Privacy notice

Who is responsible

CueStem is the supplied trading name. The full legal identity, business address and country of the data controller have not yet been confirmed. Privacy enquiries can be sent to admin@cuestem.com.

Information used by the service

An account involves an email address, sign-in information, optional DJ name and setup preferences. Library records include filenames, track details, grids, cues, loops, crates and job results. Plans, allowances and payment references are used to manage access and billing.

Crate Prep reads audio on your device without uploading the music file. Preparation metadata is saved in your account. Grid Fix and Stem Splitter upload only the audio you select for those services. Filenames or recordings can contain personal information: avoid uploading sensitive recordings or information about other people.

Free AI abuse prevention uses a device cookie and hashed network/device identifiers. Hashing does not necessarily make these identifiers anonymous. Service diagnostics and payment or job records can also contain technical information.

Purposes and lawful bases to confirm

The intended purposes are to provide accounts and requested preparation services, process payments, prevent misuse, resolve problems and answer requests. The operator must document the correct lawful basis for each activity, such as contract, legal obligation or an assessed legitimate interest, before finalising this notice. Where consent is required, it must be specific, freely given and withdrawable; accepting terms is not blanket privacy consent.

Providers and international processing

The service uses Lovable Cloud for hosting, accounts, saved records and file storage; Stripe handles checkout and billing; Replicate processes selected AI audio jobs. Optional Google sign-in involves Google and the sign-in service. Other model-assisted checks may involve an AI provider.

The complete recipient list, provider contracts, processing locations, provider retention and training settings, and UK/EEA international-transfer safeguards still require owner verification. This draft does not promise UK/EU-only processing, an adequacy arrangement or that providers never use data for training.

Retention

Completed saved stems have a 14-day download window from creation; scheduled daily cleanup means removal may occur on the next cleanup run. Download your own copies before expiry. Uploaded originals are removed by the service after successful AI processing; a failed job may require separate cleanup.

Preparation records are separate from audio files and remain saved for later exports. The operator must confirm retention limits for accounts, failed uploads, anti-abuse records, diagnostics, backups and billing records. This is not a promise that every copy held by every provider is deleted at the same moment.

UK, EEA and US privacy requests

Contact admin@cuestem.com for access, correction, deletion or a copy of your data, or to raise an objection or restriction request. UK/EEA rights depend on the activity and lawful basis; some records may need to be retained for legal reasons. There is no self-service account deletion or full personal-data export tool at present.

Where applicable, UK/EEA requests normally require a response within one month, subject to lawful extensions. You can complain to the UK Information Commissioner or your relevant EEA supervisory authority. Applicable US state laws may provide additional access, deletion, correction, portability, opt-out and appeal rights; applicability and any sale/sharing or targeted-advertising disclosures still require review. No claim of universal CCPA compliance is made.

Do not email your password, card details or identity documents unsolicited. Identity checks should be proportionate and handled through an agreed secure process.

Younger users

CueStem intends to allow younger DJs. The country-specific minimum ages, parental authorisation process and child-appropriate privacy safeguards are not yet finalised. Please contact admin@cuestem.com before creating an account for a child, and do not submit a child’s information while eligibility is unresolved.

Under-13 use in the US can trigger COPPA requirements. UK children’s privacy standards concern users under 18, and EEA consent ages differ by country. A statement in this notice alone is not age assurance or verified parental consent.

Changes

This draft will be replaced with a dated final notice once the operator and processing details have been approved. Material changes should be communicated before new uses of personal information begin.