Skip to main content

This translation is for convenience; the German version is legally binding. Read the German version

Privacy policy

As of 18 October 2026

1. Controller

Valerio Antonelli, Handjerystr. 84, 12159 Berlin, Germany, email: support@cueflow.de.

2. Data collected & purposes

The only mandatory details are the account data at registration; without them we cannot create an account. Everything else you provide voluntarily. If it is missing, individual features are not available (for example, the “Verified” badge needs a profile photo, and details such as an address and tax number are only needed if you create invoices).

  • •Account data (mandatory): First and last name, email address, password (stored only as a bcrypt hash), role (freelancer or business), for businesses the company name, plus language and time zone – to provide the account (Art. 6(1)(b) GDPR). For every sign-in session we store the IP address and device so that you can see your active sessions and sign out other devices (Art. 6(1)(f) GDPR).
  • •Profile, profile photo and phone number (voluntary): You provide your profile photo, description, skills, location, prices, portfolio, audio samples and phone number voluntarily. A public freelancer or company profile is visible to everyone on the internet and can be found by search engines; we do not show the email address or phone number there. Uploaded photos and files are kept in our file storage at DigitalOcean in Frankfurt (Art. 6(1)(b) GDPR).
  • •Booking data and disclosure to the other party: Date, location, service, price, notes and the history of the booking – to perform the contract (Art. 6(1)(b) GDPR). From the request onwards, the other party to the booking sees the data needed for it: name, profile photo, email address and, if provided, phone number; for a business also its address and notes on access and parking. Each side’s own notes are not visible to the other side.
  • •Messages and documents: Messages, attachments, contracts, call sheets and other documents that you write or upload in CueFlow. Only the participants of the respective conversation or booking can see them. We scan uploaded files for viruses on our own server (Art. 6(1)(b) GDPR).
  • •Invoices: Invoices that freelancers create with CueFlow contain the names, addresses and tax details of both sides and, if provided, the freelancer’s bank details. CueFlow stores them and makes them available to the recipient (Art. 6(1)(b) GDPR). We retain invoices and accounting records because the law requires it (Art. 6(1)(c) GDPR in conjunction with § 147 AO and § 257 HGB; periods in section 3).
  • •Payment data: For paid plans: plan, billing period, amounts, payment status and the subscription’s ID at PayPal. Payment is made at PayPal; we do not receive account or card details (Art. 6(1)(b) GDPR, for our invoices Art. 6(1)(c) GDPR).
  • •Server logs: When pages are requested, our server processes the IP address, the requested address, the time and the browser identifier in order to deliver the pages, fend off attacks and find errors (Art. 6(1)(f) GDPR). For the storage period see section 3.
  • •Cookies and local storage: Without consent only what is strictly necessary (§ 25(2) no. 2 TDDDG); statistics only with consent. The list is in section 4c.
  • •Sign-in with Google (optional): If you sign in with Google, Google gives us your name, your email address, whether it has been verified, your Google ID and the address of your Google profile picture; for a new account this picture becomes your profile photo and is loaded from Google’s servers. We store the access keys from Google encrypted. Google learns that you are signing in to CueFlow (Art. 6(1)(b) GDPR).
  • •Calendar connection (optional): If you connect a calendar, we take over your busy times so that nobody books you then. What exactly we read and store is set out in section 4b.
  • •Maps and address search (Google Maps, only if set up): On pages in the signed-in area that show a map or an address field with suggestions (freelancer search with map, booking details, new booking, travel, studio access), your browser loads the Google Maps Platform from Google Ireland Limited. Google receives your IP address, the search terms you enter and the map section shown; nothing from Google Maps is loaded on other pages. For the radius search and for travel times and routes, our server sends place names, addresses or coordinates to Google, without your IP address (Art. 6(1)(b) and (f) GDPR).
  • •Apps and push notifications: The CueFlow apps for iOS and Android use the same account and the same data as the website. If you allow push notifications in the app, we store your device’s push token and send the title and text of the notification (for example about a booking) to your device via the Apple Push Notification service (Apple Distribution International Ltd.) or Firebase Cloud Messaging (Google Ireland Limited). You grant and withdraw this permission in your device’s settings. CueFlow does not currently offer push notifications in the browser (Art. 6(1)(a) and (b) GDPR, § 25(1) TDDDG).
  • •Usage statistics (only with consent): Google Analytics 4 and Plausible, only if you choose “Allow statistics” in the cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG); can be withdrawn at any time via the . Details in section 4a.
  • •Error monitoring (Sentry, only if enabled): If error monitoring is enabled, the website, server and apps send technical details when errors occur (error message, page visited, browser, device, operating system) and, for some page views, loading times to Sentry. Access credentials and cookies are removed first. The website also records the course of the session for about 5% of visits and for visits with an error; all text is masked and images and media are blocked (Art. 6(1)(f) GDPR).
  • •Support requests and feedback: What you send via the support or feedback form (name, email address, subject and message, for feedback also the page and your role) is stored so that we can reply to you and improve CueFlow. If set up, the request also appears in an internal Discord channel of our support team (Art. 6(1)(b) and (f) GDPR).
  • •Messages via WhatsApp (optional, only if enabled): Only if the feature is enabled and you have given your consent do we send booking messages via Meta’s WhatsApp Business Platform. For this, your phone number and the message text are sent to Meta (Art. 6(1)(a) GDPR); you can withdraw your consent at any time under Settings → My data.
  • •Notifications to Discord (optional): If you enter a Discord webhook address in the settings, we send notifications (e.g. about bookings) to this address at Discord (Art. 6(1)(b) GDPR).
  • •Audio samples and SoundCloud: Audio samples that a profile embeds from an external address are only loaded from there by your browser when you play them. We only load a SoundCloud player when you tap “Load SoundCloud player”; SoundCloud then receives your IP address and may set its own cookies (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

