Privacy Policy

Last updated July 22, 2026

Who is responsible

CubeDot is operated by Takeaway Reality LTD, the data controller for the personal data described here. Contact: support@cubedot.ai.

What we collect

• Account data: your email, name, and sign-in method (Google or email and password, handled by Firebase Authentication; we never see your password).
• Project content: the projects you create, the messages you exchange with the assistant, files you attach, and the documents the product generates for you.
• Usage and billing data: token usage per request (model, counts, cost), your plan, credit balance, and payment records. Card details are handled entirely by Stripe.
• Waitlist data: if you join the waitlist, the email, name, role, and description you submit.

How we use it

We use your data to run the product for you: to hold your interviews and sessions, generate your plans and documents, remember decisions across sessions, meter your usage against your plan, and bill you. Legal bases under the GDPR: performance of our contract with you, our legitimate interest in securing and improving the service, and legal obligations for billing records. We do not sell your data and we do not use your private projects to train shared models.

AI processing

To generate responses, the relevant parts of your project content are sent to large language model providers (currently Google's Gemini API) as part of each request. These requests are processed under the provider's API terms, which do not permit using the data to train their models. Model providers may retain requests briefly for abuse monitoring.

Who else touches the data

• Google Cloud Platform and Firebase: hosting, database, storage, and authentication.
• Google (Gemini API): AI generation, as described above.
• Stripe: payment processing and merchant of record for paid plans.

We share data with these processors only as needed to run the service.

Retention and deletion

Your content stays as long as your account exists. Deleting a project removes the project and its memory. Deleting your account from Settings removes your projects, conversations, and profile; billing records are kept as long as tax and accounting law requires. Database backups are retained for 14 days and then expire.

Your rights

You can export your data (Settings, "Export my data"), correct it, or delete it at any time. If you are in the EU or a similar jurisdiction, you also have the rights of access, portability, restriction, objection, and complaint to your local supervisory authority. For anything you cannot do in the product, email support@cubedot.ai and we will respond within 30 days.

Security

Data is encrypted in transit and at rest, access to production systems is restricted and audited, and payment data never touches our servers. No system is perfectly secure; if a breach affects you, we will notify you as the law requires.

Changes

If we materially change this policy, we will notify you in the product or by email before the change takes effect.