1. Information we collect
We collect the information you provide when you register, create or use a portal account, request a diagnosis or contact us: your name where supplied, business email, business name, public website URL, city or region, messages, account credentials (stored as a one-way password hash), diagnosis requests, report access records and support requests.
We also create limited technical and security records, such as IP address, browser request data, timestamps, session identifiers and security events. Please do not submit sensitive personal information through the site or portal.
2. Why we use it
We use information to respond to your request, create and administer your account, provide and secure diagnostics and reports, answer support requests, prevent misuse, comply with law and maintain our systems. We do not add you to a general marketing list without separate consent.
3. Service providers and international processing
Portal data and encrypted backups are hosted on Hetzner infrastructure in Finland. Cloudflare provides the website’s network delivery and security layer and may process IP address and request data. We use Resend to deliver transactional account emails; email recipients and message content are processed by that provider. We may also disclose information to professional advisers, authorities where legally required, or a successor in a genuine business transaction. Providers may process information outside your province, state or country and are restricted to providing services to us.
4. Cookies and tracking
The public site stores your language preference in browser storage. The portal uses an essential, HTTP-only session cookie after sign-in. We do not sell personal information, share it for cross-context behavioural advertising, use advertising pixels, or operate third-party analytics on this site.
5. Retention and security
We keep information while your account or request is active and afterwards only as reasonably necessary for service, security, legal obligations or disputes. SQLite backups are retained on a rolling 14-day basis. We use reasonable technical and organizational safeguards, but no internet service can guarantee absolute security.
6. Your choices and rights
To request access, correction, deletion or information about our handling of your personal information, email [email protected]. We may verify your identity before responding. Canadian residents may have rights under applicable privacy law, including PIPEDA and provincial law; U.S. residents may have rights where a state privacy law applies. We will respond within the period required by applicable law.
7. Children, changes and contact
CUEORA is for business users and is not directed to children. We do not knowingly collect personal information from children. We may update this policy by posting a new effective date. Questions, complaints and accessibility requests may be sent to [email protected].