Privacy policy
Last updated 31 July 2026
1. Who we are
CueCove provides an AI concierge that answers WhatsApp enquiries on behalf of businesses, operating in Lebanon and the United Arab Emirates.
- Email: cuecove.ai@gmail.com
- WhatsApp (Lebanon): +961 70 517 209
- WhatsApp (UAE): +971 58 665 9067
2. The short version
- We do not sell personal data, and we never have.
- We do not use your customers' conversations to train AI models.
- Conversation history is kept for 90 days, then deleted automatically.
- If a client leaves, their data is permanently destroyed within 30 days.
- Credentials are encrypted with AES-256-GCM and are never visible in logs.
- This website sets no cookies and runs no analytics or advertising trackers.
3. When you contact us
If you message us on WhatsApp, email us, or book a demo, we receive whatever you send: typically your name, phone number or email address, your business, and what you asked about. We use it only to reply, run the demo, and if you become a client, set up your service. The lawful basis is your request and our legitimate interest in responding to it.
We keep enquiry correspondence for up to 24 months so we can pick up an earlier conversation, then delete it. Ask us to erase it sooner and we will.
4. When we answer messages for a client business
If you are a customer messaging a business that uses CueCove, that business is the controller of your conversation and its own privacy policy governs it. We process the messages on its instructions in order to answer you and pass a summary to its team.
| What | Why | Kept for |
|---|---|---|
| Your WhatsApp number and profile name | To route the reply back to you | 90 days after the last message |
| Message content, including voice notes | To understand and answer the enquiry | 90 days |
| Extracted enquiry details (name, service, preferred time) | To hand the business a usable lead | Retained by the business as its own record |
The assistant answers only from information the business has approved. It tells you it is an automated assistant when you ask, and a human is always available on request.
5. Who else touches the data
We use a small number of providers, each contractually limited to processing data on our instructions:
| Provider | Purpose | Where |
|---|---|---|
| Meta / WhatsApp Business Platform | Message delivery | Per Meta's own terms |
| 360dialog | WhatsApp Business Platform access, under the client's own account | EU |
| Anthropic | Generating the reply text | US; not used to train models |
| OpenAI | Transcribing voice notes, where enabled | US; not used to train models |
| Render | Hosting the service | EU (Frankfurt) |
| Cloudflare | Hosting this website | Global edge network |
Some of these are outside Lebanon and the UAE, so data may be transferred internationally. We rely on each provider's standard contractual protections for those transfers.
6. What we do not do
- We do not sell, rent, or share personal data for anyone else's marketing.
- We do not scrape social networks or buy contact lists.
- We do not build profiles of individuals across different businesses. Each client's data is isolated, and no part of our system can read across that boundary.
- We do not send marketing messages to people who merely messaged a client's number.
7. Security
WhatsApp credentials are encrypted at rest with AES-256-GCM. Secrets never appear in logs beyond their last four characters. Access to production is limited to the operator. The client portal is scoped so that a signed-in business can only ever reach its own records, and it is penetration-tested against a standing suite of attacks before changes ship.
No system is perfectly secure. If a breach affects you, we will tell you and the relevant authority without undue delay.
8. Your rights
You can ask for a copy of your data, correction of anything wrong, deletion, or restriction of how we use it, and you can object to a particular use. Write to cuecove.ai@gmail.com and we will respond within 30 days.
If your request concerns a conversation with a business that uses CueCove, we will pass it to that business, since the data is theirs, and help them action it.
9. This website
This site sets no cookies, runs no analytics, and embeds no advertising or social trackers. Fonts are served from our own domain rather than a font network, so no third party is contacted when you load a page, and the site makes no background network requests of any kind. The only external links are the WhatsApp and email links you choose to click. Our host, Cloudflare, keeps standard short-lived server logs for security and abuse prevention.
10. Children
Our service is sold to businesses and is not directed at children. We do not knowingly collect data from anyone under 16.
11. Changes
If we change this policy we will update the date at the top, and for anything significant we will tell affected clients directly.