Privacy Policy

Last updated: August 12, 2026

CueNalysis provides subscription-based competitive research reports. This Privacy Policy explains how CueNalysis (“CueNalysis,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you visit cuenalysis.com, contact us, request or buy our services, or otherwise interact with us (collectively, the “Services”).

1. Information We Collect

We collect the following categories of information:

• Information you provide directly. This includes your name, work email address, phone number, company name and website, the competitors you ask us to track, messages or notes you submit, and correspondence with us.
• Subscription and transaction information. We keep records related to your plan, activation, subscription, invoices, and communications. Payments are processed by Stripe. We do not receive or store your full payment-card number.
• Device and usage information. When you submit a form, we collect the source page, time of submission, IP address, and browser user-agent information for security, fraud prevention, and service operations. Our website also uses Google Tag Manager to load Google Analytics 4 and, where enabled, advertising tags. Those tags may collect cookie identifiers and information about how visitors use the site, and they are not loaded until you consent. See Section 4 for the full cookie notice and your controls.
• Research and report information. To provide the Services, we collect and analyze information available from public sources, such as business websites, search results, public reviews and community discussions, public news coverage, hiring signals, and public market information. Public-source material may incidentally contain personal information, such as an author or reviewer name or public profile information.

Please do not submit sensitive personal information, login credentials, payment-card information, health information, or confidential information that is not necessary for us to provide the Services. CueNalysis does not require access to your internal systems to prepare its standard reports.

Platform-sourced public content. Where we collect public content from third-party platforms (such as review sites or community platforms like Reddit), we do so through official APIs where available and in accordance with each platform’s terms. We use this content to produce aggregated, derived insights. We do not resell or redistribute raw platform content, do not use it to train artificial-intelligence models, and do not build profiles of individual authors. Content that has been deleted from the source platform is excluded from analysis when detected and purged from our systems. Individuals who appear in public-source material may request removal from our systems by emailing [email protected].

2. How We Use Information

We use personal information to:

• respond to inquiries, reserve or activate subscriptions, deliver reports, and provide customer support;
• identify the company and competitive field you ask us to research, create reports, and maintain month-to-month comparisons;
• process payments and manage our commercial relationship with you;
• send service, account, billing, and, where permitted, product-launch communications;
• secure the Services, prevent spam, fraud, and misuse, and troubleshoot technical problems;
• understand and improve the website, reports, and Services; and
• comply with applicable law and enforce our agreements.

3. How We Disclose Information

We may disclose information to the following categories of recipients when necessary for the purposes above:

• Hosting, storage, and website providers, including Cloudflare and its D1 database service;
• Payment providers, including Stripe, to process payments and manage payment-related activity;
• Communications and CRM providers, including Resend and any CRM provider we configure to manage a lead or customer relationship;
• Research, data, and analysis providers, including providers used to retrieve public web, search, review, and market data, and artificial-intelligence providers used to help analyze and synthesize research;
• Analytics and tag-management providers, including Google, to the extent tags are configured through Google Tag Manager;
• Professional advisers, authorities, and transaction parties where reasonably necessary for legal, security, financing, merger, acquisition, or similar business purposes.

We do not sell personal information for money. We do not knowingly use personal information for cross-context behavioral advertising. We do not disclose personal information to third parties except as described in this policy, with your direction or consent, or as required or permitted by law.

4. Cookies and Similar Technologies

Cookies are small files a website stores in your browser. We also use closely related technologies such as browser local storage and pixels. This section is our cookie notice.

4.1 Your choices

The first time you visit cuenalysis.com you are shown a consent banner. Non-essential cookies are switched off by default and are not set until you turn them on. Rejecting is exactly as easy as accepting: both are a single click on the banner. You can change or withdraw your choice at any time, and withdrawing is as easy as giving consent.

Open your cookie preferences

Withdrawing consent does not affect the lawfulness of processing carried out before you withdrew it. When you switch a category off, we stop the corresponding tags from setting or reading storage and we delete the cookies that category had already placed in your browser where we are technically able to do so. You can also clear or block cookies through your browser settings; blocking strictly necessary cookies may break parts of the site.

We store your choice for 6 months, after which we ask again. We keep a record of each choice (the categories selected, the time, the policy version, your country and, for US visitors, your state, and a salted one-way hash of your IP address) so that we can demonstrate consent as required by Article 7(1) of the GDPR. That record contains no advertising identifier and is not used for marketing.

4.2 Categories we use

• Strictly necessary (always on). Page delivery, security, bot and fraud protection, load balancing, form submission, and remembering your cookie choice. These are used on the basis of our legitimate interest in operating a secure website and, under the ePrivacy Directive and comparable rules, do not require consent.
• Analytics (off by default). Google Analytics 4, loaded through Google Tag Manager. Tells us which pages are read, where visitors leave, and whether the site is working. Set only with your consent.
• Advertising (off by default). Advertising and remarketing technologies, for example Google Ads and Meta, used to measure campaign performance and show CueNalysis ads on other sites. Set only with your consent, and never for visitors sending a Global Privacy Control signal unless that visitor explicitly overrides it.
• Preferences (off by default). Remembers optional choices such as saved form details so you do not re-enter them on a return visit.

