Privacy notice

VeoCue is a competitive intelligence product operated by [legal entity name], registered at [registered address], company number [company number]. In this notice "we" means that company and "you" means the person reading it.

For privacy questions, write to privacy@veocue.com. We have not appointed a data protection officer, and if one is required we will name them here rather than leave a placeholder in a signed document.

It matters which of these you are asking about, because our role differs in each case.

• Data about you. Your name, your work email, your company, what you told us on the demo or signup form, and the ordinary records of you using the product. Here we are the controller.
• Data inside your workspace. The competitors you track, the pages we crawl on your behalf, the signals we derive and the questions you ask. Here we are a processor acting on your instructions, and the data processing addendum governs it.

• Account details. Name and work email, so you can sign in and so we can reach you about the service. Passwords are held by Amazon Cognito, not by us.
• Demo and signup submissions. What you type into those forms, including the competitors you say you want to track, so that we can reply and set the workspace up.
• Workspace content. Competitor domains, crawled page content, the signals derived from it, battlecards, win-loss notes and Ask AI questions and answers.
• Operational logs. Requests, errors and timings, including IP addresses, which we need to keep the service running and to investigate abuse.

We do not buy personal data from brokers, we do not run advertising, and we do not sell anything to anyone.

• Contract. Providing the product to you and to the organisation that pays for it.
• Legitimate interests. Keeping the service secure and working, preventing abuse, and replying when you contact us.
• Consent. Anything you opt into separately, such as a digest sent to someone who does not have an account.
• Legal obligation. Tax, accounting and responding to lawful requests.

Two subprocessors, both named on the trust and security page.

• Amazon Web Services. Hosting, the database, storage and queues. Everything runs inside one AWS account.
• OpenAI. Crawled competitor content and the text of Ask AI questions are sent to OpenAI’s API so that changes can be classified and answers written. That processing is governed by OpenAI’s API terms. We do not make promises on their behalf.

If we add a subprocessor we will update that list. [Notice period for subprocessor changes to be agreed in the DPA.]

Customer data is held in Aurora PostgreSQL in our AWS account, in [AWS region]. Using OpenAI means some content is processed outside the United Kingdom and the European Economic Area. [Transfer mechanism, such as the UK addendum to the EU standard contractual clauses, to be confirmed on legal review.]

• Workspace content. For as long as the workspace exists. Deleting a tracked competitor deletes the signals gathered for it.
• Account details. While the account is open, then [retention period after closure] before deletion.
• Demo and signup submissions. [Retention period for unconverted enquiries.]
• Operational logs. [Log retention period, to match the CloudWatch configuration.]

Subject to the law that applies to you, you can ask for a copy of your data, ask us to correct or delete it, object to processing based on legitimate interests, or ask for it in a portable form. Write to privacy@veocue.com and we will respond within one month.

If the data sits inside a workspace your employer controls, we will normally pass the request to them, because it is their instruction we act on.

You can also complain to a supervisory authority. In the United Kingdom that is the Information Commissioner’s Office.

VeoCue classifies changes and writes answers using a language model. That is a judgement about a competitor’s public page, not a decision about a person, and it has no legal effect on anyone. Every signal shows the source and the date so you can check it yourself.

We set the cookies needed to keep you signed in. We do not run third-party advertising or analytics cookies on the marketing site. [A full cookie table to be added if that changes.]

When this notice changes materially we will change the date at the top and tell account holders by email. [Notice period to be confirmed.]