Privacy

Last updated: 26 May 2026

This Privacy Policy explains how Cube (“Cube”, “we”, “us”, or “our”) collects, uses, shares, and protects personal information when you use our spreadsheet application at app.cube.tools and our website at cube.tools (together, the “Service”). It applies to users in Canada, the United States, the United Kingdom, the European Economic Area, and elsewhere.

Cube is built on a simple principle: you bring your own data, your own AI models, and your own API keys. We are the engine that runs your prompts and API calls across your spreadsheet. We do not sell your data, and we do not use your content to train AI models.

1. Who is responsible for your data

Cube is the data controller for the account and usage information described below. For the content you put into your sheets, you are the controller and Cube acts as a processor on your behalf, handling that content only to provide the Service.

2. Information we collect

Information you give us

Account information: your email address and authentication details when you sign up.
Your Content: the spreadsheets, rows, columns, prompts, and files you upload or create.
API keys: the third-party keys you connect (for example, an OpenRouter key). These are stored encrypted and used only to make the calls you configure.
Communications: messages you send us, such as support emails.
Payment information: if you buy a paid plan in the future, billing details are handled by our payment processor; we do not store full card numbers.

Information we collect automatically

Usage data: how you interact with the Service, such as features used and jobs run.
Device and log data: IP address, browser type, and timestamps, collected to operate and secure the Service.
Cookies: we use essential cookies to keep you logged in. We do not use advertising cookies.

3. How we use your information

To provide, operate, and maintain the Service.
To run the prompts and API calls you configure, across the rows you choose.
To authenticate you and secure your account.
To respond to your support requests.
To improve the Service and fix problems.
To process payments, if you are on a paid plan.
To comply with legal obligations and enforce our Terms.

We do not sell your personal information, and we do not use Your Content to train AI models.

4. Legal basis for processing (EU / UK / EEA users)

If you are in the European Economic Area or the United Kingdom, we process your personal information under one or more of these lawful bases:

Contract: to provide the Service you signed up for.
Legitimate interests: to secure, maintain, and improve the Service, where those interests are not overridden by your rights.
Consent: where you have given it, for example for optional communications. You can withdraw consent at any time.
Legal obligation: where we must process information to comply with the law.

5. Who we share data with

We share personal information only as needed to run the Service, and only with parties bound to protect it:

AI and API providers you choose. When you run an AI column or an HTTP API column, Cube sends the relevant row data to the provider or endpoint you configured (for example, OpenRouter or any REST API you connect), using your API key. This is the core function of the Service and happens at your direction. Each provider handles that data under its own privacy policy and terms.
Infrastructure and hosting providers that store and run the Service on our behalf.
Payment processors, if you purchase a paid plan.
Legal and safety: where required by law, or to protect the rights, safety, and property of Cube or others.
Business transfers: if Cube is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that deal.

We do not share your information with advertisers, and we do not sell it.

6. International data transfers

Cube is operated from India, and Cube and the providers we use may process data in India, the United States, and other countries. When we transfer personal information out of the EEA, the UK, or Canada, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms. Note that when you connect a third-party AI model or API, that provider may process your data in its own locations, which you can review in that provider’s policy.

7. How long we keep your data

Account and Your Content: kept while your account is active. When you delete your account, we delete or anonymize Your Content within a reasonable period, except where we must keep limited records to comply with the law.
Backups: residual copies may persist in encrypted backups for a limited period before being overwritten.
Logs and usage data: kept for a limited period for security and troubleshooting.
Billing records: where you have made payments, financial records may be kept as long as required by tax and accounting law.

You can export Your Content to CSV at any time, and you can delete your account to remove it.

8. Your rights

Depending on where you live, you have some or all of these rights over your personal information:

Access: ask what data we hold about you.
Correction: ask us to fix inaccurate data.
Deletion: ask us to delete your data (“right to erasure”).
Portability: get a copy of your data in a usable format. You can export sheets to CSV directly.
Restriction and objection: limit or object to certain processing.
Withdraw consent: where processing is based on consent.
Non-discrimination: we will not treat you differently for exercising your rights.

To exercise any of these, email contact@cube.tools. We will respond within the time required by applicable law. You also have the right to complain to your local data-protection authority. In Canada, that is the Office of the Privacy Commissioner; in the EEA and UK, your national supervisory authority.

California residents: under the CCPA/CPRA you have the rights above, including the right to know, delete, and correct, and the right to opt out of the sale or sharing of personal information. We do not sell or share personal information as those terms are defined.

9. Security

We use reasonable technical and organizational measures to protect your information, including encryption of API keys at rest and encrypted connections in transit. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your account credentials safe.

10. Children

The Service is not directed to children. You must be at least 18, or the age of majority in your jurisdiction, to use it. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, for material changes, provide notice by reasonable means. Continued use of the Service after changes take effect means you accept the updated policy.

12. Contact

Questions, requests, or privacy concerns? Email contact@cube.tools.