Privacy Policy

ConfirmCue is a product of Broadmill Software LLC (“we”, “us”). This policy covers three groups of people:

• Visitors to our website, including people who ask for a demo;
• Users: the people at a business who use ConfirmCue;
• Customers of those businesses, who get appointment texts and emails.

For visitors and users, we decide how information is used. For customers, the business decides: we handle their information only on the business’s behalf and on its instructions (our Data Processing Addendum). If you are a customer, the business that texted you is the best place to start; we help it answer you.

Visitors. What you type in the “Request a demo” form (name, business, email, phone if you give it, a few answers and a message). Our servers see your IP address and browser for each request; we use a scrambled form of the IP address to limit how often a form can be sent.

Users. Name, email address and a scrambled form of the password (never the password itself); two-step sign-in settings; the devices and IP addresses of your sign-ins; the phone number you add for alerts; the browsers you turn notifications on for; and what you do in the app that changes something (the activity log your business sees).

Businesses. Business name, phone, email, logo, time zone and settings. To set up texting: legal name, tax number (EIN), address, website and contact person, which the phone carriers require. Billing details are handled by our payment provider; we never see full card numbers.

Customers. What the business gives us or keeps in its connected calendar: name, mobile number, email, the appointment (time, type, address, who is coming, notes), whether and how they agreed to texts, the messages sent to them, their answers and texts, whether they asked to stop texts, and when they opened their appointment page.

When a user connects a Google Calendar, ConfirmCue asks Google for two permissions: to see the list of their calendars, and to see and change events. With them we:

• read the events of the calendars the user chooses (title, time, place, description, guests’ names and emails) to find appointments and the customer’s contact details;
• create events for appointments added in ConfirmCue, without inviting anyone;
• add or change a short mark (like ✅) at the start of an appointment’s title when the customer answers, and move or update the events the app created when the appointment changes.

We use this data only to provide these features. We do not use it for advertising, do not sell it, do not use it to train AI models, and no person at ConfirmCue reads it, unless the business asks us to for support, or it is needed for security or the law. We keep the access keys encrypted. Disconnecting in Settings → Calendar or in your Google account stops our access.

ConfirmCue’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Read the Google API Services User Data Policy.

• To run ConfirmCue: read appointments, plan and send messages, take answers, alert the team.
• To answer demo requests and support questions.
• To keep accounts and the service secure, and to stop abuse.
• To bill businesses and keep the records the law requires.
• To improve ConfirmCue, using counts that name no business or person (for example, how many reminders were confirmed).

Customers get texts only from businesses they agreed to hear from, only about their appointments. Each text can be stopped by replying STOP. The SMS Terms explain how often texts come, what they cost and how STOP and HELP work.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging opt-in data and consent are never shared with any third party.

We never sell personal information. We share it only:

• with the companies that help us run ConfirmCue (hosting, database, texts, email, payments, error reports), each for its own job and bound to protect it. The list, with what each one does: Subprocessors;
• within a business: a customer’s answers and texts go to the business that texted them;
• when the law requires it, or to protect people from harm or the service from abuse;
• with a company that takes over ConfirmCue, which must keep the promises in this policy.

Notifications to a user’s browser pass through the browser maker’s push service (Apple, Google or Mozilla) in encrypted form, which they cannot read.

We use only the cookies the service needs. No analytics, advertising or tracking cookies, so there is no cookie banner. Our website and the appointment pages customers open set no cookies at all. Inside ConfirmCue:

• Signing in: keeps you signed in on that device (only until you close the browser if you did not ask us to remember you), keeps your place for a few minutes while you enter a two-step sign-in code, and, if you choose, remembers a trusted device so it asks for the code less often;
• Connecting a Google Calendar: a short-lived one while Google’s sign-in page is open;
• After a change: a short-lived one that carries a note like “Customer added.” to the next page;
• Light or dark screens: if you choose one, it is remembered on that device.

Our own team has one more, which lets it see the website while it is closed to visitors.

• While a business’s account is open, we keep its data so the business can see its history. The business can remove customers and their appointments at any time.
• When a business closes its account, we delete its data within 30 days, and from our backups within 35 more days.
• A stop request (STOP) is kept for as long as the business’s account is open, so that the number is never texted again by mistake.
• Demo requests are kept as long as needed to answer and follow up, and deleted on request.
• Billing records are kept as long as tax law requires.

Data is encrypted on its way to and from ConfirmCue and where it is stored. Each business’s data is kept apart from every other’s. Owners use two-step sign-in, the keys to connected calendars are encrypted, and our logs leave out phone numbers and message words. Changes are recorded in each business’s activity log. No system is perfect: if a breach affects your information, we tell you and the business without undue delay.

• Users can see and change their details in the app, and ask us for a copy or for deletion.
• Businesses can export their data, or one customer’s data, and close their account, in the app (Settings → Your data).
• Customers can reply STOP to stop texts, and ask the business (or us) to see, correct or delete their information. When you write to us, we pass your request to the business and help it answer.

Write to support@confirmcue.com. We answer within 30 days, may need to confirm who you are first, and never treat you differently for asking. Depending on your state, you may have more rights under its privacy law; we honor them.

ConfirmCue is for businesses and is not meant for children. Users must be at least 18. We do not knowingly collect information from children under 13; if you think we have, tell us and we delete it.

ConfirmCue serves businesses in the United States, and their data is stored and handled in the United States.

When we change this policy, we update the date at the top. For an important change we email account owners at least 30 days before it takes effect.

ConfirmCue is a product of Broadmill Software LLC, a Virginia limited liability company. Write to us at support@confirmcue.com.

Mailing address: 8401 Mayland Dr #11999, Richmond, VA 23294, USA