Privacy Policy: how CueScout handles your data

CueScout helps teams monitor configured public sources, review the buyer questions found there, plan and draft pages to publish on their own site, copy tracked links, and record outcomes.

CueScout is read-only on third-party platforms. It does not post, vote, comment, send direct messages, or operate your community accounts, and it does not ask you to connect one.

Account data such as your name, email address, authentication state, and password reset metadata.

Product setup data such as product names, descriptions, positioning notes, keywords, competitor keywords, target communities, excluded terms, brand voice samples, preferred call-to-action style, and forbidden claims.

Source and scan data such as configured platforms, connection state, scan requests, source health events, matched public posts, match reasons, lead feedback, writing-plan items, published page addresses you enter, copied tracked links, and revenue events you log or receive through connected billing webhooks.

Integration data needed to operate connected sources or providers, including encrypted OAuth access and refresh tokens, granted scopes, connected account email addresses, selected property identifiers, API-key configuration state, webhook delivery metadata, and provider identifiers from billing or revenue systems.

Usage and diagnostics data such as page views, product events, error logs, IP-derived request metadata, browser/device information, and support messages.

If you choose to connect Google Search Console, CueScout uses read-only access to list sites available to your Google account and retrieve search-performance data for the site you select. This can include page and query dimensions, clicks, impressions, click-through rate, average position, access level, and the selected site address.

If you choose to connect Google Analytics, CueScout uses read-only access to list the accounts and GA4 properties available to you and retrieve aggregate reporting data for the property you select. This can include property name and identifier, time zone, currency, key-event names, users, sessions, key events, landing-page performance, referral sources, and daily totals.

CueScout uses this Google data to show reports for your own properties, measure outcomes, and improve or ground the writing plan you request. The scopes are read-only: CueScout cannot modify your Search Console sites, Analytics properties, events, settings, or reporting data.

CueScout does not sell Google user data, use it for advertising, determine creditworthiness, or use it to train generalized AI or machine-learning models. When you explicitly request AI-generated output, relevant writing-plan context, which may include Google-derived query or page context, may be sent to an AI service provider only to produce that requested output.

CueScout's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

To create and secure your account, operate the app, run configured scans, build and display your writing plan, maintain tracked-link redirects, attribute outcomes, and show reports.

To improve lead matching, tune product setup quality, diagnose failed scans or billing webhooks, prevent abuse, respond to support requests, and understand product usage.

To send service messages such as account, billing, security, support, and operational notices.

CueScout may scan public conversations from configured sources such as Reddit, Hacker News, and Quora. Public scan mode does not require us to control your account.

Optional OAuth readiness may be used for source connection flows where available, but OAuth access is not a promise that a platform approves a specific use, prevents rate limits, or guarantees account safety.

You are responsible for using generated drafts and public-source information in a way that respects each platform, community, and applicable law.

Writing-plan guidance is generated from product context and matched conversation context. What you publish, and where, is entirely your decision. CueScout does not connect to or act on any Reddit, Hacker News, or Quora account.

CueScout does not guarantee that a draft is accurate, compliant with a community rule, accepted by a platform, or suitable for every audience.

We may use product analytics tools such as DataFast and Microsoft Clarity to understand product usage and improve the workflow. When you are signed in, these tools may associate activity and session replays with your account. See the cookie policy for what each one records.

Tracked links may record redirect events and related campaign parameters so you can measure whether a published page led to visits or outcomes.

Billing webhooks are processed from our payment provider, Polar, to update subscription state, record revenue attribution, and prevent duplicate processing.

We do not sell your personal information.

We may share information with service providers that help run the product, including hosting, database, authentication, analytics, AI, email, billing, logging, and support providers.

Google API data is shared only with processors needed to operate the user-facing features you request. Relevant Google-derived writing-plan context is shared with an AI provider only when you request an AI-generated output. Authorized personnel may access data only when needed for support, security, legal compliance, or with your permission.

We may disclose information if required by law, to protect rights and safety, or in connection with a business transfer such as a merger, acquisition, financing, or sale of assets.

We keep information for as long as needed to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and maintain business records.

Google connections and their imported reporting data are retained while the connection is active. Disconnecting a Google service deletes its stored connection, tokens, and imported data from the live service. Deleting the related product or your account also deletes that data. Deleted information may remain temporarily in encrypted backups until those backups rotate.

OAuth tokens are encrypted at rest, and data is protected in transit using HTTPS. Access is limited to systems and personnel that need it to operate, secure, or support the service.

We use reasonable technical and organizational safeguards, but no internet service can guarantee absolute security.

You can update product setup, disconnect supported integrations, request support, or ask us to delete account data subject to legal, security, billing, and backup retention limits.

You can revoke CueScout's Google access at any time from your Google Account permissions. Disconnecting in CueScout removes the local connection and imported data; CueScout also requests revocation from Google when doing so will not disrupt another CueScout Google connection that uses the same grant.

You can control browser-level cookies and tracking settings. Some choices may affect product functionality.

Questions about this Privacy Policy can be sent to hello@cuescout.com.