Privacy Policy

Legal Notice: This English version is provided for information purposes only. The legally binding version is the German one.

1. Data Protection Overview

General Information

The following notes provide a simple overview of what happens to your personal data when you visit this website.

Personal data refers to any data that can personally identify you.

Detailed information can be found in the privacy policy below.

2. Controller

Responsible for data processing:

Patrick Stigler Tech, Sole Proprietorship

operating under the brand CutCue

Goethestraße 38

70736 Fellbach, Germany

E-mail: contact@cutcue.io

3. Hosting

IONOS SE

IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest in reliable website delivery).

A Data Processing Agreement (DPA) has been concluded.

IONOS Cloud

Used for project data storage.

Legal basis: Art. 6 (1) lit. b GDPR (contract performance) and Art. 6 (1) lit. f GDPR (operational security).

A DPA has been concluded.

Netlify

Netlify, Inc., 44 Tehama Street, San Francisco, CA 94105, USA

Legal basis: Art. 6 (1) lit. f GDPR.

Standard Contractual Clauses (SCCs) and a DPA are in place.

4. General Information and Mandatory Details

We treat your personal data confidentially and in accordance with the law.

Legal Bases

Consent: Art. 6 (1) lit. a GDPR
Contract performance: Art. 6 (1) lit. b GDPR
Legal obligation: Art. 6 (1) lit. c GDPR
Legitimate interest: Art. 6 (1) lit. f GDPR

SSL/TLS Encryption

This site uses SSL/TLS encryption, visible through "https://" and the padlock symbol in your browser.

Objection to Promotional Emails

The use of published contact data for unsolicited advertising is prohibited.

Contact for Data Requests

To exercise your rights (access, deletion, restriction, etc.), please contact contact@cutcue.io.

Additional information may be requested to verify your identity.

5. Data Categories, Purposes, and Retention Periods

Data Category	Purpose of Processing	Legal Basis	Retention Period
Account data (email, password, language setting)	Account creation and management	Art. 6 (1) lit. b GDPR	Until account deletion
Contract data (name, payment status, plan details)	Contract execution and billing	Art. 6 (1) lit. b GDPR	10 years (legal retention)
Audio uploads	Audio analysis and processing	Art. 6 (1) lit. b GDPR	Automatically deleted after 24 hours
Usage statistics (anonymized)	Platform improvement	Art. 6 (1) lit. f GDPR	Permanently anonymized
IP addresses in logs	Security, troubleshooting, abuse prevention	Art. 6 (1) lit. f GDPR	7 days
Newsletter data (email address)	Sending updates and beta info	Art. 6 (1) lit. a GDPR	Until withdrawal
Support interactions (Discord, contact form)	Handling support requests	Art. 6 (1) lit. b GDPR	Deleted after purpose is fulfilled

6. Data Collection on This Website

Contact Form / Email Requests

Stored data is used solely to process your request.

Registration

Certain functions require registration. Mandatory information is required.

Legal basis: Art. 6 (1) lit. b GDPR.

Registration via Google

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Legal basis: Art. 6 (1) lit. a GDPR (consent).

7. Newsletter and Waitlist

Provider

Brevo (Sendinblue GmbH), Köpenicker Str. 126, 10179 Berlin, Germany

A DPA has been concluded.

Purpose

To inform users about project progress, beta phase, and release updates.

Legal basis: Art. 6 (1) lit. a GDPR.

Consent may be withdrawn at any time via unsubscribe link or by email to contact@cutcue.io.

8. Analytics

Plausible Analytics

Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia

Plausible operates without cookies or personal data.

Legal basis: Art. 6 (1) lit. f GDPR (legitimate interest).

9. Use of Artificial Intelligence (AI)

AI services are used for speech and text processing.

OpenAI

OpenAI Ireland Ltd., 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, Ireland

Legal basis: Art. 6 (1) lit. a GDPR (consent).

Deepgram

Deepgram, Inc., 1400 Fashion Island Blvd, Suite 302, San Mateo, CA 94404, USA

Speech data is processed for recognition purposes.

SCCs and a DPA are in place.

Processing occurs exclusively for contract fulfillment.

10. Discord (Support / Community)

Provider: Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA

Data (e.g., username, messages) may be transferred to the USA under SCCs.

Use is voluntary and outside of the CutCue platform.

Legal basis: Art. 6 (1) lit. a or lit. f GDPR.

11. Processing of Customer and Contract Data

Personal customer and contract data is processed to fulfill contractual obligations.

Legal basis: Art. 6 (1) lit. b GDPR.

12. Payment Services

Payments are processed via Lemon Squeezy, LLC,

222 S Main St, Suite 500, Salt Lake City, UT 84101, USA

Data transfer occurs solely for payment processing.

SCCs have been concluded.

CutCue does not store full payment data.

Legal basis: Art. 6 (1) lit. b GDPR.

13. Social Media

We maintain profiles on platforms such as LinkedIn and others.

When visiting these pages, the privacy policies of the respective providers apply.

Joint controllership under Art. 26 GDPR may apply.

Legal basis: Art. 6 (1) lit. f GDPR (communication and public relations).

14. International Data Transfers

Where personal data is transferred to the USA or other third countries, this occurs exclusively on the basis of suitable safeguards under Art. 46 GDPR (in particular, EU Commission Standard Contractual Clauses).

15. Data Security, Logs, and Backups

Server logs are stored for technical troubleshooting and security.

Retention period: 7 days, followed by automatic deletion.

Backups may contain anonymized or pseudonymized data only.

16. Final Provisions

This privacy policy is reviewed and updated regularly.

Last updated: October 2025