Your data, not theirs.

CueBot is operated by Aerox Ltd, a company registered in England and Wales (company number 14926362) with its registered office at Unit 3, 116 Broughton Lane, Salford, England, M7 1UF.

We are the data controller for the personal data we collect through cuebot.app and our client engagements. If you have a question about how we handle your data, email hello@cuebot.app and you will get a real reply from a real person.

We only collect data we actually need to do work for you. That breaks down as follows.

Information you give us

• Discovery enquiries. Name, email, business URL, industry, current tools, budget band, timeline, and the free-text comments you share via our contact form.
• Newsletter sign-ups. Just your email address.
• Affiliate sign-ups. Name, email, the URL of the site or audience you promote on, your region, and a short description of your audience and fit.
• Chat with Milo. The messages you send through the chat panel and the replies our model generates back. We do not capture identifying data here unless you choose to share it in a message.
• Project work. When we build automations for you, we receive whatever access and data you provide to enable the work (API keys, store data, customer records). We treat that as confidential and use it only to deliver what we agreed.

Information collected automatically

• Analytics. We use Plausible Analytics, a privacy-friendly, cookie-less analytics tool that does not collect personal data, does not fingerprint visitors, and does not track you across sites.
• Server logs. Our hosting provider records standard request metadata (IP, user agent, timestamp) for security and abuse prevention. These logs roll off within thirty days.

Under the UK GDPR we need a lawful basis for each thing we do with your data. Here is ours.

• Contract. When you engage us to build automations, processing your data is necessary to perform the contract you have asked us to enter into.
• Legitimate interest. When you submit a contact-form enquiry, we have a legitimate interest in replying to you and following up if you do not reply for a few weeks. We weigh this against your privacy rights and stop following up if you ask us to.
• Consent. You give consent when you tick the box to subscribe to our newsletter or sign up to the affiliate programme. You can withdraw that consent at any time.
• Legal obligation. We retain invoice and accounting records for the statutory period (currently six years in the UK) regardless of any erasure request.

What we use your data for, in plain English.

• To reply to your enquiry and quote a piece of work.
• To deliver the automation builds, packs, or Managed service we have agreed.
• To send invoices and process payments via our payment provider.
• To send the newsletter you signed up for. One email a week, no more, unsubscribe in one click.
• To respond when you chat with Milo, our on-site assistant. Conversations are processed by Anthropic to generate replies.
• To pay affiliate referrals and respond to questions about the programme.
• To improve the site, fix bugs, and stop abuse, using anonymous analytics only.

We do not sell your data. We do not buy lists of leads. We do not run any advertising on this site, so we are not handing your data to ad networks.

We use a small number of carefully chosen third-party processors. Each one only sees the minimum data they need to provide their service.

• Vercel hosts the site and processes server logs.
• Resend sends transactional and newsletter emails.
• Anthropic processes the messages you send through the on-site chat to generate replies.
• Plausible handles privacy-friendly, cookie-less site analytics.

A current list is available on request. We will update this page if we add or change providers in a way that meaningfully affects your data.

Some of our processors are based outside the UK, including in the United States. Where that is the case we rely on the UK's International Data Transfer Agreement, the EU Standard Contractual Clauses with the UK Addendum, or the UK extension to the EU-US Data Privacy Framework, depending on the provider.

That means your data is treated to a comparable legal standard wherever it lives.

• Discovery enquiries. Up to twenty-four months from the last interaction, then deleted unless you have become a client.
• Client records. For as long as you are a client, plus six years afterwards to meet our statutory accounting obligations.
• Newsletter subscribers. Until you unsubscribe, then we keep a suppression record so we do not accidentally email you again.
• Affiliate sign-ups. For as long as you are an active affiliate, plus six years afterwards for accounting purposes.
• Chat conversations.Not stored on our servers. Anthropic's own retention policy applies to processing in transit; see their privacy policy for detail.
• Server logs. Up to thirty days.

Under the UK GDPR you have the following rights over your personal data. We honour them and we make it easy.

• The right to access the personal data we hold on you.
• The right to rectification if anything is inaccurate.
• The right to erasure (the so-called right to be forgotten).
• The right to restrict or object to processing.
• The right to data portability, where applicable.
• The right to withdraw consent for any processing based on consent.
• The right to complain to the Information Commissioner's Office at ico.org.uk if you think we have got something wrong.

To exercise any of these, email hello@cuebot.app and we will respond within one calendar month.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies. The only cookies that may be set are strictly necessary ones used briefly during form submission to prevent abuse and validate session state.

For the full breakdown see our cookies policy.

We use industry-standard practices to protect your data: HTTPS everywhere, secrets stored in encrypted environment variables, access to client systems gated behind multi-factor authentication, and least-privilege access controls when working in your stack.

We will never ask you for a password by email. If something looks off, email us directly and we will sort it.

CueBot is a service aimed at businesses. We do not knowingly collect personal data from anyone under sixteen. If you believe a child has submitted data to us, email hello@cuebot.app and we will delete it.

We update this policy when our processing changes. The date at the top of this page shows when it was last revised. Material changes will be flagged on the homepage or announced to newsletter subscribers before they take effect.

Questions, requests, or complaints about how we handle your data should go to hello@cuebot.app. A real human reads it. We aim to reply same-day during UK business hours.