Legal
Privacy Policy
Effective June 30, 2025 · Questions? isaiah@cuelab.live
CueLab is a worship production tool. This policy explains what data we collect, why we collect it, and how we protect it. We keep it short because we keep it simple — we're not an ad platform and we don't sell your data.
What We Collect
- Account info — your email address, name, and a salted hash of your password. We never store your plain-text password.
- Files you create — songs, setlists, templates, and Ableton Live Set files stored in your account.
- Usage data — which features you use and when files are generated, to help us improve the product.
- Planning Center tokens — OAuth tokens issued by PCO when you connect your account. We store these only to maintain the integration on your behalf.
- Session cookie — a secure, httpOnly cookie set when you log in. No tracking pixels or cross-site cookies.
- Device ID — a machine identifier used to enforce per-device license limits. Not linked to any external database.
We do not collect your payment card details (handled by Stripe), precise location, or audio content of your stems.
How We Use It
- To run the service — generating ALS files, MC4 configs, chord charts, and setlists.
- To manage your account, subscription, and device access.
- To send transactional emails (password resets, billing receipts). No marketing emails without opt-in.
- To keep the app secure — rate limiting, login monitoring, abuse prevention.
AI Processing
CueLab uses Anthropic Claudeto parse chord chart PDFs. When you use this feature, the document text is sent to Anthropic's API. Your audio files and account info are not sent to Anthropic. Your content is not used to train any AI model. Anthropic's privacy policy →
Who We Share With
We don't sell your data. We share it only with the services required to run CueLab:
- Stripe — payment processing. Stripe Privacy Policy
- Anthropic — chord chart AI (document text only). Anthropic Privacy Policy
- Planning Center — OAuth token exchange when you connect PCO. PCO Privacy Policy
- Cloud hosting— your data is stored on our hosting provider's servers under a data processing agreement.
We may disclose data if required by law, and will notify you where legally permitted.
Data Retention
- Account data — kept for the life of your account, plus 90 days after deletion.
- Generated files — deleted when you delete them or close your account.
- Billing records — kept 7 years as required by tax law.
- Session tokens — expire after 30 days.
Your Choices
You can update your name and email in account settings at any time. To delete your account or request a copy of your data, email isaiah@cuelab.live— we'll respond within 30 days.
Security
We use industry-standard security practices including hashed passwords, optional two-factor authentication, encrypted connections (HTTPS), and rate limiting on login endpoints. No system is perfectly secure — if you find a vulnerability, please report it to isaiah@cuelab.live.
Children
CueLab is not directed to children under 13. If you believe a child under 13 has an account, contact us and we'll remove it promptly.
Your Content
Files you upload stay in your account and are not shared with other users. You are responsible for ensuring you have the rights to any audio or content you upload. CueLab is not liable for copyright infringement in content you upload. For DMCA notices, email isaiah@cuelab.live.
Dispute Resolution
⚖ Binding Arbitration — Please Read
Except for small claims, any dispute with CueLab will be resolved by binding individual arbitration through the American Arbitration Association under its Consumer Rules — not in court and not as a class action. You may opt out of this arbitration clause within 30 days of first creating your account by emailing isaiah@cuelab.live with "Arbitration Opt-Out." Governing law: Florida, USA.Changes
We'll email you and update the date above if we make material changes. Continued use after changes means you accept the update.