CueWee: Privacy Policy

This Privacy Policy (“Policy”) explains how CUEWEE TECNOLOGIA LTDA (CNPJ 64.015.882/0001-41) (“CueWee”, “we”, “our”) collects, uses, shares, and protects personal data when you use the CueWee platform, including our website, web application, and any related services (collectively, the “Service”).

Company address: R. Zelina Vieira Meirelles, S/N, Quadra 26 Lote 06, Lagoa, Macaé, RJ, CEP 27931-045, Brazil. Contact: contact@cuewee.app

If you do not agree with this Policy, please do not use the Service.

1. Scope

This Policy applies to personal data processed by CueWee in connection with:

• account creation and management;
• use of the Service (including audio upload, processing, storage, and playback flows);
• communications with us (support, inquiries, and legal requests);
• subscription and billing management (via our payment processor).

This Policy does not cover third-party services that you may access through links or integrations not controlled by CueWee.

2. Personal Data We Collect

We collect personal data in the following categories:

2.1 Data you provide to us

• Account data: name, email address, password (stored as a hash or managed by authentication providers), and similar account identifiers.
• Communications: support tickets, emails/messages you send us, and related information.
• Sharing inputs: email addresses of the recipients with whom you choose to share a Project (view-only).

2.2 User Content and files you upload

• Audio files and related assets you upload (for example, stems, mixes, click/guide tracks).
• Project metadata you create or store (for example, project names, notes, structure labels, timestamps).
• Derivative technical outputs generated to operate the Service (for example, previews, waveforms, file transformations, processing results).

Important: audio may contain personal data (for example, voice). You are responsible for ensuring that you have rights and permissions to upload and process any content, including content containing personal data of third parties.

2.3 Data collected automatically

• Usage data: features used, actions taken, pages/screens viewed, timestamps, and performance logs.
• Technical and device data: IP address, device identifiers, browser type, operating system, language/time-zone settings (when available), and diagnostic data.
• Cookies and similar technologies: used for authentication, security, preferences, and analytics (see Section 9).

2.4 Payment data (processed by Stripe and Mercado Pago)

When you subscribe, card and Boleto payments are processed by Stripe, and PIX payments are processed by Mercado Pago. CueWee generally receives limited billing-related information (such as subscription status, plan, renewal dates, and the last 4 digits of a card), while these payment processors process the full payment details.

If you pay with PIX or Boleto, we ask for your CPF or CNPJ, because the PIX code and the Boleto can only be generated with the payer's CPF or CNPJ. For PIX, it is shared with Mercado Pago along with your name and email. For Boleto, it is shared with Stripe along with your name, email and address. We also store it with Stripe and use it to issue the service invoice (NFS-e) in your name.

3. How We Use Personal Data

We use personal data to:

• Provide and operate the Service (authentication, uploads, processing, storage, playback, sharing).
• Maintain security and prevent abuse (fraud detection, Terms enforcement, rate limiting, monitoring).
• Provide customer support and respond to requests.
• Manage subscriptions and billing (including access control based on plan status).
• Improve and develop the Service (debugging, analytics, performance, and feature improvements).
• Comply with legal obligations and respond to legal requests.

We do not sell your personal data.

4. Legal Bases for Processing

Depending on your jurisdiction and the specific processing activity, CueWee relies on one or more of the following legal bases:

• Contractual necessity: to provide the Service under our Terms of Service.
• Consent: where required (for example, certain cookies/marketing, where applicable).
• Legitimate interests: to protect, improve, and operate the Service, prevent fraud, and maintain reliability (balanced against your rights).
• Legal obligation: to comply with applicable laws, regulations, and legal requests.

5. Sharing and Disclosure

We may share personal data in the following circumstances:

5.1 Service providers (processors)

We use vetted third-party service providers to operate the Service (for example, hosting, storage, computing/processing, analytics, email delivery, customer-support tools, and payment processing). These providers process data on our behalf under contractual obligations and security controls.

