Privacy Policy
Last Updated: August 2026
1. Our Commitment to Privacy
CUB Suite is designed specifically for regulated healthcare practitioners in British Columbia. Our guiding principle is the "Minimum Necessary" standard — we only collect and process data that is strictly required to deliver our services. We are committed to aligning with the BC Personal Information Protection Act (PIPA) and Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
2. Data We Collect — CUB Line
Practitioner Account Data: When you create a CUB Line account, we collect your name, clinic name, email address, and professional phone number, used solely to operate your CUB Line workspace.
Patient Contact Information: When you initiate an SMS or voice call, the patient's phone number is used exclusively to route that communication through our secure telephony bridge. We do not build patient profiles or use this data for any purpose beyond message delivery.
Communication Records: SMS messages sent and received through your CUB clinic number are stored in our secure database to power your in-app message history. This data is isolated to your account and is never accessible to other practitioners. You may export or delete your message history at any time from within the app.
3. Data We Collect — CUB Launch
Launch does not involve any patient data. We collect only:
Account Data: Your name and email address, used to create your account and grant access to purchased content.
Purchase Records: Your purchase history and tier (e.g., First 50) are stored to verify and maintain your access.
Content Progress: If Launch tracks your progress through lessons or modules, this data is used solely to personalize your own experience and is never shared with other users.
4. Payment Information
Subscription and purchase billing for both CUB Line and CUB Launch is handled entirely by Stripe. CUB Suite never sees or stores your credit card details. We retain only your subscription or purchase status to manage your access to the platform.
5. Third-Party Secure Processors
Supabase: Account data, message history, and Launch content-access records are stored in Supabase, a SOC 2 compliant cloud database hosted on AWS infrastructure with AES-256 encryption at rest.
Twilio (CUB Line only): Patient phone numbers and SMS content are transmitted via TLS-encrypted protocols through Twilio to facilitate communication. Twilio is a globally recognized Tier-1 telephony provider. Twilio is not used by CUB Launch, which involves no patient communication.
Vercel: Our backend infrastructure for both CUB Line and CUB Launch is hosted on Vercel's secure serverless infrastructure, protected by 256-bit SSL/TLS encryption in transit.
Stripe: Payment processing for both services is handled by Stripe, a PCI-DSS Level 1 certified payment processor. CUB Suite does not store payment card data.
6. Security Safeguards
Encryption in Transit: All data transmitted between our apps, our API, and our databases is protected by 256-bit SSL/TLS encryption.
Encryption at Rest: All stored data is encrypted at rest using AES-256 standards.
Access Controls: Your data is protected by Row Level Security policies — our databases are architected so each practitioner can only access their own records. No practitioner can access another's patient communications or another user's Launch account.
No Data Selling: CUB Suite does not, and will never, sell practitioner or patient data to third parties or advertisers.
7. Compliance
CUB Suite is built to support your existing privacy obligations as a BC-based regulated health professional.
BC PIPA: We align with the Personal Information Protection Act (BC), focusing on consent, limited collection, and individual access rights.
PIPEDA: We adhere to Canada's federal privacy framework for commercial activity, including the 10 fair information principles.
CUB Line and CUB Launch are currently available exclusively to practitioners operating within British Columbia.
8. Data Retention and Deletion
You maintain full control over your data.
CUB Line: You may export your complete message history as a CSV file at any time from within the app.
CUB Launch: Your account and purchase records are retained to maintain your lifetime access; deleting your account will not affect a completed purchase but will remove your ability to log in and access content unless a new account is created and re-linked to your purchase.
To request complete account deletion, including all stored communications and practitioner data, contact us at privacy@getcubsuite.com and we will process your request within 30 days.