Privacy

1. Who controls your data

ANGELTECH, trading as GRAINES DE CODE, SAS with share capital of €1,000, registered under SIREN 878 731 157 and RCS Brive, is the data controller for the VerbaCue website, licensing, support, and service operation. Registered office: 9 Route de la Conche, 19320 Saint-Martin-la-Méanne, France. Contact: privacy@agentkey.dev.

2. What stays on your Mac

Raw microphone and system audio used for live operation.
Live speech transcription and speaker-turn processing.
Your local scripts, preferences, and teleprompter state.
Saved Call Briefs, including their response guidance and the filenames and extracted text excerpts of documents you import. They remain in the app's local Application Support data until you delete the brief.
The installation identity, session token, trial record, paid license key, and bounded recovery markers stored in macOS Keychain. A successful in-app deactivation removes the paid key. Removing the app does not necessarily remove its Keychain items; contact support if you need help clearing them.

These items are processed by the desktop app on your device. VerbaCue is not designed to upload them as recordings or retain a cloud transcript. When a Call Brief contributes to an Assist cue, the bounded brief fields and selected document excerpts described below are sent; cloud inference labels documents generically rather than sending their local filenames.

3. What may reach the service

The selected recent speaker-turn text needed to generate a cue while Assist is in use, including an automatic cue when Auto-suggest is enabled.
The bounded General profile and active Call Brief fields you provide, such as a title, objectives, audience, speaking points, constraints, response guidance, selected script excerpts, and background notes.
Relevant extracted document excerpts you imported; they are labeled as generic documents for inference, without their local filenames or paths.
Pseudonymous installation entitlement, device-seat state, and suggestion counters. Paid records are linkable to the relevant Lemon Squeezy order, subscription, and license identifiers so access can be validated.
An AES-GCM-encrypted copy of the full Lemon license key, stored by the VerbaCue service for periodic validation and safe instance deactivation or reconciliation. The key is not stored in analytics or ordinary application logs.
Security and reliability metadata needed to operate and protect the service.
One fixed aggregate launch-funnel event name and the fixed source site. The allowlisted actions cover a site entry, pricing-page interest, install-guide interest, opening a product capture, a download click, or starting one of the three checkout links. The JSON payload contains only that event and source—no page path, query, cookie, storage identifier, user ID, free-form text, referrer, or user-agent field. Normal connection metadata such as IP address and browser headers may reach Cloudflare at the edge; VerbaCue's application database persists only the aggregate daily count.
Server-side commercial operations also increment fixed aggregate daily trial_started and license_activated counters with the fixed source app. Those increments do not use the site JSON request, and their funnel rows contain no installation, license, order, customer, or other identifier.
Information you choose to send in a support request.
For limited professional outreach, the operator may record a person's name, role, organization, public professional profile, the public work artifact that made contact relevant, a published business contact route, contact dates, responses, opt-out state, and limited install or guided-session outcomes. These details come from public professional sources or direct interactions; VerbaCue does not use hidden enrichment or infer sensitive traits for outreach.

Do not include secrets or sensitive personal data that are unnecessary for the cue.

4. Why we process it

We process service requests to perform the contract or steps you request before entering it; licensing, quota enforcement, fraud prevention, security, and reliability for our legitimate interests; billing and records to meet legal obligations; and optional communications where you have consented or requested a response. Where permitted, narrowly targeted professional outreach that relates directly to a person's role relies on the operator's legitimate interest in introducing VerbaCue and learning whether it solves that professional need; outreach that requires prior consent is sent only with that consent.

5. AI inference and hosting

Cloudflare hosts the website and AI inference path. The relevant entities include Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, and Cloudflare France SAS, 6 place de la Madeleine, 75008 Paris, France. Review Cloudflare’s privacy policy and Workers AI data-use documentation. Those official documents, rather than abbreviated marketing copy, govern Cloudflare’s current provider commitments.

6. Commerce

Payments are sold through Link, LLC, formerly Lemon Squeezy LLC, 222 South Main Street, Suite 500, Salt Lake City, UT 84101, USA, as merchant of record. Checkout and billing data are handled under its privacy notice and merchant-of-record explanation. VerbaCue receives the order, entitlement, and customer information needed to provide the product and support.

7. Storage and retention

VerbaCue does not intentionally retain raw call audio, call recordings, conversation transcripts, selected inference text, or generated cues as an application archive. The production cleanup runs daily with these periods:

Bearer sessions: 30 days after rotation.
Finished, refunded, or abandoned inference reservations: 30 days; minute counters: 2 days; daily counters: 90 days; monthly counters: 730 days.
Active installation, entitlement, seat, and encrypted-license records: for the service relationship; expired or inactive records are scheduled for coordinated deletion after 730 days without activity.
Trial lifetime usage: until the expired trial installation is deleted; shared Pro usage: until the final installation for that license is deleted.
Pseudonymous customer-email hashes: 730 days; aggregate daily website-funnel counts: 760 days.
Professional prospect records: up to three years after collection or the last inbound contact from the prospect, and deleted sooner when no longer needed. After an objection, only the minimum suppression information needed to prevent further outreach is retained for at least three years and is not reused for another purpose.
Commerce/webhook records and refund, expiry, and fraud-prevention blocks: 3,650 days to support accounting, disputes, and legal obligations.
Completed license-cleanup and privacy-erasure audit rows: 90 days.

An encrypted Lemon license-key copy is removed with its coordinated installation deletion or an approved erasure request. If Lemon seat cleanup cannot yet be proved safe, deletion remains pending for operator resolution rather than silently abandoning a live seat or discarding the request. Unresolved activation intent ciphertext is reconciled after 30 days and retried daily during a transient Lemon outage. A verified privacy request can accelerate operational installation and exact-usage deletion; statutory commerce records may still be retained. Provider-side retention is governed by the linked provider terms and configured service settings.

8. International processing

Some providers operate internationally. Where required, transfers are handled through applicable contractual and organizational safeguards. Provider notices describe their locations and transfer mechanisms in more detail.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, and to withdraw consent where consent is the basis. Email privacy@agentkey.dev. If you receive professional outreach, you may object at any time by replying “no” or using that privacy address; the operator will stop the outreach and retain only the minimum suppression information needed to honor the objection. If you used a trial without buying, include the copyable Privacy request ID shown in VerbaCue Settings so the operator can locate the otherwise pseudonymous installation; never send a license key. You may also complain to the competent data-protection authority, including the CNIL in France.

10. Security and incident contact

VerbaCue uses encrypted transport, scoped service credentials, rate limits, and least-data design. No system is perfectly secure. Report a suspected privacy or security issue to privacy@agentkey.dev.

11. Children and changes

VerbaCue is not directed to children. Material changes to this notice will be dated and presented through the website or product where appropriate.