Privacy Policy

Last updated: May 21, 2026

1. Introduction

CueKit ("we," "our," or "us") is a festival and event management platform that helps organizers synchronize participant data, manage communications, and coordinate event schedules. This Privacy Policy explains how we collect, use, and protect your information when you use our services.

By using CueKit, you agree to the practices described in this policy.

2. Information We Collect

Account Information

When you sign in via Google OAuth, we receive your name, email address, and profile picture from your Google account. We also store an organization-level Google refresh token to enable integrations with Google Sheets and Gmail on your behalf.

Event & Participant Data

CueKit synchronizes data from Google Sheets that you connect, including participant names, contact information, categories, and any other columns present in your spreadsheets. This data is stored in our database to power scheduling, communications, and CRM features.

Usage Data

We collect basic usage information such as audit logs of actions taken within the platform (e.g., schedule changes, email sends, status updates). This data is used solely for operational transparency and debugging purposes.

3. How We Use Your Information

We use the information we collect exclusively to provide and improve CueKit's services, including:

Authenticating your identity and managing your organization
Synchronizing participant data from your connected Google Sheets
Sending emails (acceptance, rejection, schedule notifications) on your behalf via Gmail
Managing event schedules, venues, and RSVP responses
Providing audit logs and activity history for your organization
Displaying public event schedule pages

4. Data Sharing & Third Parties

We do not sell, rent, or transfer your data to third parties for advertising, marketing, or any commercial gain unrelated to providing our services.

Your data may only be shared in the following limited circumstances:

Google APIs: CueKit interacts with Google Sheets and Gmail APIs using your authorized credentials to sync data and send emails. We do not share your data with Google beyond what is necessary for these integrations.
Infrastructure Providers: Your data is stored on Google Cloud SQL (PostgreSQL). These providers act as data processors under our direction and do not use your data for their own purposes.
Legal Requirements: We may disclose your data if required by law, legal process, or governmental request.

5. Data Retention

We retain your data for as long as your organization's account is active. Event-specific data can be reset at the event level, and organization-wide data can be removed via the admin panel. Contact records use soft deletion and can be permanently purged upon request.

6. Data Security

We implement industry-standard security measures to protect your data, including:

Encrypted database connections via SSL/TLS
AES-256-CBC encryption for RSVP tokens
OAuth 2.0 for authentication (no passwords stored)
Database credentials stored in Google Cloud Secret Manager
Dev mode email safety controls to prevent accidental data exposure during development

7. Your Rights

You have the right to:

Access and review the data we hold about you and your organization
Request correction of inaccurate data
Request deletion of your data by performing an organization reset or contacting us
Revoke Google OAuth access at any time through your Google Account settings

8. Cookies

CueKit uses essential cookies only — specifically session cookies to maintain your authenticated state and store user preferences. We do not use tracking cookies, analytics cookies, or any third-party advertising cookies.

9. Children's Privacy

CueKit is not directed to children under the age of 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us at [email protected] so we can take appropriate action.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated "Last updated" date. We encourage you to review this policy periodically.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].