Privacy Policy

Last updated: June 2025

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, create a workplace, or communicate with team members. This includes your name, email address, and any content you create within CuSpace including messages, briefings, and files you upload. We also collect usage data to improve the product, including how you interact with features, pages visited, and actions taken within the application.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve CuSpace. This includes operating the workplace communication features, processing payments through Stripe, sending service notifications (including transactional email and push notifications), and providing customer support. We do not sell your personal information to third parties. We do not use your workplace communications for advertising purposes.

3. Workplace Data

Data created within your workplace — including discussions, messages, briefings, shared files, and presence information — belongs to your organisation. CuSpace acts as a data processor for this content. Workplace owners are responsible for their team members' data and should ensure their use of CuSpace complies with applicable privacy laws.

4. Presence & Activity

CuSpace's presence system is designed to support communication, not employee monitoring. We display who is available and active in the workplace, but we do not track mouse movements, keystrokes, screen activity, or detailed productivity metrics. Presence status reflects voluntary activity within the application only.

5. Push Notifications

If you grant permission, CuSpace uses the Web Push API to send real-time browser notifications for knocks, briefings, and mentions. Your push subscription endpoint is stored securely in our database and used only to deliver notifications from within your workplaces. You may revoke push notification permission at any time via your browser settings or from your notification preferences within the app. Revoking permission removes your subscription from our systems.

6. Email Notifications

CuSpace may send transactional emails to your registered address for important events such as knocks, urgent briefings, and @mentions when you are not actively using the application. These emails are sent via Resend and are not marketing communications. You can manage email notification preferences from your workplace notification settings.

7. Audit Log

Workplace owners and administrators have access to an audit log that records administrative actions such as member role changes, member removals, and briefing activity. This log records the acting user, the action taken, and the timestamp. It is accessible only to workspace administrators and is retained for the life of the workspace.

8. Session Management

CuSpace maintains login sessions across devices. You can view and terminate all active sessions from your account settings at any time. Signing out of all devices immediately invalidates all active session tokens.

9. Cookies

CuSpace uses strictly necessary cookies to maintain your authenticated session. We do not use advertising or tracking cookies. We may use a local storage entry to remember your cookie consent preference. No personally identifiable information is stored in cookies beyond what is required to keep you signed in.

10. Data Storage

Your data is stored securely using Supabase infrastructure. File uploads are stored using Supabase Storage. Data is encrypted in transit and at rest. We retain your data for as long as your account is active. You may request deletion of your account and associated data at any time by contacting us.

11. Third-Party Services

We use the following third-party services: Supabase — database, authentication, and file storage Stripe — payment processing for subscriptions Vercel — application hosting and deployment Resend — transactional email delivery Web Push (VAPID) — browser push notification delivery Each of these providers operates under their own privacy policies and security standards.

12. Your Rights

You have the right to access, correct, or delete your personal information. You may also request a copy of your data using the data export feature in your workspace settings, or object to certain processing activities. To exercise these rights, contact us at privacy@cuspace.app.

13. Contact

For privacy-related questions or requests, contact us at: Email: privacy@cuspace.app Website: cuspace.app