Privacy Policy
Effective October 29, 2026
Who we are
Curated Content Engine (“CCE”) is operated by MC375 Ventures, LLC (“we”, “us”). CCE is a document assembly tool for customer-facing teams. This policy explains what we collect, why, and what we do with it.
What we collect
Account information
Your email address, your name if you provide one, and the workspaces you belong to. We do not store passwords: authentication uses a one-time emailed code or Google sign-in.
Content you create or upload
The documents, snippets, libraries, and files you author or import, along with their revision history and review status. This content is yours. We store it so the product can function, and we process it to provide search, versioning, and export.
Usage information
Records of actions taken in the product, such as signing in, assembling a document, or exporting. We use these to operate the service, to show workspace administrators how their content is being used, and to maintain a security audit trail.
Technical information
Standard server logs and error diagnostics, including IP address, browser type, and the pages requested. We use these to keep the service running and to investigate faults.
What we do not do
- We do not sell your personal information.
- We do not use your content to train machine learning models.
- We do not send your content to a third-party model provider to generate text.
- We do not serve third-party advertising, and we run no advertising trackers.
Google account data
If you choose to connect Google Drive, CCE requests only the drive.file scope. That scope limits our access to files you specifically select through the Google file picker, and to files CCE itself creates. We cannot see the rest of your Drive.
When you import a document, we copy its contents into your CCE library and retain a reference to the original file identifier so the product can tell you when the source has changed. Disconnecting Google revokes our access. Content already imported remains in your library until you delete it.
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Live Answers
When a member uses Live Answers, speech from their calls is transcribed on their device. Short excerpts of that text are sent to Anthropic to identify questions and locate answers, and are not retained by CCE. The questions asked and the answers shown are kept for the workspace’s retention period.
CCEForge browser extension
The CCEForge browser extension sends nothing to our servers. It has no network access of its own: it makes no web request, holds no account credential, and stores no sign-in state. While the prompter is active, it passes the address of the page you are on, and the label or text of the element under your pointer, to the CCEForge tab you have open in the same browser. That tab is the only thing it talks to.
It runs only on the sites you grant it, and it stops when you revoke them. The one record it keeps, which tab to send to, lives in browser session memory and is gone when the browser closes.
When you map a cue, CCE saves the mapping to your workspace: the page address pattern, and the label, text or selector of the element you chose. A cue saved on a snippet is visible to everyone in the workspace. A mapping you keep for yourself is visible only to you unless you share it with the workspace. Our usage records note that a cue fired, never the page it fired on.
Payments
A workspace on the Free plan makes no payment and has no record at Stripe. When a workspace admin chooses a plan that carries a fee, Stripe processes the payment through its own hosted checkout page and billing portal. Card details are entered on Stripe’s pages and never reach our servers.
To set up billing, we give Stripe the workspace’s name and identifier and the email address of the admin who chose the plan. We keep Stripe’s customer and subscription identifiers for the workspace, the plan, the billing interval, the subscription’s status and period dates, and a copy of each notice Stripe sends us about the subscription and its invoices. Those notices can include the billing email address and any billing address entered at Stripe.
When a plan charges for active members or Live Answers time beyond what it includes, we report the count to Stripe, labeled with the workspace, the billing period, and an internal identifier for the member or the call. That report carries no name, no email address and no content.
Service providers
We share information with the following providers so the service can operate:
| Provider | Purpose | Location |
|---|---|---|
| Vercel | Application hosting and content delivery | United States |
| Supabase | Database, authentication, and file storage | United States |
| Postmark | Transactional email delivery | United States |
| Fly.io | Document format conversion (PDF, DOCX, RTF) | United States |
| Sentry | Error monitoring and diagnostics | United States |
| Anthropic PBC | Answer detection and composition — transcript excerpts and library excerpts | United States |
| Optional document import and export, only when you connect it | United States | |
| Stripe | Payment processing for workspaces on a plan with a fee — billing contact, subscription and usage counts | United States |
We will update this list before adding a provider that processes customer content.
Where data is stored
Customer content and account data are stored in the United States. If you access CCE from outside the United States, you are transferring information to the United States.
Retention and deletion
We keep your content for as long as your account exists. You can delete individual content at any time, and you can export a complete copy of your workspace as a file archive at any time.
Export files we store on your behalf are deleted 90 days after they were created. The record of the export is kept.
When you delete a workspace, we remove its content from production systems within 30 days. Backups age out on a rolling basis. Records we are required to retain for tax or accounting purposes, such as invoices, are kept as long as the law requires.
Security
Data is encrypted in transit and at rest. Access to production systems is limited to personnel who need it. Third-party credentials you provide, such as Google refresh tokens, are encrypted before storage.
CCE does not currently hold a SOC 2 or ISO 27001 certification. We will say so plainly here if that changes.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to certain processing. You can exercise most of these directly in the product. For anything else, contact us and we will respond within 30 days.
California residents
CCE is operated by a California limited liability company. We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under California law. California residents may exercise the access, correction, deletion, and portability rights described above, and we will not discriminate against anyone for exercising them.
Cookies
We use cookies that are necessary for the service to function, primarily to keep you signed in. We do not use advertising or cross-site tracking cookies.
Children
CCE is a business tool and is not directed to anyone under 16.
Changes
We will post any change to this policy on this page and update the effective date. For a material change, we will notify account holders by email before it takes effect.
Contact
Questions about this policy: privacy@cceforge.com