3. Storage period

We store personal data as long as you use your account and as long as it is needed for the respective purpose. After that we delete or anonymise it, unless there is a statutory retention obligation (Art. 17(3)(b) GDPR). In detail:

  • Account: if you request deletion, we lock the account immediately and delete or anonymise your details after 30 days, as soon as no booking is running and no invoice is open (see data deletion).
  • Invoices and other accounting records: 8 years (§ 147(1) no. 4 and (3) AO, § 257(1) no. 4 and (4) HGB as amended in 2025).
  • Commercial books, inventories, annual financial statements and management reports: 10 years.
  • Commercial and business letters received and sent (for example emails about a contract): 6 years. Each period starts at the end of the calendar year in which the document was created.
  • When an account is deleted, bookings, invoices (with the names and addresses on them) and audit records are therefore kept; all other account and profile data is deleted or anonymised. Automatic deletion of these records after the periods have expired has not been set up yet; until it is, they remain stored after that as well.
  • Busy times and events from connected calendars: until you disconnect the calendar or delete your account.
  • Signed-out sign-in sessions with IP address and device: 90 days after signing out.
  • Server logs: only as long as we need them for security and troubleshooting. A fixed technical deletion period has not been set up for them yet.
  • Database backups: one is made before every update; on the server we keep the 14 most recent. Deleted data may remain in these copies and, if set up, in the off-site copy until they are replaced by newer ones.

4. Recipients and service providers

At CueFlow, your data is only seen by the people who need it for operation and support and, in the context of a booking, by the other party (section 2). In addition, we use the following service providers. Where data is transferred to the USA, we base this on the EU-US Data Privacy Framework (adequacy decision of the EU Commission of 10 July 2023), insofar as the recipient is certified under it, and additionally on standard contractual clauses of the EU Commission.

