Privacy Policy
This policy explains what we collect on this website, how we handle client content, and who processes data on our behalf.
Effective August 3, 2026
1. Who we are
cQuenced is the trading name of Cquenced Incorporated, a Delaware corporation. In this policy, "cQuenced", "we", "us", and "our" refer to that entity.
Mailing address: 63 Federal Street, Portland, ME 04101, United States.
Contact: support@cquenced.com
2. Our two roles, and why the difference matters
We handle personal information in two distinct capacities, and your rights differ depending on which one applies.
As a controller: this website and our own business contacts
When you visit cquenced.com, submit a form, or correspond with us, we decide what to collect and why. Sections 3 through 5 describe that processing.
As a processor: client video content
When a client engages us to work on their video library, that client is the controller and we act as their processor. We handle the footage and the personal information inside it only on that client's documented instruction. Section 6 describes that processing.
If you appear in footage a client sent us, your relationship is with that client, not with cQuenced. See section 9 for how to exercise your rights in that case.
3. What we collect on this website
Information you give us
When you subscribe to an alert or update through a form on this site, we collect:
- your email address, which is required;
- your company, if you provide it;
- your role, if you provide it;
- which page or campaign the submission came from.
We also store a token derived from your email address so that an unsubscribe link can be verified without you logging in.
Information collected automatically
This site runs two analytics tools on every page:
- Google Analytics 4, which sets cookies and collects usage data including pages viewed, referring site, approximate location derived from IP address, and device and browser characteristics.
- Plausible Analytics, which is cookieless and collects aggregate page-view data without building a profile of an individual visitor.
If you arrive through a campaign link carrying UTM parameters, those parameters are held in your browser's session storage for the duration of your visit and attached to analytics events. They are cleared when you close the tab.
We do not sell personal information, and we do not share it with third parties for cross-context behavioural advertising.
4. Why we use it
- To send the alerts, updates, or materials you asked for.
- To respond to enquiries and run a sales conversation you have started.
- To understand which pages and campaigns are useful, in aggregate.
- To keep the site secure and available.
- To meet our legal and contractual obligations.
Where the GDPR applies, our lawful bases are consent for marketing email, legitimate interests for site analytics and security, and contractual necessity for information needed to deliver a service you have engaged us for.
5. How long we keep it
Subscriber records are kept until you unsubscribe or ask us to delete them, and for a short period afterwards so that we can honour the unsubscribe. Analytics data follows each provider's own retention settings. Business correspondence is kept for as long as we have a live relationship and then as required for tax and legal purposes.
6. Client content
Client video, audio, transcripts, and the derived text and embeddings we generate from them are processed under the agreement we hold with that client, not under this policy. In summary:
- We process client content only on the client's documented instruction.
- We do not use client content to train our own models, and we select model vendors and settings intended to prevent client content being used to train theirs.
- Client content is segregated by tenant, and access is limited to personnel who need it to deliver the work.
- On termination, client content is deleted or returned in line with the terms of the relevant agreement.
7. Subprocessors
We use the vendors below to run the service. This list is current as of the effective date at the top of this page. Clients under a data processing agreement receive advance notice of changes as set out in that agreement.
These are the vendors involved in delivering the service and handling client content. The analytics providers used on this website are named separately in section 3; they do not receive client content.
| Subprocessor | Purpose | Processing location |
|---|---|---|
| Hetzner Online GmbH | Application hosting and media processing | United States, Germany |
| Cloudflare, Inc. | Object storage, content delivery, DNS | United States |
| Supabase, Inc. | Managed database for application and tenant data | United States |
| TwelveLabs, Inc. | Video indexing and semantic search | United States |
| ElevenLabs, Inc. | Speech to text and audio processing | United States |
| Anthropic PBC | Language model inference on derived text | United States |
| OpenAI, L.L.C. | Language model inference on derived text | United States |
| Functional Software, Inc. (Sentry) | Application error monitoring | United States |
| GitHub, Inc. | Source code hosting | United States |
| PostHog, Inc. | Product usage analytics | United States |
| Plunk | Transactional and operational email | European Union |
8. International transfers
We are based in the United States and most of our subprocessors process data there. Where personal information moves from the European Economic Area or the United Kingdom to the United States, that transfer is covered by the Standard Contractual Clauses or by the receiving vendor's certification under the applicable Data Privacy Framework, depending on the vendor.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict processing, and to withdraw consent. You also have the right to complain to your supervisory authority.
For information we hold as a controller
Email support@cquenced.com and describe what you are asking for. We will verify your identity through a channel we already have on file, and respond within the period required by the law that applies to you, which is one month under the GDPR and forty-five days under the CCPA. There is no charge for a reasonable request.
For footage held on behalf of a client
Send your request to the organisation that produced or commissioned the video. They are the controller and they decide whether the request is valid. We assist them promptly once they instruct us. We cannot act on a request about client footage without that instruction, because doing so would mean a processor overruling the controller.
10. Security
We maintain a written information security programme covering access control, encryption, logging, vendor risk, and incident response. SOC 2 Type I and Type II examinations are in progress with an independent third-party auditor. We do not hold a SOC 2 report yet, and we will not claim one until it exists.
To report a security issue, email support@cquenced.com with "security" in the subject line.
11. Children
This site and our services are directed at businesses. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, contact us and we will delete it.
12. Changes to this policy
If we make a material change, we will update the effective date at the top of this page and, where the change affects how we handle information you have already given us, tell you directly.
13. Contact
Cquenced Incorporated
63 Federal Street
Portland, ME 04101
United States
support@cquenced.com