Legal
Privacy Policy
Last Updated: May 29, 2026
This Privacy Policy (“Policy”) describes how The Varillas Company LLC, doing business as Cue Sheet Pro (“Company,” “we,” “us,” or “our”), collects, uses, and discloses information in connection with your use of the Cue Sheet Pro platform and related services accessible at www.cuesheetpro.com (collectively, the “Platform”).
This Policy is incorporated into and forms part of our Terms of Service. Unless otherwise stated, capitalized terms used in this Policy have the meanings assigned to them in the Terms of Service. By accessing or using the Platform, you confirm that you have read and understood the practices described in this Policy.
The Platform is designed for professional and business users working in post-production, music supervision, and related entertainment industry roles. It is not directed at consumers generally or at children. If you do not agree with this Policy, please do not use the Platform.
1. Information We Collect
Information You Provide Directly
We collect personal information that you voluntarily provide when you create an Account, enroll in a Subscription, or otherwise interact with the Platform. This includes:
- Account and Identity Information: your name, email address, username, and password.
- Billing Information: your billing address and payment method details. Payment information is processed directly by Stripe, Inc. and is not stored on our servers. Please see Section 3 for more on Stripe.
- Communications: any messages, feedback, or support inquiries you send to us.
Information Collected Automatically
When you access or use the Platform, certain information is collected automatically, including:
- Log and Usage Data: your IP address, browser type, operating system, referring URLs, access times, and pages viewed.
- Device Data: general information about the device you use to access the Platform, such as device type, operating system version, and browser settings.
- Analytics Data: anonymized, aggregated information about how the Platform is used, including general usage patterns and navigation data. The Platform uses Vercel Web Analytics, which does not use cookies and does not collect personally identifiable information. Please see Section 5 for details.
Information We Do Not Collect
The Platform is architected so that file processing occurs locally on your device. We do not upload, receive, or store the content of EDL files, cue sheets, or other files you process through the Platform's tools. Your working files remain on your machine and are not transmitted to our servers. Please see Section 6 for a full description of our client-side processing architecture.
2. How We Use Information
We use the information we collect for the following purposes:
- Service Delivery: to create and manage your Account, process Subscription payments, provide customer support, and operate the Platform.
- Communications: to send transactional messages such as account confirmations, payment receipts, password resets, and service updates. We do not currently send marketing or promotional emails. If we introduce a marketing program in the future, we will obtain your consent before doing so.
- Security and Fraud Prevention: to monitor for unauthorized access, detect abuse, and protect the integrity of the Platform.
- Analytics and Improvement: to understand how the Platform is used, identify technical issues, and improve features and performance. Analytics data collected through the Platform is anonymized and aggregated and does not identify individual users.
- Legal Compliance: to comply with applicable laws, respond to legal process, and enforce our Terms of Service.
3. How We Share Information
We do not sell your personal information. We share information only as described below.
3.1 Service Providers
We engage trusted third-party vendors to assist in operating the Platform. These providers are contractually bound to use your information only to perform services on our behalf and to maintain appropriate security standards. Our current service providers include:
- Stripe, Inc. for payment processing. Stripe processes Subscription payments directly and is subject to its own privacy policy at www.stripe.com/privacy. We receive only limited transactional data from Stripe, such as payment confirmation and the last four digits of your payment method.
- Clerk, Inc. for authentication and account management. Clerk manages user login, session tokens, and Google OAuth authentication. Clerk is subject to its own privacy policy at www.clerk.com/privacy.
- Vercel, Inc. for platform analytics. The Platform uses Vercel Web Analytics to collect anonymized, aggregated usage data. Vercel does not use cookies and does not collect or store personally identifiable information. Vercel is subject to its own privacy policy at www.vercel.com/legal/privacy-policy.
3.2 Legal Disclosures
We may disclose personal information when required or permitted by law, including to: (a) comply with applicable law, regulation, or legal process; (b) enforce our Terms of Service; (c) protect the rights, property, or safety of the Company, our users, or the public; or (d) detect, prevent, or address fraud or security issues.
3.3 Business Transfers
In the event of a merger, acquisition, financing, or sale of all or substantially all of the Company's assets, personal information may be transferred to the acquiring or successor entity. You will be notified of any such transfer where required by applicable law.
4. Authentication and Third-Party Sign-In
The Platform uses Clerk, Inc. to manage authentication. You may create an Account using your email address and a password, or by signing in with your existing Google account.
If you choose to sign in with Google, we will receive certain profile information from Google through the OAuth authentication process. This typically includes your name and email address. We use this information solely to create and manage your Account and do not receive access to your Google account beyond what is necessary to authenticate you. Google's handling of your data during this process is governed by Google's Privacy Policy, available at www.policies.google.com/privacy.
Authentication data, including session tokens and credentials, is managed by Clerk and is subject to Clerk's privacy policy at www.clerk.com/privacy. We do not store your password in plaintext.
