuebor unless you ask us to help, it is needed for security, or the law requires it. You can disconnect Google from Settings at any time, which deletes the stored access.
Supabase (on Amazon Web Services): database, sign-in and file storage. Vercel: hosting and page-view analytics. Google: sign-in, the Gemini API for AI features, and Gmail and Calendar if you connect them. Anthropic: the Claude API, which reads incoming messages for the AI features. Resend: sending email, and receiving the mail your team forwards to Cuebor. Upstash: request rate limiting.
These receive requests only if your workspace connects them: Microsoft (Outlook, Teams), Slack, Meta (WhatsApp, Instagram, Facebook), and Composio, which carries the connection to the accounting and work tools you link. When paid plans open, a payment provider will handle card details; it will be named here before then.
Your data is kept while your workspace exists. You can delete your own account in Settings, and a workspace owner can delete the whole workspace there, which removes its clients, documents, messages and files. Disconnecting a service deletes its stored access. Deleted data leaves our backups as they are replaced.
To be removed from the waitlist, or to have anything else deleted, write to us.
To delete your own account or your whole workspace, open Settings in Cuebor: your account under My profile, and the whole workspace under Agency profile if you are its owner. That removes the data described above.
To remove only a connected service, open Connections and disconnect it. That deletes the stored access, so Cuebor stops reading from it. If you signed in or connected through Facebook, Instagram or WhatsApp, you can also remove Cuebor from your Facebook settings under Business Integrations.
If you cannot sign in, or you are a client of an agency and want your data removed, write to [email protected] from the address you used and a person will carry it out.
You can ask to see, correct, export or delete the personal data we hold about you, or object to how it is used. Write to us and a person will reply. If you are a client of an agency that uses Cuebor, ask the agency first: it controls that data, and we will help it answer.
Cuebor is a tool for businesses and is not meant for anyone under 16.
When this policy changes, this page and its date change with it. If a change affects how your data is used, we will tell workspace owners by email first. Last updated 12 October 2026.
Questions, or a request about your data — write to [email protected]. A human replies.