CueHand Privacy Policy

Effective date: 3 November 2026
Last updated: 1 November 2026

This Privacy Policy explains how Sealed Innovations LLC, the company that makes CueHand (“Sealed Innovations”, “we”, “us” or “our”), collects, uses, shares and protects personal information when you use the CueHand website, web app and mobile apps (together, the “Service”).

CueHand is business software for event businesses. It helps businesses manage enquiries, quotes, events, teams, invoices, payment records and client reviews.

If you have questions about this policy or how we handle personal information, contact privacy@cuehand.com.

1. Who this policy covers, and our role

The Service involves different groups of people. Our role depends on whose information is involved and why it is being processed.

• Account holders and team members. When we decide why and how personal information about account holders and team members is used to create accounts, provide the Service, manage subscriptions, provide support and secure the Service, Sealed Innovations is the data controller. A team member’s login, account and authentication information is handled by Sealed in this controller role; information that the same person’s business enters about them in an event, rota, supplier or other workspace record is processed by Sealed on that business’s behalf.
• Clients, enquirers, staff and suppliers of a CueHand business. A business using CueHand decides what information about these people it enters or collects through its enquiry forms, review links and other features, and why it uses that information. That business is the data controller and Sealed Innovations is its data processor, processing the information on the business’s behalf and under its instructions. The business is responsible for providing its own privacy information to those people. If you are a client, enquirer, staff member or supplier of a business using CueHand, contact that business first about its use of your information. We will assist the business as required.
• Website visitors. When someone visits our public website, Sealed Innovations is the data controller for information collected for website operation, security and enquiries.

A business’s use of CueHand may involve personal information about people in different countries. The business remains responsible for deciding whether it may collect and use that information under the laws that apply to it.

2. Information we collect

Information you give us

Depending on how you use the Service, we may collect:

• Account details: your name, email address and password, and a profile photo if you add one. Password authentication is handled by our authentication provider. Passwords are stored in hashed form; we do not have access to your plain-text password.
• Sign-in information from Apple or Google: if you choose this option, we receive information such as your name and email address from Apple or Google. Apple may provide a private relay email address. We do not receive your Apple or Google password.
• Business details: business name, business type, country, currency, optional information about where enquiries usually come from, a short description if you choose “Other”, and information you add in Settings, such as a logo, slogan, contact details, tax settings and terms printed on your documents.
• Team details: email addresses and roles of people invited to a workspace, and their names and profile photos once they join.
• Business content: information entered or received through CueHand, such as enquiries and leads, client contact details, quotes, event details, tasks, running orders, staff and supplier details, invoices, receipts, recorded payments, reviews and documents or images uploaded to the Service.

Information from enquiry forms, review links and crew links

When someone submits a business’s public enquiry form, we collect the information they submit, which may include their name, contact details, event date and requirements, and make it available to that business.

When a client uses a review link sent by a business, we collect the rating, selected highlights, comments, name provided and whether the person agrees that the business may quote their review. We make this information available to the business.

A crew link shared by a business displays the relevant event running order, including times, places and assigned team members, to anyone who has the link. It does not display prices, payment records or contact details. A business is responsible for deciding who receives a crew link and for sharing it appropriately.

Contacts on your phone or computer

If you choose “Add from contacts” in the mobile app when adding a staff member or supplier, the app opens your device’s contact picker and uses only the contact you select. Depending on the form, this may include a name, phone number, email address, company, address and website. CueHand does not read or upload your entire address book. The selected details are saved only if you save the form.

In the web app, you may use a contact file (.vcf) to fill in a client’s details. The file is read in your browser and is not uploaded to CueHand. The selected name, company, phone number and email address are placed in the form and are saved only if you save the form.

Information collected automatically

• Usage events: we record certain events about how the Service is used, such as completion of an onboarding step or sharing a form, to understand and improve the Service. These records may be linked to an account and business, but our usage-event properties are structural and do not include names, email addresses or phone numbers. We use our own analytics system and do not use third-party advertising or analytics trackers.
• Device and notification information: if you enable notifications, we store a push token or browser subscription for your device, together with technical information such as device name or browser user-agent where applicable. If you use the iPhone lock-screen event card (an iOS Live Activity), we also store the push token provided by iOS to update that card. Mobile push notification content may include event or task details and can be processed by Expo and the relevant Apple or Google delivery service. Website push payloads are encrypted using the Web Push protocol before they are sent to the browser’s push service.
• Technical and security information: our hosting, database, authentication and related service providers may generate logs containing information such as IP address, browser or device type, timestamps and diagnostic events. We use relevant information for security, abuse prevention, troubleshooting and service operation. We also use IP addresses briefly to limit repeated submissions to public enquiry forms.

