Pending final legal review

Privacy Policy

Last updated June 25, 2026

CueFrame Inc. (“CueFrame,” “we,” “us”) is an API-first service for composing and rendering video, used by developers and AI agents. This policy explains what we collect, why, who we share it with, and the choices you have.

Information we collect

  • Email address — when you request early access through the form on this site.
  • Scheduling details — if you book a call, handled by our scheduling provider.
  • Account & API usage — if you use the API: account details, API keys, request and job metadata, and operational logs needed to run, secure, and bill the service.
  • Customer Content — the media (video, audio, images) and compositions you upload or generate so we can process and render them.
  • Site usage data — basic, privacy-respecting analytics about how the site and product are used.

How we use it

  • Provide, operate, secure, and debug the service.
  • Process and render your Customer Content at your direction.
  • Bill usage and meet legal and accounting obligations.
  • Respond to access requests and send product updates you ask for.

Your content and AI training

Your Customer Content and the video we render for you are yours. We use them only to provide the service to you. CueFrame does not use Customer Content to train generative models.

Who we share it with

We share data only with service providers (subprocessors) that help us run CueFrame, under their respective terms, and only as needed. We do not sell your personal information. Our subprocessors currently include:

  • Hosting & CDN — Render (application and worker hosting) and Cloudflare (CDN, edge workers).
  • Object storage — Cloudflare R2 (your media) and Amazon Web Services S3 (render output staging).
  • Application backend — Convex (database and API runtime) and Temporal, self-hosted on Render (job orchestration).
  • Media processing & rendering — Modal (GPU/CPU compute for analysis and encoding), Amazon Web Services (AWS Lambda, which renders your video frames), Deepgram (speech-to-text), and TwelveLabs (visual understanding — when channel analysis runs, we send it a time-limited link to your video).
  • AI model providers — routed through our own gateway to Anthropic and OpenAI (language models), and fal.ai (image, video, music and sound-effect generation, including ElevenLabs models it hosts).
  • Stock media & fonts — when you search for stock assets we pass your query to Pexels, Pixabay, Freesound, Klipy and LottieFiles; font search queries go to the Google Fonts API.
  • Accounts & authentication — Better Auth (session and OAuth handling, running on our own infrastructure).
  • Billing & payments — Autumn (subscription and usage metering) with Stripe as its payment processor. If you pay per-request with a crypto wallet (x402), payment verification and settlement go to the Coinbase-operated x402 facilitator and are recorded on the Base blockchain.
  • Email — Resend (transactional email such as password resets).
  • Analytics, monitoring & logs — PostHog (product analytics), Sentry (error and uptime monitoring), Axiom (logs and metrics), and Langfuse (AI request tracing).

Data retention & deletion

We keep information only as long as needed for the purposes above or as required by law, then delete or anonymize it. You can ask us to delete your Customer Content, and we delete it on account closure (subject to backups expiring on a rolling basis and any legal retention obligations).

Your rights

You can ask us to access, correct, export, or delete your information. Depending on where you live, you may have additional rights under laws such as GDPR or CCPA, including the right to object to or restrict certain processing. To make a request, contact us using the link in the footer.

International transfers

We and our subprocessors may process information in countries other than yours. Where required, we rely on appropriate safeguards for those transfers.

Security

We use reasonable technical and organizational measures to protect your information — including scoped API keys, encryption in transit, and access controls. No method of transmission or storage is perfectly secure.

Children

CueFrame is not directed to children under 13 (or 16 where applicable).

Changes

We may update this policy; we’ll revise the “last updated” date above and, for material changes, give notice.

Contact

Questions about privacy, or want to exercise a right? Email privacy@cueframe.ai, or reach us via the contact link in the footer.

CueFrame Inc.