Privacy Policy

This Privacy Policy explains how Cupola (“Cupola,” “we,” “us”) collects, uses, and protects information when you use our website and product at cupolahq.com (the “Service”). By creating an account or using the Service, you agree to this policy.

Information we collect

• Account information. Your email address and authentication data, including an optional two-factor authentication (TOTP) factor.
• Workspace content. The sources, keywords, topics, and other configuration and content you create or upload to your workspaces, and the briefs, entities, and themes the Service generates from them.
• Billing information. Subscription plan and status. Payments are processed by Stripe; we do not store full payment card numbers.
• Usage and device data. Standard log and analytics data such as pages visited and approximate performance metrics, used to operate and improve the Service.

How we use your information

• To provide, maintain, and secure the Service and your account.
• To authenticate you and enforce two-factor authentication where enabled.
• To run the intelligence pipeline and produce your briefs and knowledge base.
• To send transactional messages (account, security, billing) and the brief emails you opt into.
• To process payments and manage subscriptions.
• To monitor, debug, and improve the product.

AI processing

To generate briefs, entities, themes, and related analysis, content in your workspaces may be processed by third-party AI models (currently Anthropic). This content is used to provide the Service to you and is not used to train third-party models.

Service providers

We rely on a small set of trusted providers to operate the Service:

• Supabase for authentication and database hosting.
• Stripe for payment processing and subscription management.
• Resend for transactional and brief emails.
• Vercel for application hosting and delivery.
• Anthropic for the AI models that power the pipeline.

These providers process data on our behalf under their own terms and security commitments. We do not sell your personal information.

Cookies

We use essential cookies to keep you signed in and to secure your session. We do not use advertising cookies.

Data retention and deletion

We retain your information while your account is active. You can delete your account at any time from the account settings page, which removes your profile, the workspaces you own and their content, and cancels any active subscription. Some records may be retained where required for legal, accounting, or security purposes.

Your rights and choices

• Access and update your account information from the account settings page.
• Opt out of brief emails at any time from account settings.
• Delete your account and associated data from account settings.
• Contact us to exercise any additional rights you may have under applicable law.

Security

We protect data in transit with encryption, isolate workspace data with row-level security, and offer two-factor authentication. No system is perfectly secure, but we work to protect your information using industry-standard practices.

Children

The Service is not directed to individuals under 18, and we do not knowingly collect information from them.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by notice within the Service.

Contact

Questions about this policy? Email hello@cupolahq.com. See also our Terms of Service.