Copies stored on your devices

To support event-day use when an internet connection is unavailable, the web app and mobile app may keep a local copy of upcoming events on your device, including names and phone numbers of people working on those events. These offline copies do not include prices or payment records. Changes made offline may remain on the device until they can be synchronised. The copies are removed when you sign out. You are responsible for securing devices used to access CueHand, including devices shared with other people.

Payments recorded for your business

CueHand allows a business to record payments it says it has received from its own clients. These are bookkeeping records only. CueHand does not process those client payments, transfer the money, hold the funds or collect card or bank account numbers through this feature. The business is responsible for the accuracy of the records it enters.

Paying for a CueHand subscription

When subscription checkout is enabled, purchases are expected to be made through Paddle (paddle.com), which will act as merchant of record for the purchase. Payment-card details are submitted directly to Paddle and are not provided to us as full card numbers.

We receive and retain subscription and billing information needed to administer the CueHand account, such as the plan, billing period, amounts, payment status, billing name, country and tax details where required, and transaction or payment references. We do not receive or store your full payment-card number.

If Paddle checkout is enabled, Paddle determines how it processes personal information for its own merchant-of-record, payment, tax, fraud-prevention and buyer-support activities. For those activities, Paddle acts as an independent controller under its own privacy information. Our use of account and subscription information in CueHand remains governed by this policy.

3. How we use information

We use personal information, as appropriate to our role, to:

• create and administer accounts and business workspaces;
• provide, operate, maintain and support the Service, including enquiries, quotes, events, team coordination, invoices, payment records and reviews;
• administer subscriptions, payments, billing enquiries and tax records;
• send service communications, including sign-in, account, security, billing and subscription messages;
• enable notifications where a user has chosen to receive them;
• maintain security, prevent fraud, spam and abuse, investigate incidents and enforce our Terms;
• understand how the Service is used and improve its functionality and reliability;
• respond to requests, complaints and legal claims; and
• comply with applicable legal obligations.

Messages to a business’s clients are generally prepared by CueHand for the business to send through its own email, WhatsApp or other channel. CueHand does not send those messages on the business’s behalf unless a feature expressly says otherwise.

We do not sell personal information and do not use it for third-party targeted advertising.

Legal grounds

Where a law requires us to identify a legal basis, we rely on one or more of the following, depending on the processing and jurisdiction:

• Contract: processing needed to provide the Service, administer an account or perform a subscription agreement.
• Legitimate interests: operating, securing and improving the Service; preventing abuse; maintaining business records; and handling support and disputes, where those interests are not overridden by individuals’ rights.
• Legal obligation: processing needed to comply with tax, accounting, regulatory or other legal requirements.
• Consent: where required, including before placing or reading non-essential cookies or similar technologies in jurisdictions that require prior consent, and for optional features where consent is the appropriate basis. You can withdraw consent for future processing where consent is the legal basis.
• Direct marketing: where permitted by applicable law, we may use your business contact details to send relevant product and service updates to existing business customers on the basis of our legitimate interests. We will provide a clear and simple way to opt out in every marketing message. Where prior consent is required, including under laws that require prior written consent for direct marketing, we will obtain it before sending marketing messages. Every marketing email will include an unsubscribe method; service, security and billing messages are not marketing messages.

Where we process a business’s customer, staff or supplier information as its processor, the business is responsible for identifying and communicating the legal basis for its processing.

4. Who we share information with

We use service providers to host, operate, secure and support CueHand. Their roles depend on the information and service involved. Some providers process Customer workspace data on our behalf; others support Sealed's own account, authentication or billing operations; and some act as independent controllers for their own services.

Notifications. Mobile notifications and iOS Live Activities may contain operational details such as client names, event titles, task titles, times or quote references. Those details may be visible in device notification previews or on a lock screen, depending on the device and the user's settings. Notification amounts are not included in push payloads. Notifications involving financial information are restricted to users whose workspace permissions allow them to see that information. Website push payloads are encrypted in transit using the Web Push protocol, but content may still be visible when displayed on the user's device.

Backups. The scheduled backup workflow runs through GitHub Actions. The runner temporarily handles source data, then encrypts the backup archives with age before uploading them to a private Cloudflare R2 bucket. Only encrypted backup objects are stored in R2. The workflow retains the newest 30 complete backup runs; this is a run-count limit, not a promise of a fixed 30-day retention period. Healthchecks.io receives status/heartbeat information only. We have successfully downloaded and verified a production backup and completed a restore-verification check. This confirms that the tested backup was restorable; it does not guarantee that every future recovery will be successful or instantaneous.

