CueDocs policies
Privacy Policy
Last updated 11 September 2026.
Who operates CueDocs
Twin Origin Ltd operates CueDocs. Contact support@cuedocs.co.uk for privacy requests. Our verified registered company details appear below. For account administration, billing and service security we act as controller. We process customer invoice contents on the customer's instructions; customers must have authority to upload that information.
Information and purposes
We use account and workspace details, uploaded invoices, extracted information, corrections, exports, processing logs, subscription identifiers and usage records to provide and secure the service. Account administration is necessary to perform our agreement. Security and diagnostics support our legitimate interest in running a reliable service. Legal obligations may require payment records to be retained. Optional marketing analytics requires your choice and excludes invoice contents, supplier details and line items.
Service providers
Supabase provides authentication, the database and private temporary storage. Vercel hosts the application. CueDocs uses OpenAI's API for invoice reading. OpenAI receives the original invoice, including its contents. CueDocs temporarily retains the processing response and outcome with the invoice so interrupted processing can finish and the result can be downloaded. Stripe handles card details directly; CueDocs does not store them. Processing is not restricted to the UK or EU. Contact support@cuedocs.co.uk for information about our service providers and processing locations before uploading information with location restrictions.
Temporary invoice processing
Originals and their linked extracted data become inaccessible after 24 hours on every plan and are queued for physical deletion. Cleanup is retried after failures; expiry is not a promise of immediate removal from backups or providers. CueDocs does not provide a permanent invoice-history library.
Retention and deletion
Download invoice outputs before their 24-hour expiry. Expired content is queued for checked deletion and failed cleanup is retried. Contact support for account/workspace deletion. Downloaded files are outside our control. Database backups are not erased immediately by application deletion. We request no retrievable OpenAI response storage; this is not zero retention. OpenAI API data is not used for training by default unless the organisation opts in. Default abuse-monitoring retention can be up to 30 days, subject to provider safety and legal exceptions; prompt-cache state can persist for up to 24 hours. Account, usage, payment, analytics and security records are separate from invoice content and are not automatically removed by the 24-hour invoice cleanup. Contact support@cuedocs.co.uk to request deletion or information about these records. Payment and other records needed for legal obligations may need to be retained.
Your rights
Depending on the circumstances, you may request access, correction, erasure, restriction or portability, object to processing and withdraw optional analytics consent. Some records may need to be retained for legal or security reasons. You can complain to the UK Information Commissioner's Office at ico.org.uk.