Privacy Policy

Effective date: 26/09/2026

This Privacy Policy explains how Cue Congress processes personal data when you use our website and our audiovisual utility software (“Services”).

1. Who We Are (Controller)

For the purposes of the EU General Data Protection Regulation (“GDPR”), Cue Congress is the data controller.

• Controller name: Cue Congress
• Email: info@cuecongress.com
• Address: Irakleous 110A, Kallithea, Greece

2. Personal Data We Collect

2.1 Website data

When you visit our website, our hosting provider may automatically process basic technical data:

• IP address (and derived approximate location)
• Device and browser information (e.g., type/version, operating system)
• Pages viewed, timestamps, referring/exit pages
• Security and performance logs

2.2 Contact and sales communications

If you contact us (for example by email), we process the information you provide such as your name, email address, company (if applicable), and the content of your message.

2.3 Software / application data

Our desktop software works primarily with files stored on your device (e.g., audio, images, presentations), and these files are not uploaded to us. We process limited technical data necessary to:

• activate or validate your subscription/license: your license key, a device identifier generated by the app, the device name, and when the device last checked in,
• provide updates, and
• maintain security and prevent abuse.

If you enable optional diagnostics/telemetry (where offered), we may also receive device and error information to help improve stability. You can disable optional diagnostics in the application settings (if available).

2.4 Content you choose to share through our online features

Some features store the content you enter on our servers so it can be shown to other people or on other devices:

• CuePulse and EventSpin (browser apps): room settings, questions, poll answers, draw entries and the names attendees enter when they join.
• AV Project (browser app): your projects, rundowns, gear lists, venues, and the crew contact details you enter (e.g., names, phone numbers, email addresses).
• Web viewers in One Control and CueCaller: the speaker names, images, timers and rundown you publish to the viewer links.
• Sync between computers (where an app offers it): the app data you choose to sync, linked to your account.

If you enter information about other people (such as attendees or crew), you are responsible for having a lawful basis to share it with us. Viewer links contain a private key; anyone you give a link to can see what it shows.

3. Cookies

Our website uses cookies and similar technologies. We only use non-essential cookies (such as analytics) after you give consent via our cookie banner, where required by law.

• Strictly necessary cookies (required for basic site functionality and security)
• Preferences cookies (optional)
• Analytics cookies (optional, only after you click “Accept” in the cookie banner)

You can change your choice at any time by clearing the site’s storage in your browser (cookies/localStorage) and reloading the page. You can also manage cookies through your browser settings.

4. Why We Process Data (Purposes) and Legal Bases

We process personal data for the following purposes:

• To operate and secure the website (legal basis: legitimate interests; GDPR Art. 6(1)(f))
• To respond to enquiries and provide support (legal basis: legitimate interests and/or contract; GDPR Art. 6(1)(f) / 6(1)(b))
• To provide the Services and manage subscriptions (legal basis: contract; GDPR Art. 6(1)(b))
• To comply with legal obligations (legal basis: legal obligation; GDPR Art. 6(1)(c))
• Optional analytics/marketing (legal basis: consent where required; GDPR Art. 6(1)(a))

5. Who We Share Data With

We do not sell your personal data. We may share data with the following categories of recipients:

• Payment / subscription processing (Paddle) — we use Paddle as our Merchant of Record to process payments, manage taxes/receipts, and handle subscription status. Paddle processes billing and payment details, and may share limited purchase/subscription status with us so we can activate your access.
• Email delivery (Resend) — we may use Resend to send transactional emails such as account verification, password reset, purchase/licensing messages, and support replies. This typically includes your email address and the message content.
• Hosting / infrastructure — our website and application services are hosted on our infrastructure and/or hosting providers (e.g., our server environment). These providers may process limited technical data such as IP address, logs, and request metadata for security and reliability.
• Content delivery (Cloudflare cdnjs) — some pages load open-source code libraries from Cloudflare’s public CDN, which receives your IP address and browser details when the file is requested.
• Microsoft — if you use the CuePulse add-in inside PowerPoint, the add-in is loaded through Microsoft Office and Microsoft’s own privacy terms apply to that environment.
• Analytics (Google Analytics) — if you consent to analytics cookies, we use Google Analytics to measure website usage. When you decline, analytics is not loaded.
• Authorities / legal — when required to comply with applicable law, court order, or to protect rights and safety.

Where service providers process personal data on our behalf, they act as processors under GDPR and are bound by contractual obligations (including confidentiality and data protection terms). Where providers act as independent controllers for their own purposes (e.g., certain payment compliance obligations), their privacy notices apply.

6. International Transfers

Some service providers may process data outside the European Economic Area (EEA). Where this occurs, we use appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) or an adequacy decision, as applicable.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described above:

• Website logs: typically up to 3 months unless needed for security investigations
• Support emails: for as long as needed to address your request and for reasonable record-keeping
• Billing/subscription records: as required by tax/accounting laws
• Accounts: until you delete your account from your dashboard. Accounts whose email address is never confirmed are deleted after 4 days, unless a purchase is linked to them.
• Failed login and rate-limit records: 24 hours
• Download statistics: we store only a one-way hash of your IP address that changes every day, not the address itself
• CuePulse / EventSpin rooms: rooms you do not save are deleted after 30 days; rooms you save are kept so you can reuse them (EventSpin removes saved rooms unused for one year)
• AV Project data and web viewer content: until you delete or replace it, or delete your account
• Synced app data: deleted one year after your license for that app ends (we email you a reminder a month before)

8. Your GDPR Rights

If you are in the EU/EEA, you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Delete data (in certain cases)
• Restrict processing
• Object to processing based on legitimate interests
• Data portability (where applicable)
• Withdraw consent at any time (where processing is based on consent)

To exercise your rights, contact us at info@cuecongress.com.

You also have the right to lodge a complaint with your local supervisory authority. In Greece, this is the Hellenic Data Protection Authority (HDPA).

9. Security

We implement reasonable technical and organizational measures to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Security & Data Breaches

We implement reasonable technical and organizational measures to protect personal data. Where account passwords are used, they are stored using industry‑standard hashing (not in plain text).

No method of transmission or storage is completely secure. If a personal data breach occurs, we will assess the risk and notify the competent supervisory authority and affected users where required, in accordance with applicable law (including GDPR).

10. Children

Our Services are not intended for children. We do not knowingly collect personal data from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and update the effective date above.

12. Contact

Questions or requests: info@cuecongress.com

← Back to Home