Privacy Policy

We collect the following, depending on how you use Qube:

• Account information: your username, email address, display name and profile picture from your sign-in provider (Clerk, or GitHub if you connect it), your plan and billing status, and the IDs that link your account to Stripe and GitHub. If you connect GitHub, we store an access token to work with the repositories you choose.
• Public content: the content you publish on Qube, such as marketplace listings and comments.
• Telemetry: we collect telemetry data about how you use Qube, such as the model, timing, token counts and cost of each AI request.
• Request logs: we monitor request data only for fraud and abuse inspection and service troubleshooting.
• Usage and billing records: credits used per request, credit packs bought, and plan changes. Card details are handled by Stripe; we never see or store your full card number.
• Device and diagnostic information: from the desktop app and command-line tool, your computer name, operating system, processor type and app version; error reports with logs and system figures such as memory and disk use; and, when you send feedback, your message, any screenshots, video or diagnostics you attach, and the path of the project folder you were in.
• Website analytics: pages you visit, the referring site and campaign tags, device, browser, operating system, language, time zone, and approximate city and country derived from your IP address. If you sign up through our onboarding, your answers about what you want to build and how you heard about Qube.

We use this information to:

• provide Qube: run AI requests, store and sync your work, and show your usage and credits;
• process payments, apply your plan and credits, and handle refunds and disputes;
• secure Qube, prevent abuse and fraud, and enforce our Terms of Service;
• diagnose errors and improve Qube, including reviewing traces, logs and feedback;
• understand how people find and use our website;
• contact you about your account, billing, and changes to Qube or these policies.

We share personal information only with service providers that help us run Qube, and only as needed for the purposes above:

• AI model providers: your prompts, code and related context are sent through OpenRouter and other inference partners to the provider of the model you choose (for example Anthropic, OpenAI, Google, xAI, Meta, DeepSeek, Z.ai, MiniMax, Xiaomi, Poolside, NVIDIA or OpenInference). Models marked as free may be offered by providers that log or train on the requests they receive; use paid models for work you consider sensitive.
• Clerk (sign-in), GitHub (when you connect it) and Stripe (payments).
• Hosting and storage: Amazon Web Services, Cloudflare, Vercel (which also provides website analytics and performance measurement) and Supabase (website analytics and onboarding answers).
• Our team's internal tools: notices about sign-ups, payments and feedback, including your username, email address and feedback text, are posted to a private Discord workspace that only our team can see, through a bot hosted by Bot-Hosting.net.
• Video hosts: marketplace pages can embed YouTube (privacy-enhanced mode) or Vimeo videos, which load content from those services.
• Authorities or others, when the law requires it or to protect the rights and safety of our users, Cantus Labs or others; and a buyer or successor if Cantus Labs is involved in a merger or acquisition.

Your projects, maps and models are private by default. If you share a map or model by link, signed-in users with the link can view it. If you list something on the marketplace and it is approved, anyone can see it, and download it if you allow downloads.

Your public profile shows your username, display name, profile picture, join date, follower counts, the plan badge for Architect and MasterCook, and an activity graph of your Qube sessions and projects over the past year. Your detailed usage, prompts and traces are visible only to you and our team.

• Request logs, and error reports with their logs: 30 days.
• Deleted maps and models: 30 days in trash, then permanently deleted.
• Account information, your content, traces, feedback, usage and billing records: for as long as your account is active. When you ask us to delete your account, we delete or anonymize them within 30 days, except billing records we must keep for tax and accounting, and backups that expire on their normal schedule.
• Website analytics and onboarding answers: up to 24 months.

You can turn off automatic error reports in the desktop app settings (or with QUBE_ERROR_REPORTS=0 for the command-line tool), choose whether to attach diagnostics to feedback, and turn off automatic update checks. You can unlist marketplace items and delete maps and models at any time.

Depending on where you live, you may have the right to access, correct, download or delete your personal information, to object to or restrict some uses, and to withdraw consent. To make a request, email support@tryqube.dev from the address on your account. We will respond within 30 days and will not treat you differently for exercising these rights. You can also complain to your local data protection authority.

If you are in the European Economic Area or the United Kingdom, we process your information to perform our contract with you (providing Qube and billing), for our legitimate interests (security, abuse prevention, improving Qube and understanding website use), to meet legal obligations, and with your consent where required.

Cantus Labs is based in the United States, and our providers process information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards such as standard contractual clauses for these transfers.

Qube is not for children under 13, and we do not knowingly collect personal information from them. Users aged 13 to 17 need a parent's or guardian's permission. If you believe a child under 13 has given us personal information, contact us and we will delete it.

We use encryption in transit, access controls, hashed session tokens and encrypted storage of sensitive fields such as your local project paths and GitHub tokens. No system is perfectly secure, so we cannot guarantee absolute security. Please keep your account secure and avoid putting passwords or secret keys into prompts.

We may update this policy. If a change is material, we will notify you by email or in Qube before it takes effect. The date at the top shows when it last changed.

Privacy questions and requests: support@tryqube.dev. Cantus Labs, Inc., Delaware, USA.