4.3 The specific cookies

Google Tag Manager itself sets no cookies. It is the container through which the analytics and advertising tags above are loaded, and it is configured to withhold every one of them until the matching consent signal is granted. Payment is completed on a Stripe-hosted checkout page; any cookies Stripe sets there are governed by Stripe’s privacy policy, not this one. The list above is reviewed when tags change; if you find a cookie on cuenalysis.com that is not described here, tell us at [email protected] and we will correct it.

4.4 Consent signals we honor

• Google Consent Mode v2. Before any Google tag loads, we set ad_storage, ad_user_data, ad_personalization, analytics_storage, and personalization_storage to denied, and we enable ads data redaction. Those signals are raised only if and when you grant the matching category.
• Global Privacy Control (GPC). We treat a GPC signal from your browser as a valid opt-out of the sale or sharing of personal information and of targeted advertising, as required by the CCPA/CPRA and the Colorado, Connecticut, and other state laws that mandate recognition of a universal opt-out mechanism. Advertising storage is suppressed for GPC browsers, and clicking “Accept all” on the banner does not override it. You can override it deliberately in the preference center, where the conflict is explained.
• Do Not Track. There is no agreed industry standard for DNT, so we do not respond to it separately. GPC, which is a legally recognized signal, is honored as described above.

5. Retention

We retain personal information for as long as reasonably necessary to provide the Services, maintain our business records, meet legal, accounting, tax, and security obligations, resolve disputes, and enforce agreements. As a general practice: lead and interest-list records are retained for up to 24 months after our last interaction with you; customer and subscription records are retained for up to 7 years after the end of the customer relationship to meet accounting, tax, and legal obligations; raw public-source and platform content collected for research is retained for up to 30 days per engagement, after which only aggregated, derived report data persists; and finished reports and historical-comparison records are retained for the duration of the customer relationship plus up to 3 years.

6. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No internet transmission, storage system, or security measure is guaranteed to be completely secure. Please use care when deciding what information to send to us.

7. International Transfers

CueNalysis is based in the United States. We and our service providers may process information in the United States and in other countries where they or their sub-processors operate. Those countries may have privacy laws that differ from the laws where you live, and in some cases may not have been found by your regulator to offer an equivalent level of protection.

Where we transfer personal information out of the European Economic Area, the United Kingdom, or Switzerland, we rely on a valid transfer mechanism: the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or the UK Addendum to those clauses, the Swiss addendum where applicable, or the recipient’s certification under the EU-US Data Privacy Framework and its UK and Swiss extensions where the recipient is certified. We assess each transfer and apply supplementary measures where our assessment indicates they are needed. You may request a copy of the relevant safeguards by emailing [email protected].

8. Your Choices and Privacy Rights

You may unsubscribe from non-essential marketing emails by using the unsubscribe link in the email or by contacting us. You may also ask us to access, correct, delete, or provide information about personal information we hold about you, subject to applicable law and verification of your request. To make a request, email [email protected] with the subject line “Privacy Request.”

You can change or withdraw your cookie consent at any time through the cookie preference center. See Section 4 for the detail.

Depending on where you live, you may have additional rights, including the right to object to or restrict certain processing, appeal a decision about a request, or complain to a privacy regulator. We will not discriminate against you for exercising applicable privacy rights. Section 9 sets out the position for the EEA, the UK, and Switzerland. Section 10 sets out the position for US state privacy laws.

9. Legal Bases and Rights in the EEA, the UK, and Switzerland

This section applies if you are in the European Economic Area, the United Kingdom, or Switzerland. For the processing described in this policy, CueNalysis is the controller.

9.1 Legal bases

We process personal information only where we have a legal basis to do so under Article 6 of the GDPR and its UK equivalent:

• Contract (Art. 6(1)(b)). To activate and administer your subscription, produce and deliver your reports, take payment, and provide support. Without this information we cannot provide the Services.
• Consent (Art. 6(1)(a)). For analytics, advertising, and preference cookies and similar technologies, and for marketing emails where consent is required. You may withdraw consent at any time, including through the cookie preference center or the unsubscribe link in any marketing email. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Legitimate interests (Art. 6(1)(f)). To secure the Services and prevent fraud and abuse, to operate and improve the website and our reports, to conduct competitive research from public sources, and to send business-to-business communications about products relevant to your professional role. We have balanced each of these against your rights and freedoms, and you may object at any time as described below.
• Legal obligation (Art. 6(1)(c)). To meet accounting, tax, and other statutory record-keeping requirements, and to record and evidence your consent choices.

We do not use automated decision-making producing legal or similarly significant effects concerning you, and we do not intentionally process special categories of personal data under Article 9.

