Privacy Policy & Data Choices

1. Choose or Change Your Analytics Preference

The public CUBE investor briefing operates with optional analytics off by default. You may choose to accept optional first-party analytics or continue without them. Continuing without analytics does not limit access to the public briefing or diligence materials. You can withdraw optional analytics at any time using the controls below or by clearing your browser storage.

Your current choice will appear here after this page loads.

2. Information We Collect

2.1 Optional Website Analytics (Only When Accepted)

• Randomized visitor and browser-session identifiers created only after affirmative acceptance.
• Page paths and sections viewed, interface interactions, coarse viewport dimensions, and general browser/device category.
• A keyed one-way network address digest and coarse Fly.io edge region. Raw IP addresses are not written to our analytics event logs.
• Diagnostic metrics such as question length or topic category for investor assistant interactions.

Optional analytics are not designed to store typed or transcribed question text, raw audio, recordings, transcripts, email addresses, self-stated names, authentication secrets, financial data, or URL query strings.

2.2 Information Provided Directly by You

• Diligence & Inquiries: When submitting an investor diligence request or contact form, you provide your name, professional email, organization, phone number, and message notes.
• Stripe Connect Onboarding: Merchant business details, tax IDs, and bank settlement details are transmitted directly to Stripe's secure infrastructure. CUBE never stores raw bank credentials or full payment card numbers.

3. Purpose, Legal Basis & Data Retention

CUBE Collective LLC is the responsible organization for this public investor briefing and the CUBE Core platform suite. CUBE processes information for legitimate operational purposes: operating our platform services, understanding document navigation, improving the briefing, diagnosing failures, fulfilling contractual obligations, verifying merchant identity via Stripe Connect, and responding to diligence inquiries.

• Retention Limit: Optional analytics logs are retained for no more than 90 days and may be removed sooner by event-count and storage-size limits.
• No Data Sales: CUBE does not sell optional analytics data or share it for cross-context behavioral advertising.

4. Healthcare Data Privacy (CUBE OneCare)

CUBE OneCare operates under strict data protection protocols for medical practices:

• Strict PHI Segregation: Protected Health Information (PHI) is isolated from commercial and payment rails. No patient medical records, diagnoses, or clinical notes are transmitted to payment processors.
• HIPAA Alignment: Practices using CUBE OneCare maintain administrative, technical, and physical safeguards in compliance with applicable healthcare privacy regulations.

5. Payment Security & PCI Compliance

All credit card, debit card, and contactless payment transactions are processed securely via Stripe's certified PCI-DSS Level 1 infrastructure. CUBE does not collect, process, or store sensitive cardholder data on its own servers.

6. Your Rights & Privacy Requests

Depending on your jurisdiction (including GDPR, CCPA/CPRA, and Wyoming law), you may request access, correction, deletion, restriction or objection concerning information associated with you. Because analytics identifiers are pseudonymous, CUBE may need sufficient information to verify and locate any relevant records.

To submit a privacy inquiry or data subject request, contact our privacy officer at: