Privacy Policy

1. Introduction

RECUBE AS (org.nr. 821 889 472) ("Us," "We," "Our," or "The Company") commits to respecting visitor and user privacy rights for all services provided (the "Services"). The Company created this Privacy Policy to build confidence during service use and demonstrate commitment to fair information practices and data protection. This Policy applies to Services covered by the Terms of Service and applicable Addenda. By accessing or using Services, users acknowledge reading and understanding this Policy.

2. Information We Collect

2.1 Information You Provide

Directly provided information includes: email address, account identifiers, authentication credentials, location, linked payment account information for payouts and payments (if applicable), support communications, and other voluntarily provided relevant information.

2.2 Content and Interaction Data

The Company collects and processes content and interaction data from service use, such as prompts, instructions, inputs, and generated outputs (text, images, video). AI Agent interaction records are collected, including session context, inputs, outputs, and system processes.

2.3 Usage and Device Data

Collected data includes: usage patterns, device information, operating system, browser, IP address, crash logs, diagnostics, and performance metrics related to service access and use.

2.4 Model Selection Data

If users select different AI models, information collected may include: selected model, provider, pricing/credit events, and associated usage metadata.

2.5 Age Restrictions

The Company does not knowingly collect personal data from individuals below the minimum age required by applicable law or platform requirements ("Minors"). Minimum age requirements vary by jurisdiction and platform.

2.6 Subscription and Transaction Data

Collected information: subscription status, plan tier, credit balances, transaction metadata, and payment details. Payment details provided to third-party app stores or payment processors are not stored by the Company but managed per applicable third-party privacy policies.

2.7 Cookies and Similar Technologies

The Company may collect cookies and similar technologies for authentication, analytics, security, and performance optimization. See our Cookies Policy for details.

3. Use of Information

The Company collects limited data necessary to: provide, operate, secure, and improve Services; provide AI features and outputs; process purchases, subscriptions, manage credit balances, enforce usage limits, and process payouts; publish generated outputs; provide support; monitor usage, detect abuse, and enforce policies; ensure security; prevent fraud and abuse; and comply with legal, regulatory, or governmental requests. Where legally permitted, the Company may use information—including prompts, inputs, outputs, and interaction data—in aggregated, anonymized, or de-identified form for internal analytics, research, testing, system improvement, and quality assurance.

4. Data Sharing

The Company does not sell personal data. Information may be shared with: third-party service providers supporting operations (hosting, analytics, payment processing, payout facilitation); legal authorities as required; and in business transactions (merger or acquisition). Depending on selected AI model, prompts, inputs, and outputs may be processed by different third-party AI providers per their respective terms and privacy policies; model availability, performance, and data handling practices vary by provider. The Company encourages users to review third-party service privacy policies.

5. Data Retention

Personal data, content data, usage data, and AI Agent interaction data are retained only as long as reasonably necessary for purposes described in this Policy, including operating Services, complying with legal obligations, resolving disputes, enforcing agreements, and preventing fraud and abuse. Retention periods vary based on data type, operational needs, and legal obligations.

6. Data Security

The Company uses reasonable technical and organizational measures (encryption, access controls) to safeguard personal data. However, no Internet transmission or storage method is absolutely and completely secure.

7. Data Controller

For applicable data protection law purposes, including EU GDPR and UK GDPR, the data controller is: privacy@recube.ai

8. International Transfers

Data may be processed outside the user's country of residence, including in the United States, where data protection laws may differ.

9. Legal Bases for Processing (EU GDPR / UK GDPR)

Where applicable, the Company processes personal data based on: performance of a contract, legitimate interests (service improvement, security, fraud prevention), consent (where required), or legal obligations.

10. Your Rights

Depending on location, users may have rights to: access, correct, delete, or restrict processing of personal data, or object to certain processing. Requests may be submitted to privacy@recube.ai

11. Marketing Communications

Users may opt out of marketing emails by following unsubscribe instructions in communications or contacting hello@recube.ai. Essential service-related communications (billing notices, subscription updates, service changes) continue.

12. Google User Data and Third-Party Integrations

12.1 Scope of Access

When you connect a Google account to power an AI Agent, the Company requests access only to the Google services that the selected agent template requires. Depending on the template, this may include Gmail (reading, composing, sending, and modifying messages), Google Calendar (viewing and managing events), Google Drive (accessing files the agent creates or that you open with it), Google Docs, Sheets, and Slides, Google Contacts, Google Tasks, and Google Analytics (read-only). The consent screen presented by Google lists the exact permissions requested for your agent before you authorize them.

12.2 How We Use Google User Data

The Company accesses and processes your Google user data solely to provide the features you explicitly request through your AI Agent—for example, reading or sending an email, creating a calendar event, or generating a document. The Company does not use Google user data for advertising and does not use it to develop, improve, or train generalized artificial intelligence or machine learning models.

12.3 Storage and Security of Google Credentials

To keep your agent connected, the Company securely stores the OAuth tokens (access and refresh tokens) along with the associated account email address and the scopes you granted. Access tokens are short-lived; refresh tokens are retained to maintain the connection until you disconnect. The client secret used to obtain tokens is never exposed to the agent or to your browser and remains server-side. These credentials are protected using encryption and access controls.

12.4 Limited Use and Sharing

The Company's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The Company does not sell Google user data and does not transfer it to third parties except (a) as necessary to provide or improve the features you requested, (b) to comply with applicable law, or (c) as part of a merger, acquisition, or sale of assets. Google user data is never used to serve advertisements.

12.5 Revoking Access

You may disconnect a Google account from your AI Agent at any time from within the application, which removes the stored tokens and revokes the Company's access. You may also review or revoke access directly from your Google Account security settings at https://myaccount.google.com/permissions.

13. Changes to This Policy

The Company may update, modify, change, supplement, or add to this Policy. Revised versions become effective immediately when posted. Users should review periodically, especially before providing information, to ensure continued agreement. Continued service use constitutes acceptance of updated Policy.

14. Contact Us

For questions or to exercise privacy rights, contact: privacy@recube.ai (data support) or legal@recube.ai (legal matters). The Company responds per applicable data protection laws. Identity authentication may be required before fulfilling requests.