Legal
Six documents, written to be read
Legal text is usually written to be defensible rather than understood. We have tried to do both: each document opens with a plain-language summary of what it actually means, then says it properly.
What these commit us to
- Your data is yours, and leaves with you
- No selling personal data, ever
- Support access is reasoned, logged and expires
- 72-hour breach notification
- 30 days' notice before a new subprocessor
Documents
All of it, in one place
Privacy Policy
What personal data CubieFlow holds, why, and what you can ask us to do with it.
We hold the data you and your customers generate while using CubieFlow. We do not sell it, we do not use it to train models for anyone else, and you can export or delete it at any time.
Terms of Service
The agreement between you and CubieFlow — what each side commits to, and how it ends.
You pay for a subscription; we provide the service and keep your data safe. Either side can end it with notice, and your data leaves with you.
Cookie Policy
Which cookies CubieFlow sets, what each one does, and how to refuse the optional ones.
We set the cookies needed to keep you logged in and remember your theme. Analytics cookies are optional and off until you accept them.
Data Processing Agreement
The processor terms that apply when CubieFlow handles your customers' personal data on your behalf.
When your customers' data flows through CubieFlow, you decide what happens to it and we follow your instructions. This document is the contract that says so.
Acceptable Use Policy
What you may and may not do with CubieFlow, and what happens if you cross the line.
Do not use CubieFlow to spam people, break the law, or attack our systems. Everything else is fine.
Service Level Agreement
The uptime we target, what counts as downtime, and what you get if we miss it.
We target 99.9% uptime. Enterprise plans get service credits if we miss it; the standard plans do not, and we would rather say so plainly.
Where to start
Which one do you need?
Most people arrive here for one of four reasons.
“I want to know what you do with my data.”
The Privacy Policy. It covers what we collect, where it lives, how long we keep it and what you can ask us to delete.
Privacy Policy“My procurement team needs processor terms.”
The Data Processing Agreement. It is incorporated automatically, and we will countersign a copy if your process needs one.
DPA“What happens if the service goes down?”
The SLA. It states the target, what does not count as downtime, and which plans carry contractual credits.
SLA“Can I send marketing through this?”
Yes, with consent. The Acceptable Use Policy sets out the messaging rules and what happens if they are broken.
Acceptable UseStill have a question?
Write to legal@cubieflow.com. Security reviews and procurement questionnaires go to a person, not a queue.