Paddle acts as an independent controller for its merchant-of-record activities. Healthchecks.io acts as an independent controller for the account and technical information it collects to provide its monitoring service. Neither is appointed to process Customer workspace content merely by providing those services.

We use first-party product analytics recorded in CueHand's own database. We do not use a third-party analytics, advertising or error-monitoring SDK in the web or mobile apps. We do not use Firebase Authentication, Analytics, Crashlytics, Firestore or Remote Config.

We may also disclose information:

• within a business workspace: to people authorised by that business, according to its workspace roles and permissions;
• to professional advisers: such as lawyers, accountants and auditors, where reasonably necessary and subject to appropriate confidentiality duties;
• to authorities or other parties: where required by law, court order or valid legal process, or where reasonably necessary to protect rights, safety and security; and
• in a business transaction: if Sealed is involved in a merger, financing, restructuring or sale, subject to appropriate confidentiality and legal safeguards.

We do not sell personal information. We do not use identifiable Customer workspace content to train general-purpose AI models.

5. Where information is stored and international transfers

Sealed Innovations LLC is a Wyoming, USA limited liability company. Its authorised operator administers and supports CueHand remotely from Ghana. This is an actual access and operating location; it does not change Sealed's place of incorporation. The production database and file storage are configured in Ireland, and the web application functions are configured for Dublin, Ireland. Service providers may process or access information in the United States, Singapore, Germany, Latvia and other locations depending on their infrastructure, personnel and service arrangements.

Hosting data in Ireland does not mean that all access or processing takes place there. In particular, authorised Sealed personnel may remotely access Customer workspace data from Ghana. Cloudflare R2's precise storage jurisdiction depends on the bucket configuration and applicable Cloudflare service terms; we do not represent that every backup object is stored in Ireland.

Where applicable data protection law restricts an international transfer or remote access from another country, we will use the transfer mechanism and safeguards required for the relevant parties, roles and jurisdiction. For Customer workspace data, the DPA describes the intended processing arrangements and the transfer instruments that may apply, including the European Commission's 2021 Standard Contractual Clauses and the UK International Data Transfer Addendum where legally appropriate. Customer-specific transfer annexes and assessments may need to be completed before those instruments can be relied on. The DPA does not make a transfer lawful where a required instrument, assessment or supplementary measure is missing.

For information Sealed processes as an independent controller, the appropriate legal basis and transfer safeguard depend on the particular processing and applicable law.

6. How long we keep information

We keep personal information for as long as reasonably necessary for the purposes described in this policy, subject to these service and legal retention rules:

• Active account and workspace data: kept while the account or workspace remains active.
• Read-only workspaces: when a trial or paid period ends without continuation, the workspace may become read-only. We retain it for 12 months from the date it becomes read-only and then delete it, subject to information that must be retained by law. We send the workspace owner reminders 60, 30 and 7 days before scheduled deletion. The owner can export or delete the workspace earlier.
• Subscription and accounting records: retained for the period required by the tax and accounting laws applicable to the relevant record. The exact period depends on the law that applies to Sealed and the type of record.
• Account deletion: information is deleted or de-identified as described in Section 7, subject to information we must retain by law or for legitimate dispute, security or fraud-prevention purposes.
• Technical logs and notification tokens: retained for the period reasonably needed for security, service operation and notification delivery, and then deleted or rotated under the relevant provider's retention settings.
• Backups: encrypted production backup archives are stored in a private Cloudflare R2 bucket. The workflow retains the newest 30 complete backup runs, not a fixed number of days. The GitHub-hosted runner temporarily handles source data before encryption. If information is deleted from the live Service, a copy may remain in an encrypted backup until that backup is rotated out under the run-count retention policy. Backups are used for recovery, not ordinary access to deleted workspace data.

Where we retain information after an account or workspace is deleted, we restrict it to the purpose for which it is retained and delete it when that purpose ends.

7. Deleting your account and workspace

You can request deletion from Settings in the web app or mobile app. You will be asked to confirm your identity using your password or, where applicable, a code sent to your email address.

• If you are the only member of your business workspace, deleting your account permanently deletes the workspace and its data, including clients, events, quotes, invoices, documents and images such as logos, staff photos and profile photos.
• If you are the last owner of a workspace that has other members, you must first make another member an owner or remove the other members.
• If you are a member of a workspace that continues without you, your login is deleted and your name, email address and profile photo are removed from the workspace’s records, which may display “Deleted user”. Usage records are no longer linked to you, and your device notification tokens and notification settings are deleted.