5.2 Sharing by you (view-only access)

If you use the Service’s sharing feature, you can grant private, view-only access to specific Projects to recipients by email. Shared access is intended to be limited, private, and expires after seven (7) days (unless revoked earlier or re-shared). Recipients can view the shared Project content during the sharing window.

5.3 Legal, security, and enforcement

We may disclose data if we believe in good faith that it is necessary to:

• comply with the law, regulation, legal process, or lawful government requests;
• protect the rights, property, and safety of CueWee, our users, or others;
• enforce our Terms of Service; or
• investigate fraud, security, or technical issues.

5.4 Business transfers

If CueWee is involved in a merger, acquisition, reorganization, or asset sale, personal data may be transferred as part of that transaction, subject to appropriate protections.

6. Data Retention

We retain personal data for as long as necessary to provide the Service and for legitimate business purposes, including legal compliance, dispute resolution, and enforcement.

User Content retention (current policy):

• While your account has an active Subscription in good standing, we retain your User Content as needed to operate the Service.
• If your Subscription ends or your account becomes inactive, we offer a grace period of 30 (thirty) days during which we will seek to keep separated tracks available for reactivation. After that period, separated tracks may be deleted from accounts that exceed the free storage allowance. We seek to keep the original file uploaded for each song (the uploaded mix, not the separated tracks) so that separation can be performed again on reactivation; User Content may nonetheless be deleted, subject to legal and operational constraints (including backups and logs).
• In the event of account termination for violation of the Terms, including chargeback or suspected fraud, User Content may be deleted earlier, within a reasonable period. In the case of a chargeback or dispute opened without first contacting our support, User Content is deleted immediately, with no grace period (Terms of Service, section 5.7).

The grace period is a courtesy and may be extended, shortened, or modified at any time, with reasonable notice. The only guaranteed way to preserve your User Content is to keep your Subscription active.

We may retain certain data (logs, payment records, and fraud-related data) for longer when required by law or necessary for legal claims, fraud prevention, audits, accounting, or security.

7. International Transfers

CueWee is headquartered in Brazil, and your personal data may be processed in countries other than your country of residence (for example, where service providers operate infrastructure).

When necessary, we implement appropriate safeguards for international transfers, such as contractual protections and technical/organizational measures.

8. Your Rights and Choices

Depending on your jurisdiction (including Brazil under LGPD and the EEA/UK under GDPR), you may have rights such as:

• access to your personal data;
• correction of inaccurate or incomplete data;
• deletion/erasure (subject to exceptions);
• restriction of or objection to certain processing;
• portability of certain data; and
• withdrawal of consent (where processing is based on consent).

How to exercise rights: To request access, export, correction, or deletion, contact us at contact@cuewee.app. We may request information to verify your identity and protect your account. We will respond within applicable legal deadlines and may refuse requests that are unlawful, excessive, or that infringe the rights of others.

9. Cookies and Similar Technologies

We use cookies and similar technologies for:

• Essential functions (login sessions, security, fraud prevention);
• Preferences (remembering settings);
• Analytics (understanding product usage and improving reliability).

You can control cookies through your browser settings. Where required by law, we will provide appropriate cookie controls/consent mechanisms.

10. Security

We implement reasonable technical and organizational measures to protect personal data (such as access controls, encryption in transit, and operational security practices). However, no system is completely secure and we cannot guarantee absolute security.

11. Children

The Service is not intended for individuals under 18. If you believe a minor has provided personal data to CueWee, contact contact@cuewee.app.

12. Changes to This Policy

We may update this Policy from time to time. If changes are material, we will take reasonable steps to provide notice (for example, through the Service or by email). Continued use of the Service after the effective date means that you accept the updated Policy.

13. Contact

For privacy questions or requests, contact us at: contact@cuewee.app

CUEWEE TECNOLOGIA LTDA, Macaé/RJ, Brazil.