Privacy Policy

Welcome to Cueston ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data when you use our Chrome browser extension and web application.

1. Authentication information

When you use the Cueston Chrome extension, we store your Cueston API key locally in your browser using Chrome's storage API. This key is necessary to:

• Authenticate your connection to the Cueston dashboard
• Maintain your signed-in session
• Enable the element picker functionality

Storage: Your API key is stored locally on your device and is never transmitted to third parties.

2. Account information

When you create an account on cueston.com, we collect:

• Email address (for account identification and communication)
• Name (optional, for personalization)
• Password (hashed and securely stored)

3. Usage data

We collect analytics data about how you use our service, including:

• Product tours, tooltips, and banners you create
• URL patterns where your content is displayed
• View counts and engagement metrics for your content
• Browser type and version (for compatibility purposes)

We use the collected information solely for the following purposes:

• Service delivery: To provide and maintain our product tour and onboarding features
• Authentication: To verify your identity and maintain secure access to your account
• Analytics: To track engagement with your tours, tooltips, and banners
• Support: To respond to your questions and provide customer support
• Improvement: To improve our service and develop new features

We implement industry-standard security measures to protect your data:

• Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• Local storage: Your API key is stored locally on your device using Chrome's storage API
• Password security: Passwords are hashed before storage
• Access control: We implement strict access controls to limit who can access your data

Our Chrome extension requests the following permissions, which are used exclusively for the stated purposes:

activeTab

Used to access the current tab when you activate the element picker to select HTML elements on your webpage.

storage

Used to store your Cueston API key locally on your device.

tabs

Used to open the Cueston dashboard in a new tab and verify URLs to prevent operation on restricted pages.

scripting

Used to inject the element picker script when you explicitly activate the picker feature.

<all_urls> (host permissions)

Required because Cueston works on any website you configure. The extension only activates on URLs you explicitly set up in your dashboard.

We use the following third-party services to operate our platform:

• Hosting: Our infrastructure is hosted on secure cloud servers
• Database: We use Supabase for secure database management
• Analytics: We may use analytics tools to understand service usage

These services are contractually obligated to protect your data and use it only for providing services to us.

You have the following rights regarding your data:

• Access: You can access your data through your dashboard at any time
• Correction: You can update your account information in settings
• Deletion: You can delete your account and all associated data in settings, or ask us to do it
• Export: You can request a copy of your data
• Withdrawal: You can disconnect the extension at any time, which removes the locally stored key

We retain your data for as long as your account is active or as needed to provide you services. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it by law.

Cueston is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we discover that we have collected personal information from a child under 13, we will delete it immediately.

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@cueston.com
• Website: www.cueston.com
• Support: www.cueston.com/support

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• The right to be informed about data collection
• The right to access your personal data
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to restrict processing
• The right to data portability
• The right to object to processing

To exercise any of these rights, please contact us at privacy@cueston.com.