  • DigitalOcean, LLC (USA): Servers, database, file storage (Spaces) and backups in the Frankfurt am Main data centre. If an off-site backup is set up, it is kept encrypted in a further DigitalOcean Spaces storage in the EU. Processing on our behalf (Art. 28 GDPR); because DigitalOcean is a US company, additionally standard contractual clauses.
  • Sending email: We send CueFlow emails (for example confirmations, booking and invoice emails) through our own mail server on our server at DigitalOcean in Frankfurt; no further sending service is involved.
  • PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg: Payment processing for the paid plans. PayPal processes the payment data under its own responsibility in accordance with its own privacy policy.
  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (Google LLC, USA): Sign-in with Google, Google Calendar connection, maps and address search, push notifications on Android (Firebase Cloud Messaging) and, only with consent, Google Analytics (sections 2, 4a and 4b).
  • Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland: Only if you connect an Outlook or Microsoft 365 calendar (section 4b).
  • Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland: Push notifications to iPhone and iPad (Apple Push Notification service) and, if you connect an iCloud calendar, retrieving it (section 4b).
  • Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia: Usage statistics, only with consent (section 4a).
  • Functional Software, Inc. (Sentry), 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA: Error monitoring, only if enabled (section 2).
  • Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland: Messages via the WhatsApp Business Platform, only if this feature is enabled and you have given your consent.
  • Discord Inc., 444 De Haro Street, Suite 200, San Francisco, CA 94107, USA: Notifications to a Discord webhook address that you enter yourself. In addition, if set up, internal messages to our team: support requests and feedback (with name, email address and message) and technical incident alerts, which may contain internal IDs (for example of a subscription or a payment) and error messages.
  • SoundCloud Global Limited & Co. KG, Berlin: Embedded player for audio samples, only after you tap it (section 2).
  • 650 Industries, Inc. (Expo), USA: App updates, only if enabled: the apps ask Expo for new versions; Expo receives the IP address and details of the app version.

4a. Usage statistics (Google Analytics and Plausible)

We only load Google Analytics 4 and Plausible if you choose “Allow statistics” in the cookie banner. Before that, and after “Necessary only”, nothing is loaded from either.

Google Analytics 4

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (parent company Google LLC, USA). Google Analytics sets cookies with pseudonymous identifiers (_ga and _ga_…, lifetime up to 2 years) and uses them to record the pages visited (their address), the time, the referring page, details of the device and browser (for example type, operating system, screen size, language) and the approximate location, which Google derives from the IP address. According to Google, IP addresses are neither logged nor stored in Google Analytics 4. Event data is deleted after 2 months, user-level data after 14 months (setting in our Google Analytics account). We use Google Analytics only for our own reach measurement, not for advertising: advertising storage, advertising signals and Google Signals are switched off.

  • Legal basis: Your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Without consent, no analytics data is stored on your device.
  • Withdrawal: At any time with effect for the future: open the (you will also find the link in the website’s footer and in the menu of the signed-in area) and choose “Necessary only”, or switch statistics off in the settings under “My data”. You can also delete analytics cookies that have already been set in your browser.
  • Data transfer to the USA: Google LLC is certified under the EU-US Data Privacy Framework (adequacy decision of the EU Commission of 10 July 2023); in addition, standard contractual clauses of the EU Commission apply.
  • Objection (opt-out): You can also object to data collection with the Google Analytics opt-out browser add-on.
  • Google’s privacy policy: policies.google.com/privacy

Plausible

The provider is Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible sets no cookies and records the pages visited, the referring page, browser, operating system, device type and country. According to Plausible, the IP address is not stored and the data is processed in the EU. Legal basis and withdrawal as for Google Analytics.

4b. Calendar connection

Google Calendar

If you connect your Google Calendar (on paid freelancer plans), CueFlow only asks Google for two narrow permissions: to query busy times (“calendar.freebusy”) and to read the list of your calendars (“calendar.calendarlist.readonly”). With these, CueFlow cannot read event contents. When connecting, CueFlow reads the list of your calendars to find your primary calendar and stores its ID and name. After that, CueFlow regularly retrieves only the busy periods of this calendar (start and end, without title, location, attendees or description), from 30 days back to 180 days ahead. We store these periods as busy times so that businesses do not book you then; they only see “busy”. CueFlow writes nothing to your Google Calendar. We store the access keys from Google encrypted (AES-256-GCM).

Older connections granted Google a broader permission: until October 2026 to read your calendars (“calendar.readonly”), before 17 October 2026 also to edit events (“calendar.events”). CueFlow uses only the requests described above. If you disconnect and connect again, only the two narrow permissions apply.

If you disconnect in the calendar settings, we revoke the permission at Google and delete the stored access keys, the busy times taken over and the calendar’s ID and name. All that remains is a record that there was a disconnected Google connection; it is deleted as well when the account is deleted. You can also remove the access in your Google account at any time.

