Privacy
Last updated 11 October 2026
This page says what Cue collects about you, why, who else handles it, how long it is kept, and how to have it removed. It covers the Cue app at app.cuehq.co.za, this website, and the review links Cue users send to their clients. It is written to meet South Africa’s Protection of Personal Information Act (POPIA).
Who is responsible
Cue is made by Roman Empire Group (Pty) Ltd, trading as Downstage, 6 Kikuyu Road, Sunninghill, Johannesburg, South Africa. Under POPIA we are the responsible party for the personal information below. Write to hello@downstage.co.za about anything on this page, including to reach our information officer.
What we collect, and why
| What | Why |
|---|---|
| Your account: email address, password (stored only as a hash), your name and your studio’s name | To sign you in, show your name to your crew, and send account emails such as confirmation and password reset. |
| What you put into Cue: productions, scripts, notes and drawings on frames, schedules, call sheets, budgets, shot lists, on-set check-ins, and camera-card manifests (file names, sizes and checksums, not the footage) | That is the product. It is stored so you and the crew you invite can work on it together. |
| Review video you choose to upload | To play it back to you, your crew and the clients you send a link to. |
| Notes from clients on a review link: the name they type and their notes | So you can see who said what. A client does not need an account, and we do not ask them for an email address. |
| Support messages you send from the bubble in the app, with the screen you were on, the app version and your browser’s user-agent string | To answer you and to find the bug you hit. |
| When you joined, and which early-access offer was shown to you | So that whatever you were promised as an early user is honoured later. |
We do not sell personal information or use it for advertising, and Cue has no advertising or tracking scripts.
What never leaves your device
Your raw camera media never leaves your machine. The camera-card tools read and check cards inside your browser. Card dumps and storyboard pictures are kept in your browser’s own storage on that device, and we never see them. Clearing your browser’s site data for app.cuehq.co.za removes them.
Who else handles it
These companies help us run Cue. Each one processes information only to provide its service to us.
- Supabase hosts the database and handles sign-in. Cue’s servers there are in Ireland (EU).
- Mux stores and streams the review video you upload (United States).
- Cloudflare serves this website and the app, and protects them from abuse.
- Google delivers account emails from our mail account, and serves the fonts on this website.
- OpenStreetMap services (Nominatim, Overpass and OpenFreeMap): when you look up a location on a call sheet, the address you typed is sent to them so it can be found on the map.
Some of these are outside South Africa. We use them because they are bound by data-protection laws or agreements that give substantially similar protection to POPIA, as section 72 requires.
How long we keep it
Your account and what you put into Cue are kept while your account exists. Review video is kept until you, or the production’s owner, delete the cut. If you delete your account, everything is removed as described below. Security logs kept by our providers are short-lived and deleted on their own schedules.
Deleting your account
You can delete your account from inside Cue, or by writing to hello@downstage.co.za from the address you signed up with. When you do:
- your sign-in, name and studio details are deleted;
- productions that only you belong to are deleted, and their review video is removed from Mux;
- your place on other people’s productions is removed;
- notes you left on other people’s productions stay with that production without your name, because they are part of someone else’s work.
If you own a production that other people still work on, Cue asks you to hand it over or delete it first, so a crew does not lose its production because one person left.
Your rights
Under POPIA you can ask what personal information we hold about you, ask us to correct or delete it, and object to how we use it. Write to hello@downstage.co.za and we will answer within 30 days. If you are not satisfied, you can complain to the Information Regulator of South Africa at inforegulator.org.za.
Security
Data is encrypted in transit. Inside the database, access is enforced per production with row-level security, so a person sees only the productions they belong to, and a client link opens only the cut it was made for. If you find a security problem, please tell us privately at hello@downstage.co.za before telling anyone else.
Children
Cue is a tool for working film crews and is not meant for anyone under 18.
Changes
If this page changes in a way that affects you, the app will say so before the change applies. The date at the top always shows the latest version.