Deletion is initiated immediately. If a technical step fails, we may temporarily retain the minimum information needed to complete it, such as the account ID and email address, and remove that information when deletion is complete.

Deleting an account does not necessarily delete information that another workspace owner or business is entitled or legally required to retain, or information held independently by a payment provider, app store or other third party. A business using CueHand remains responsible for responding to requests concerning information for which it is the controller.

8. Your privacy rights

Depending on your location and the applicable law, you may have rights to:

• access personal information about you;
• correct inaccurate or incomplete information;
• request deletion;
• request a portable copy;
• object to or request restriction of certain processing;
• withdraw consent where processing is based on consent; and
• complain to a data protection authority.

To exercise a right concerning an account you hold directly with CueHand, email privacy@cuehand.com. We will respond without undue delay and, where the GDPR applies, normally within one month, subject to any lawful extension or other applicable statutory period.

If your information is stored in a CueHand workspace by a business, that business is generally the controller. Please contact the business first. We will assist the business with your request as required by our agreement and applicable law. If you contact us directly, we may refer your request to the relevant business.

A workspace owner can also use CueHand's Download everything feature to export the business workspace. The full export includes structured CSV spreadsheets, JSON records and copies of uploaded workspace files that are available for export. Large exports may be split into parts. Temporary download links expire after 10 minutes, and generated export archives are deleted after 24 hours; the owner can request a fresh export while the workspace remains eligible for export.

You may also contact the data protection authority in the country where you live, work or believe a relevant infringement occurred.

9. Cookies and similar technologies

Our web app uses cookies needed to keep you signed in and operate the Service securely. It also uses preference cookies or browser storage to remember interface choices, such as whether the sidebar is collapsed and which sidebar groups are closed.

The web app may use a first-touch attribution cookie named cuehand_ft when you arrive through a tagged link. It can store campaign tags (such as utm_source, utm_medium and utm_campaign) and a referring business slug so we can understand how a business discovered CueHand. The attribution cookie is retained for up to 30 days. It does not contain your name, email address or other direct contact details.

We ask for your choice before retaining attribution information. The notice offers Allow and No thanks. If you allow it, the attribution information may be retained and used if you later sign up. If you decline, the attribution information is not retained and any existing attribution cookie is deleted. Your choice is remembered for 180 days. You can reopen Cookie choices on the sign-in or registration page to change or withdraw your choice. If you change your choice to No thanks, the attribution cookie is deleted and the server does not use attribution tags for sign-up attribution.

The attribution notice is shown when a visitor arrives through a tagged link and no choice has yet been recorded. If no tagged link is present, the attribution cookie is not needed and is not set. We do not use advertising cookies or third-party advertising trackers.

The web app also uses browser storage for offline event copies and unsent changes described in Section 2, sign-up answers while you complete sign-up, and small preferences such as which tips or celebrations you have already seen. Browser storage is not necessarily a cookie and may remain on your device until cleared or removed by the app. Where a law requires consent before storing or accessing information on a device, we will apply the relevant consent requirement to the technology concerned.

10. Security

We use technical and organisational measures designed to protect personal information. These include encrypted connections (HTTPS), password hashing by our authentication provider, authenticated access controls, controls intended to keep each business’s workspace data separate, restricted access to production systems and private access links for event and lead documents. Certain business logos and profile photos may be available at public web addresses so they can appear in the app and on business documents; users should not upload images they do not want publicly accessible.

No online service can guarantee absolute security. We will investigate suspected personal data breaches and notify affected customers, individuals and authorities where required by applicable law.

11. Children

CueHand accounts are for people aged 18 or over. However, a business may enter information about children in an event workspace, for example a child’s name, age or event-related details. The business is responsible for ensuring that it has the legal authority and any required parental or guardian notice, consent or other lawful basis for doing so, and must limit the information to what is reasonably necessary. Sealed processes that information on the business’s instructions under the DPA. We do not knowingly allow children to create CueHand accounts.

12. Changes to this policy

We may update this policy to reflect changes to the Service, our processing or applicable law. If we make a material change, we will notify account holders through the Service or by email before the change takes effect where reasonably practicable. The “Last updated” date shows when this policy was most recently revised.

13. Contact us

Sealed Innovations LLC
Registered agent address: 30 N Gould St, Ste R, Sheridan, WY 82801, USA (this is not an operating office)
Privacy enquiries: privacy@cuehand.com