Privacy policy

1. Controller

The controller responsible for data processing is Stimm und Truppi GbR, Metzer Straße 30, 50677 Köln, Germany. Email: info@cueforge.online, phone: 0221/16876985. Represented by Philipp Prehn and Nika Wanderer.

2. Hosting

This website is hosted by Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA. Vercel processes technically necessary data (e.g. IP address, time of access, requested resource) to deliver the site. The legal basis is our legitimate interest in a secure and efficient service (Art. 6(1)(f) GDPR). A data processing agreement is in place with Vercel; transfers to the USA are based on the EU Standard Contractual Clauses.

3. Server log files

When the website is accessed, access data is automatically recorded in server log files (including IP address, date and time, page accessed, amount of data transferred, referrer, browser type). This serves to ensure trouble-free operation and the security of our systems. The legal basis is Art. 6(1)(f) GDPR.

4. Cookies

We use strictly necessary cookies only, which are required for signing in and maintaining a secure session in your customer account. These cookies do not require consent under § 25(2) TDDDG. We do not use analytics, tracking or marketing cookies, and we do not embed any third-party advertising or statistics services.

5. Customer account and authentication

To register and sign in, we process your email address, a name, and login and session data. We operate the account and authentication infrastructure through Supabase Inc. as a processor. The data is hosted in a data center within the European Union (Ireland). The legal basis is performance of the contract (Art. 6(1)(b) GDPR).

6. License management and app activation

To provide and verify your licenses, we process license and activation data (e.g. active licenses, terms, online and offline activations, device-related activation identifiers). This processing is necessary to perform the contract (Art. 6(1)(b) GDPR).

CueForge's AI features (transcription and translation) run entirely locally on your Mac. No audio or text content is transmitted to us or to third parties.

7. Payment processing

Payments are processed via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg. The data required for payment is transmitted directly to PayPal; we have no access to the payment data of your PayPal account. PayPal's privacy terms also apply. The legal basis is performance of the contract (Art. 6(1)(b) GDPR).

8. Invoicing

To create and manage invoices, we use the lexoffice service provided by Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany. Your invoicing data (name, address, VAT ID where applicable, invoice items) is processed. The legal bases are performance of the contract (Art. 6(1)(b) GDPR) and our statutory retention obligations (Art. 6(1)(c) GDPR).

9. Email communication

To send transactional emails (e.g. registration and invoice notifications) and messages from the contact form, we use the email service of IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The email address and the content of the respective message are processed. The legal basis is performance of the contract or our legitimate interest in communicating with you (Art. 6(1)(b) and (f) GDPR).

10. Contact form

If you contact us via the contact form, we process the data you provide (name, email address and message) to answer your enquiry. Your message is delivered to us by email. The legal basis is our legitimate interest in responding to your enquiry or the initiation or performance of a contract (Art. 6(1)(f) and (b) GDPR). The data is deleted once it is no longer required for processing and no statutory retention obligations apply.

11. Recipients and third-country transfers

We only share personal data with the processors and service providers named above insofar as this is necessary to provide our services. Where required, data processing agreements are in place with these providers. Where transfers to third countries (e.g. the USA) take place, we base them on appropriate safeguards such as the EU Standard Contractual Clauses.

12. Retention period

We store personal data only for as long as necessary for the stated purposes or as required by statutory retention periods. Invoicing and tax-relevant documents are retained in accordance with statutory periods (generally up to ten years).

13. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and a right to object (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future. To exercise your rights, a message to info@cueforge.online is sufficient.

14. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data. The competent authority includes the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Germany).