Privacy Policy

1. Who we are

Cuelara ("we", "us") runs the website at cuelara.com and the tools, cookbook and blog on it. This policy explains what personal information we collect when you use Cuelara, why we collect it, and what you can do about it. If you have a question, contact us.

2. What we collect

Information you give us

• Account details. If you create an account we store your email address, your name (if you give one) and a securely hashed password. We never store your password in readable form.
• Contact messages. If you use the contact form we store your name, email address, subject and message so we can reply.
• Tool history. When you are signed in, we save each tool run to your account: what you entered, the options you chose and the result. See "Your tool history" below.
• Uploaded documents. If you use the Document to Prompt tool, we process the file you upload (see "Uploaded documents" below).

Information collected automatically

• Usage counts. To enforce daily limits we keep a count of how many times each tool was used per day. For signed-in users the count is tied to the account. For visitors it is tied to a one-way hash of the IP address, not the address itself.
• Service logs. We log technical details of calls to AI providers: which provider, model and tool, whether the call succeeded, and any error message. These logs do not include your prompts or documents.
• Email logs. We record the recipient, subject and delivery result of emails we send you (for example account activation and password reset).
• Cookies and local storage. See section 7.

3. Your tool history

If you use the tools while signed in, we save each run to your account so you can find it again: the text you entered (or, for Site to Prompt, the design measurements of the page), the options you chose, and the result. You can open, edit, re-run and delete any saved run from your dashboard, or clear a tool's whole history at once. Only you can see your history, and deleted items are removed from our database. How many runs we keep depends on your plan (currently 20 per tool on Free, 50 on Pro and 100 on Team); older runs are removed automatically as you add new ones, and when you move to a plan that keeps fewer.

If you use the tools without signing in, nothing you enter is saved: it is processed to give you a result and then discarded. In both cases we do not use your content to train models, and it is handled by the AI providers described in section 5 while the request is processed.

Because saved runs contain what you typed, please don't put passwords, payment card numbers or other highly sensitive data into the tools.

4. Uploaded documents

When you upload a document to the Document to Prompt tool, we extract its text, split it into sections and compute numerical embeddings so we can find the passages relevant to your question. The extracted text and embeddings are stored in our database, linked to your account or your visitor identifier, so you can ask several questions about the same file. They are removed automatically after about 24 hours, and stale ones are cleared whenever you upload a new document. If you are signed in, your tool history keeps the file's name and the excerpts the tool returned for your question, but not the file itself. Text you paste in directly is saved with the run. Please do not upload documents you are not allowed to share with a service provider.

5. Who we share information with

We do not sell your personal information. We share it only with the service providers that help us run Cuelara:

• AI model providers. To produce results, the content of a tool request is sent to one of the AI providers we use, which currently may include Google (Gemini), OpenAI, Anthropic (Claude), xAI (Grok), Groq and OpenRouter. Each provider processes that content under its own terms and privacy policy.
• Hosting and database providers. Our site and database run on third-party infrastructure.
• Email delivery. Emails we send you go through our SMTP mail provider.
• Legal reasons. We may disclose information if the law requires it or to protect the rights, safety and security of our users or the service.

Do not include passwords, payment card numbers, health information or other highly sensitive data in tool inputs.

6. How long we keep information

• Account details and tool history: until you delete them or ask us to delete your account. Deleting your account removes your saved runs.
• Contact messages: for as long as needed to handle your request and keep a record of it, then deleted on request.
• Uploaded documents and embeddings: about 24 hours.
• Usage counts and service logs: for a limited period for abuse prevention, capacity planning and debugging.

7. Cookies and local storage

We use a small number of essential items:

• a session cookie that keeps you signed in, and
• a theme preference in your browser's local storage (light or dark mode).

We do not currently use advertising cookies or third-party analytics scripts. If that changes we will update this policy first.

8. Security

We use HTTPS, hash passwords, restrict administrative access and keep API keys on the server. No system is perfectly secure, so we cannot guarantee absolute security, but we work to protect your information and to fix issues promptly.

9. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to complain to your local data protection authority. To exercise any of these rights, contact us from the email address on your account and tell us what you need. We will respond within a reasonable time, and within the deadlines the law requires.

10. Children

Cuelara is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us information, contact us and we will delete it.

11. International transfers

Our providers may process information in countries other than your own. Where the law requires it, we rely on appropriate safeguards for those transfers.

12. Changes to this policy

We may update this policy from time to time. When we make a meaningful change we will update the date at the top of this page and, where appropriate, tell you by email or on the site.

13. The Cuelara browser extension

The Cuelara browser extension adds Cuelara's tools to the text boxes of AI chat sites and lets you turn a website into a design prompt. This section covers what it does with your information. The rest of this policy applies to it as well.

What it reads and sends

• Your prompt, only when you choose a tool. The extension does not read or send what you type in the background. The first time you use a tool it shows a notice explaining where your text goes and asks you to confirm; it sends nothing until you do. When you pick a tool (Optimize, Build, Compress, Format or Debug), it sends the text in that one box to Cuelara, which passes it to the AI providers in section 5 and returns the result. Results from the extension are not saved to your tool history. The text is not kept after the request, beyond the service logs described in section 2.
• Fields it ignores. It does not offer itself in password, payment card, one-time-code or search fields, or in single-line inputs.
• Site to Prompt. The first time you press Analyse, the extension shows a notice and asks you to continue. It then measures the page you chose: colors, fonts, sizes, spacing, the detected tech stack, the page title and a few headings. It reads the page's linked stylesheets only to extract design-token names. It never reads form fields or cookies. For a site you open from cuelara.com, it asks for your permission first and drops that permission when the analysis ends.
• No browsing history. The extension does not record, collect or send the pages you visit.

What it stores

• In your browser: your sign-in token if you connect an account, a cached copy of your plan and daily usage, your list of sites where Cuelara is blocked or always allowed, and whether you dismissed the "Get started" card.
• On your account, if you connect: the sites you blocked or allowed, so they follow you to other browsers, and the extension's access token (stored only as a one-way hash). You can see your connected browsers and disconnect any of them under Dashboard → MCP Tokens, or with "Disconnect" in the extension.
• Without an account: the extension works with the free daily limits, counted by a one-way hash of your IP address as described in section 2.

Where it runs and why it needs access

The extension runs by itself on a list of popular AI sites (for example ChatGPT, Claude and Gemini). On any other site it does nothing until you click its icon, and you can choose "Always allow" for a site. You can turn it off for any site, and blocking a domain also blocks its subdomains. A blocked site never loads the extension at all. The extension needs access to those AI sites to place its button next to the text box and to put the result back in it. Its only network destination is cuelara.com.

Limited use

We use information received through the extension only to provide and improve the features described above. We do not sell it, use it for advertising, use it to determine creditworthiness or lending, or transfer it except to the providers in section 5 to deliver the result you asked for. People do not read it unless you ask us to look at a problem, we need to for security, or the law requires it. The extension's use of information follows the Chrome Web Store User Data Policy, including its Limited Use requirements.

14. Contact

Questions or requests about privacy: use our contact form.