Privacy policy

This policy explains how Captivated Ltd handles personal data in connection with the Auto·Cue website (auto-cue.app) and the Auto·Cue desktop application. Auto·Cue is built to belocal-first: wherever possible your data stays on your own device and is never sent to us.

1. Who is responsible for your data

The data controller is Captivated Ltd, a company registered in England and Wales under company number 15936109, with its registered office at Electric Works, 3 Concourse Way, Sheffield, S1 2BJ, United Kingdom. You can reach us about privacy athello@auto-cue.app or on +44 114 489 0105.

2. The short version: the app is local-first

The Auto·Cue desktop app keeps your accounts, drafts, scheduled posts, analytics and settings in a database on your own computer. The AI that writes your suggestions runs on your machine. The app contains no telemetry, no analytics and no crash reporting, and it does not transmit your content to us or anyone else. It only makes network connections when you explicitly ask it to — for example to publish a post, fetch metrics, or run a search.

3. What we collect and process

This website

If you join the launch waitlist, we process the email addressyou submit, together with the time you submitted it, solely so we can email you when Auto·Cue is available. We store nothing else — no name, no IP address, no tracking identifiers. As with any website, our hosting provider (Cloudflare) processes standard request data such as IP address transiently to deliver the site and protect it from abuse; we do not use this to identify or profile you.

The desktop app

• Your content and account data — drafts, posts, schedules, media, analytics and settings are stored locally on your device. We do not collect or receive them.
• Credentials — access tokens for the social platforms you connect, and any search API keys you provide, are stored in your operating system's secure keychain (Apple Keychain, Windows Credential Manager or the Linux Secret Service). They are never written to plain files, never logged, and never transmitted to us.
• Connected social accounts — when you connect a platform (such as Bluesky, Mastodon, Threads, Facebook or LinkedIn), the app authenticates directly with that platform using its official authorisation flow and then acts on your behalf — publishing the posts you approve, scheduling them, and fetching your own metrics, mentions and feeds. All of this is processed locally on your device and sent directly between your device and that platform. Your platform content and audience data are not routed through, stored on, or accessible to Captivated Ltd.
• Local AI — post suggestions are generated by a large language model running on your own computer via Ollama. Your prompts and content are not sent to us or to any third-party AI service.
• Industry-news search — this optional feature can run either with your own search-provider key (queries go directly from your device to your chosen provider, such as Brave or Tavily), or, if you subscribe to the managed search add-on, through our search proxy so you don't need your own key. In the managed case your search terms are passed through a Cloudflare Worker to the search provider to return results; we do not retain your queries beyond what is needed to serve the request.
• Software updates — the app can check our release server (releases.auto-cue.app, hosted on Cloudflare) for new versions. This is a standard file request and is manual or opt-in; it carries no personal data about you.

Purchases and licensing

When Auto·Cue is available to buy, payments are handled by our merchant of record, Polar, and licences are validated viaKeygen. These providers process your billing details and licence key under their own privacy policies. We do not see or store your full payment-card details.

4. Why we process it (lawful bases)

Under the UK GDPR we rely on:

• Consent — for adding your email to the launch waitlist (you can withdraw at any time).
• Contract — to provide the app and any licence you buy, and to carry out the actions you instruct, such as connecting an account and publishing your posts.
• Legitimate interests — to operate, secure and improve our website and services in a way you would reasonably expect.

5. How long we keep it

We keep waitlist emails until launch or until you ask us to remove them, whichever is sooner. Data held inside the app lives on your own device for as long as you keep it there — you can delete individual items, or remove the app and its data, at any time. Purchase and licensing records are retained by our payment and licensing providers in line with their policies and our legal obligations.

6. Sharing and sub-processors

We do not sell your personal data. We rely on a small number of processors:

• Cloudflare — website hosting and delivery, waitlist storage, the managed-search proxy, and update delivery.
• Polar — payment processing (merchant of record), at launch.
• Keygen — licence-key validation, at launch.
• Your chosen search provider (e.g. Brave or Tavily) — to return industry-news results, whether you bring your own key or use the managed add-on.

Separately, the social platforms you connect (Bluesky, Mastodon, Threads, Facebook, LinkedIn and any others) receive the content you choose to publish and the requests the app makes on your behalf. Your use of those platforms is governed by their own terms and privacy policies. Again, the app exchanges that data directly with the platform — it does not pass through us.

7. International transfers

Some of our processors operate outside the United Kingdom. Where personal data is transferred internationally, we rely on appropriate safeguards such as UK adequacy regulations or the UK International Data Transfer Agreement / Standard Contractual Clauses.

8. Your rights

Subject to the conditions in UK data-protection law, you have the right to access your personal data; to have inaccurate data corrected; to have data erased; to restrict or object to processing; to data portability; and, where we rely on consent, to withdraw that consent at any time. Because most app data lives only on your device, you can exercise much of this directly within the app. For anything we hold (such as a waitlist email), contacthello@auto-cue.app and we will respond within the statutory time limits.

9. Cookies and analytics

This website sets no advertising or tracking cookies and does not track you across sites. Any analytics we introduce will be privacy-friendly and cookieless (for example Plausible), producing only aggregate statistics that cannot identify you individually. The desktop app uses no cookies and no analytics of any kind.

10. Children

Auto·Cue is a professional tool intended for adults and is not directed at children. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the current version; material changes will be highlighted here.

12. Complaints

If you have a concern we haven't resolved, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority, atico.org.uk. We'd appreciate the chance to put things right first, so please do contact us.

13. Contact

Captivated Ltd, Electric Works, 3 Concourse Way, Sheffield, S1 2BJ, United Kingdom — hello@auto-cue.app.