Privacy Policy
Implementation draft dated 6 September 2026. Final commercial/legal review is outstanding before public launch.
Who operates CueDocs
Twin Origin Ltd operates CueDocs. Contact support@cuedocs.co.uk for privacy requests. Our verified registered company details appear below. For account administration, billing and service security we act as controller. We process customer invoice contents on the customer's instructions; customers must have authority to upload that information.
Information and purposes
We use account and workspace details, uploaded invoices, extracted information, corrections, exports, processing logs, subscription identifiers and usage records to provide and secure the service. Account administration is necessary to perform our agreement. Security and diagnostics support our legitimate interest in running a reliable service. Legal obligations may require payment records to be retained. Optional marketing analytics requires your choice and excludes invoice contents, supplier details and line items.
Service providers
Supabase provides authentication, the database and private storage; the configured production database is London. Vercel hosts the application. Microsoft Azure Document Intelligence reads scans, images and mixed PDFs when fallback is needed; the configured resource is North Europe. Stripe handles card details directly. CueDocs does not store card details. International-transfer arrangements and provider contracts require final review before public launch.
Retention and deletion
Cancellation does not delete your invoices. The application provides a checked document-deletion workflow for linked records and originals. Failed steps can be investigated and retried; a completed deletion cannot be undone through the app. Download your exports before deleting an invoice. Contact support for account/workspace deletion. Downloaded files are outside our control. Database backup copies are not erased immediately by application deletion. Microsoft documents temporary analysis input/result retention for up to 24 hours after completion; CueDocs does not request earlier provider deletion. Final account, billing, analytics, security-log and backup retention schedules must be confirmed before public launch.
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction or portability, object to processing and withdraw optional analytics consent. Some records may need to be retained for legal or security reasons. You can complain to the UK Information Commissioner's Office at ico.org.uk.