Privacy Policy

Last updated: December 2024

Your privacy matters to us. This policy explains what data we collect, how we use it, and your rights regarding your information.

1. Information We Collect

We collect the following types of information:

  • Account information: Name, email address, and profile details you provide when creating an account.
  • Content: Posts, messages, comments, and files you create or upload to Cushion.
  • Usage data: Information about how you use our service, including IP address, browser type, device information, and interaction data.
  • Integration data: When you connect third-party services (like Slack or GitHub), we collect necessary authentication tokens and configuration data to enable those integrations.

2. How We Use Your Information

We use your data to:

  • Provide, maintain, and improve Cushion's services
  • Process transactions and send related information
  • Send notifications, updates, and support messages
  • Power AI features that help you work more effectively
  • Analyse usage patterns to improve our product
  • Ensure security and prevent fraud

We do not sell your personal data.

3. AI and Language Models

Cushion uses artificial intelligence to power features like content suggestions, summaries, and automated workflows. When you use AI features:

  • Your content may be processed by our AI providers (currently OpenAI) to generate responses.
  • We use API configurations that prevent your data from being used to train AI models.
  • AI-processed content is not retained by our providers beyond the immediate request.
  • You can choose not to use AI features, and your core Cushion experience will remain fully functional.

4. Third-Party Integrations

Cushion integrates with third-party services to extend functionality:

  • Slack: When connected, we can send notifications to your Slack workspace. We store workspace and channel identifiers, but do not read or store your Slack messages.
  • GitHub: When connected, we can sync with your repositories. We store repository identifiers and access tokens, but only access data necessary for the integration features you enable.

You can disconnect integrations at any time from your account settings, which will delete associated tokens and configuration data.

5. Data Sharing and Sub-processors

We share data with third-party service providers who help us operate Cushion. These sub-processors are contractually bound to protect your data and only use it as instructed by us.

Our sub-processors include providers for hosting, database services, email delivery, payment processing, analytics, and AI features. For a complete list, see our Sub-processors page.

We may also share data when required by law or to protect our rights and safety.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. When you delete your account, we will delete or anonymise your personal data within 30 days, except where we need to retain it for legal obligations or legitimate business purposes.

7. Data Security

We implement appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and regular security assessments.

8. International Data Transfers

Cushion is based in the United Kingdom. Your data may be transferred to and processed in countries outside your residence, including the United States, where our infrastructure providers are located. We ensure appropriate safeguards are in place for such transfers.

9. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Delete your personal data
  • Export your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent

To exercise these rights, contact us at hey@cushion.so.

10. Cookies and Analytics

We use cookies and similar technologies to maintain sessions and remember preferences. We use PostHog for product analytics to understand how our service is used. You can disable cookies in your browser settings, though this may affect functionality.

11. Changes to This Policy

We may update this policy from time to time. We'll notify you of material changes by posting on our website or emailing you.

12. Contact Us

If you have questions about this privacy policy or our data practices, contact us at hey@cushion.so.

Cushion is operated by Cushion Computing Ltd, a company registered in England and Wales.