5. Cookies and Tracking Technologies
The Platform uses cookies and similar technologies to operate core functionality and maintain your session. The Platform does not use cookies for advertising or cross-site tracking. Certain cookies are strictly necessary to operate the Platform, including session cookies that keep you logged in and security tokens used by our authentication provider, Clerk. These cookies cannot be disabled without affecting your ability to use the Platform.
The Platform uses Vercel Web Analytics for usage analytics. Vercel Web Analytics does not use cookies and does not collect or store personally identifiable information. It processes only anonymized, aggregated data about how the Platform is used and does not track individual users across sessions or sites. No cookie consent banner is required for analytics purposes as a result.
Most web browsers allow you to control cookies through your browser settings. Disabling cookies may affect certain features of the Platform, including login functionality.
6. Client-Side File Processing
A core feature of the Platform is that all file processing occurs locally within your web browser on your own device. When you use tools such as the EDL Converter, Timecode Calculator, Music Cue Tracker, Cue Sheet to EDL, or Cue Sheet Conformer, the files you load into those tools are processed on your machine and are not uploaded to, transmitted to, or stored on the Company's servers.
This means that the content of your working files, including EDL data, cue sheet entries, timecodes, and any associated metadata, remains under your control at all times. The Company cannot access, view, recover, or restore any files you process through the Platform's tools.
Standard browser-based communications, including authentication data, session tokens, and anonymized analytics information (as described in Sections 4 and 5), are transmitted to our servers or to third-party service providers in the ordinary course of operating the Platform. These transmissions do not include the content of files you process through the tools.
Because the Company does not retain copies of your files, we cannot recover lost, corrupted, or deleted files on your behalf. You are solely responsible for maintaining your own backups.
7. Data Retention
We retain personal information for as long as necessary to fulfill the purposes described in this Policy, including maintaining your Account, processing Subscriptions, complying with legal obligations, and resolving disputes. When your Account is closed or data is no longer needed, we will delete or anonymize it in accordance with applicable law.
Billing records and transaction data may be retained for longer periods where required by tax, accounting, or other legal requirements. Because the Platform's analytics tool collects only anonymized aggregate data, no personally identifiable analytics data is retained.
Because file processing occurs locally on your device, we do not retain copies of any files you process through the Platform's tools. Retention of your working files is your sole responsibility.
8. Data Security
We maintain reasonable administrative, technical, and physical safeguards designed to protect the personal information we collect against unauthorized access, disclosure, alteration, or destruction. Payment data is handled directly by Stripe and is not stored on our servers. Authentication credentials are managed by Clerk.
Despite these measures, no online service can guarantee absolute security. Transmission of personal information to and from the Platform is at your own risk. You are responsible for maintaining the confidentiality of your Account credentials and for securing your device against unauthorized access. If you suspect unauthorized access to your Account, please notify us promptly at the address provided in Section 13.
9. Children's Privacy
The Platform is intended for use by adults and is not directed at children under the age of eighteen (18). We do not knowingly collect personal information from anyone under eighteen. If we learn that we have collected personal information from a minor, we will promptly delete that information and close the associated Account. If you believe we may have collected information from a minor, please contact us at the address provided in Section 13.
10. Your Privacy Rights
Depending on the state in which you reside, you may have certain rights with respect to your personal information under applicable state privacy laws. These rights may include the right to know what personal information we have collected about you, the right to request deletion of your personal information, the right to correct inaccurate information, and the right not to be discriminated against for exercising these rights. To exercise any applicable rights, please contact us using the information provided in Section 13. We will verify your identity before processing your request and will respond within the timeframe required by applicable law.
The Platform is currently operated primarily for U.S.-based professional users. We do not sell personal information, do not engage in cross-context behavioral advertising, and do not share personal information with third parties for their own marketing purposes. We do not currently send marketing or promotional emails. If we introduce a marketing program in the future, we will provide you with a clear opt-out mechanism before any marketing communications are sent.
You may access, update, or request deletion of your Account information at any time by logging into your Account settings or by contacting us at the address in Section 13. Upon a verified request to delete your Account, we will deactivate your Account and delete or anonymize your personal information, subject to any legal retention requirements.
11. Do-Not-Track Signals
Some browsers transmit Do-Not-Track (“DNT”) signals to websites. Because no uniform standard for recognizing or honoring DNT signals currently exists, the Platform does not respond to DNT signals at this time. If a recognized standard is adopted in the future, we will update this Policy accordingly.
12. Updates to This Policy
We may update this Policy from time to time to reflect changes in our practices, technology, or applicable law. Updated versions will be posted on the Platform with a revised “Last Updated” date. If we make material changes that affect your rights, we will notify you by posting a notice on the Platform or by sending an email to the address associated with your Account. Continued use of the Platform after any update constitutes your acknowledgment of the revised Policy.
13. Contact Information
If you have questions, requests, or concerns regarding this Policy or our data practices, please contact us:
The Varillas Company LLC d/b/a Cue Sheet Proc/o Northwest Registered Agent Service, Inc.
5000 Thayer Center, Suite C
Oakland, Maryland 21550
support@cuesheetpro.com
All notices are deemed received twenty-four (24) hours after email transmission or upon confirmed delivery if sent by mail.