We use this data only to show your availability in CueFlow and to avoid double bookings. We do not pass it on to third parties and do not use it for advertising.

CueFlow’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Outlook, iCloud and calendar links

For an Outlook or Microsoft 365 calendar (permission “Calendars.Read”, read only), CueFlow takes over the start, end, title and location of your events. For iCloud and other CalDAV calendars and for calendar links (iCal), CueFlow takes over the start, end, title, location, description and link of the events; we store the password of a CalDAV account encrypted. Only you see these details in your CueFlow calendar; businesses only see “busy”. When you disconnect, we delete the events taken over and the stored access data. For Microsoft, you also remove the app in your Microsoft account; CueFlow shows you a note on how to do this.

The legal basis is in each case Art. 6(1)(b) GDPR (the calendar connection you asked for).

4c. Cookies and local storage

Without your consent, we only store on your device what is strictly necessary for the service you asked for (§ 25(2) no. 2 TDDDG; legal basis for the related processing: Art. 6(1)(b) and (f) GDPR):

  • cf_at, cf_refresh and cf_session (in the client area cf_client_session): your sign-in; the access key is valid for up to 4 hours, the sign-in for up to 30 days.
  • cf_csrf: protection against forged requests (CSRF), up to 4 hours.
  • cf_signed_in (up to 30 days) and cf_no_session (until the browser is closed): whether you are signed in, so that the page loads without a detour.
  • cf_oauth_state: secures sign-in with Google, only during sign-in.
  • cf_deletion_grant: after a deletion request, allows the deletion to be cancelled.
  • cueflow_locale: the language you chose, 1 year.
  • In the browser’s local storage: your choice in the cookie banner, your design (light or dark), dismissed notices and technical markers for updates and the apps’ push registration.
  • Only with your consent: the Google Analytics cookies (_ga, _ga_…, section 4a).

4d. Emails from CueFlow: reminders, tips and news

While your freelancer profile cannot be booked yet, we send you at most three reminders (around 2, 7 and 21 days after sign-up) about what is still missing and, if you finish afterwards, one short confirmation. For this we use your email address, your first name, your time zone and the state of your profile. The legal basis is Art. 6(1)(b) GDPR (performance of the user agreement) and our legitimate interest in making your start easier (Art. 6(1)(f) GDPR). You can unsubscribe from these reminders at any time in your notification settings or with one click using the link in every reminder.

We only send you tips about features and news from CueFlow (“Tips and news”) if you have expressly consented (Art. 6(1)(a) GDPR, Section 7(2) no. 2 UWG). Consent is voluntary and off by default. You can give it at sign-up, in your notification settings or through a one-time note in the app; it only takes effect once you click the link in the confirmation email (double opt-in). As proof, we store when and where you gave and confirmed it, the version of the consent text and the IP address at confirmation.

So that you only get notes about features you don't know yet, we take into account which features you already use when choosing tips (for example, whether a calendar is connected). We send at most one such email a week, do not measure opens or clicks, and do not pass your address on to third parties for this; sending is handled by the email service named in section 4.

You can withdraw your consent at any time with effect for the future: with one click on the unsubscribe link in each of these emails, or in your notification settings. After that you won't receive tips and news any more. We keep the proof of consent and withdrawal as far as we need it as evidence (Art. 7(1) GDPR).

5. Your rights

You have the right to:

  • • Access (Art. 15 GDPR)
  • • Rectification (Art. 16 GDPR)
  • • Erasure (Art. 17 GDPR)
  • • Restriction of processing (Art. 18 GDPR)
  • • Data portability (Art. 20 GDPR)
  • • Object to processing based on legitimate interests (Art. 21 GDPR)
  • • Withdraw any consent with effect for the future (Art. 7(3) GDPR): statistics via the , WhatsApp and other consents under Settings → My data, tips and news by email under Settings → Notifications or via the link in each of these emails, push notifications in your device’s settings
  • • Lodge a complaint with a data protection supervisory authority, for example the Berlin Commissioner for Data Protection and Freedom of Information

To do so, write to us at support@cueflow.de. You can also get a copy of your data and delete your account directly in the settings under “My data”.

Legal notice (Impressum)Terms (AGB)Data deletionHome