9.2 Public-source research and the rights of people who appear in it

Our reports analyze public material such as business websites, search results, public reviews, community discussions, news coverage, and hiring signals. That material can incidentally contain personal information, for example the name or public profile of a review author. We rely on legitimate interests for this processing, we use it only to produce aggregated, derived insight about companies rather than profiles of individuals, and we do not use it to train artificial-intelligence models. If you appear in public-source material we hold and want it removed, email [email protected]. Where we obtained information about you from a source other than you, Article 14 gives you the right to be told about it, and this section together with Section 1 is that notice.

9.3 Your rights

Subject to the conditions in the law, you have the right to request access to your personal information, rectification of inaccurate information, erasure, restriction of processing, and portability. You have the right to object to processing based on legitimate interests, and an absolute right to object to direct marketing at any time. Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email [email protected] with the subject line “Privacy Request.” We respond within one month, extendable by two further months for complex requests, and we will tell you if we need the extension. We do not charge a fee unless a request is manifestly unfounded or excessive.

9.4 Complaints

You have the right to lodge a complaint with your local supervisory authority. In the UK this is the Information Commissioner’s Office (ico.org.uk). In Switzerland it is the Federal Data Protection and Information Commissioner. In the EEA it is the authority in your country of residence, place of work, or where the alleged infringement took place. We would appreciate the chance to address your concern first.

9.5 Representative and data protection contact

Privacy questions and rights requests should be sent to [email protected]. CueNalysis has not appointed a Data Protection Officer, as it is not required to under Article 37. EU and UK representative under Article 27: TBD. If your request concerns the EEA or the UK and you would prefer to route it through a representative, contact us and we will tell you the current position.

10. United States State Privacy Rights

This section applies to residents of US states with comprehensive privacy laws, including California, Colorado, Connecticut, Virginia, Utah, Oregon, Texas, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Rhode Island, Indiana, and Kentucky, as and when each law takes effect. It also serves as our California “Notice at Collection.”

10.1 What we collect and why

In the preceding 12 months we have collected the following categories of personal information: identifiers and contact information (name, work email, phone, company, IP address); internet or other electronic network activity information (pages viewed, referring page, browser and device information, and, with consent, analytics cookie identifiers); commercial or subscription information (plan, invoices, transaction records); professional or employment-related information you provide; inferences drawn from research and usage information; and information from publicly available sources. We collect these from you directly, automatically through your use of the Services, from our service providers, and from public sources, for the purposes described in Section 2. We do not collect or process sensitive personal information for the purpose of inferring characteristics about you. Retention periods are in Section 5.

10.2 We do not sell or share your personal information

We do not sell personal information for money or other valuable consideration, and we do not share personal information for cross-context behavioral advertising, as those terms are defined by the CCPA/CPRA. We do not use personal information for targeted advertising or profiling that produces legal or similarly significant effects. We have not sold or shared the personal information of consumers under 16 years of age, and we do not knowingly collect it. If this ever changes, we will update this policy and provide the required opt-out before the change takes effect.

Because we do not sell or share, there is nothing to opt out of. We still honor the Global Privacy Control signal as described in Section 4.4, and we still provide the preference controls below.

Your Privacy Choices

10.3 Your rights

Depending on your state, you may have the right to:

• know or confirm whether we process personal information about you, and access it;
• obtain a copy of that information in a portable, machine-readable format;
• correct inaccurate personal information;
• delete personal information we hold about you;
• opt out of the sale or sharing of personal information, of targeted advertising, and of profiling with legal or similarly significant effects;
• limit the use and disclosure of sensitive personal information; and
• not be discriminated against or receive different pricing or service for exercising any of these rights.

10.4 How to submit a request

Email [email protected] with the subject line “Privacy Request” and tell us which right you are exercising and which state you reside in. We will acknowledge the request and respond within the period your state’s law requires, generally 45 days, extendable once by a further 45 days where permitted and where we notify you of the extension.

We must verify your identity before acting on a request to know, correct, or delete, normally by matching the email address and details you provide against our records and, where the request is high-risk, by asking for additional confirmation. An authorized agent may submit a request on your behalf with written permission signed by you, and we may still ask you to verify your own identity and confirm the agent’s authority.

10.5 Appeals

If we decline your request, we will tell you why. Residents of Colorado, Connecticut, Virginia, Texas, Montana, Oregon, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Kentucky, Indiana, and any other state providing an appeal right may appeal that decision by replying to our response or emailing [email protected] with the subject line “Privacy Appeal.” We will respond in writing within 45 days with our decision and the reasons for it. If the appeal is denied, you may complain to your state attorney general, and we will provide a link or method for doing so.

10.6 Nevada

Nevada residents may submit a verified request directing us not to sell covered information. We do not sell covered information, but you may submit such a request to [email protected].

11. Children’s Privacy

The Services are designed for business users and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.

12. Changes to This Policy

We may update this policy from time to time. We will post the updated version on this page and revise the “Last updated” date. If a change is material, we will provide additional notice where required by law.

13. Contact Us

For questions, requests, or concerns about this policy or our privacy practices, contact:

CueNalysis
17030 Saticoy St
Van Nuys, CA 91406
[email protected]