Privacy Policy

1. Information We Collect

We collect information you provide to us, information generated through your use of the Service, and limited information from our payment provider. Specifically:

• Account information — your name, email address, business name, and authentication details used to create and secure your account.
• Usage data — log data, device and browser information, and analytics about how you interact with the Service.
• Inspection and compliance data — the checklists, scores, notes, and reports you create within the Service.
• Payment information — billing details processed by Lemon Squeezy on our behalf. We do not store full card details on our systems.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve the Service; to process subscriptions and payments; to send transactional messages such as reminders and account notifications; and to provide customer support. We also use aggregated, de-identified data to understand usage trends and improve product quality. We do not use your inspection data for advertising.

3. Data Storage and Security

Your data is stored using Supabase, with row-level security enforced so that each account can only access its own records, and encryption in transit (TLS) for data moving between your device and our infrastructure. We apply administrative, technical, and organizational safeguards designed to protect your information. No method of transmission or storage is completely secure, but we work continuously to protect your data.

4. Data Sharing

We do not sell your data. We share information only with trusted sub-processors that help us operate the Service, and only to the extent necessary to provide it. Our sub-processors include:

• Supabase — database and authentication.
• Lemon Squeezy — payment processing and billing.
• Resend — transactional email delivery.
• Anthropic — AI-powered compliance features.

5. Data Retention

We retain your personal and inspection data for as long as your account is active or as needed to provide the Service. After account closure, we may retain certain information as required to comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer required, we delete or anonymize it.

6. Your Rights

Depending on your location, you may have rights under the GDPR, the CCPA, and other privacy laws, including the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. You may exercise these rights, or ask questions about them, by contacting us at support@cuiscore.io. We will respond within the timeframes required by applicable law.

7. Cookies

We use cookies and similar technologies that are necessary to operate the Service, such as keeping you signed in and maintaining your session. We may also use a limited set of analytics cookies to understand how the Service is used. You can control cookies through your browser settings, though disabling essential cookies may affect functionality.

8. Children’s Privacy

The Service is intended for businesses and is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so that we can delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. When we make material changes, we will revise the “Last updated” date above and, where appropriate, provide additional notice. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at support@cuiscore.io. You may also review our Terms of Service.