Beta Cut Above CMS is in beta with its first customers. It works, it changes weekly, and when something breaks you talk to the person who built it. Tell us what you need. In beta with our first customers. Tell us what you need.
Legal

Privacy policy

What Cut Above collects on this website and in the product, why, where it is kept, who processes it, and your rights.

Last updated 2026-10-17. This policy covers the website cutabove.ai and the Cut Above product at app.cutabove.ai and customer instances. Cut Above ("we") is the data controller for the website and for our own use of the product; for a customer's workspace, the customer is the controller and we are their processor.

On this website

  • Forms. When you request a demo or a trial we collect the details you enter (name, work email, company, phone, team size, industry, message) to respond to you. They are stored in our own Cut Above workspace and used for no other purpose. We do not sell or share them.
  • Analytics. Aggregate page metrics from our hosting provider, without cookies. No advertising trackers and no cookies shared across sites. Your light or dark theme choice is kept in your browser only.
  • Fonts are loaded from Google Fonts, which receives your IP address to serve them.

In the product

  • Account data. Your name, email and role, provided by your workspace administrator's invitation and the way you sign in (Microsoft, Google, or a magic link).
  • Business data your workspace holds (clients, contacts, jobs, time, invoices, documents) belongs to the customer. We process it only to run the service and never for our own purposes.
  • Connected accounts. If you connect Microsoft 365, Google Workspace or another mail host, we access only what you authorise: reading your mailbox to find client correspondence, sending mail as you on your instruction, reading and writing your calendar for deadlines, and reading your contacts for import. Access tokens and any passwords are encrypted with a key unique to each workspace and can be revoked by you at any time under Settings → Connections. Google user data obtained through Google APIs is used only to provide these features, is not transferred to anyone except as necessary to provide them, and is never used for advertising or to train models, in accordance with the Google API Services User Data Policy, including its Limited Use requirements.
  • Falcon. Questions you ask, and the records needed to answer them, are sent to our model provider for inference only. See the AI policy.
  • Meeting notetaker. If your firm turns it on and someone sends it to a call, the call's audio, video, chat and participant names are processed by our recording provider to produce a transcript. We keep the transcript (not the audio) for the period your firm sets, at most 90 days, and the notes made from it. The notetaker announces itself in every call it joins. If you were in a call and want its transcript deleted sooner, ask the firm that invited you; they can delete it at once.
  • Audit log. Actions in the product are recorded with who performed them, for the customer's own compliance.

Where and how long

Each workspace's data is held in the region chosen for it (see subprocessors). Website inquiries are kept until the conversation ends or you ask us to delete them. Product data is retained for as long as the customer's workspace exists and deleted within 30 days of termination on request.

Your rights

Depending on where you are (UAE PDPL, UK/EU GDPR, DIFC, ADGM, CCPA), you may access, correct, export, restrict or delete your personal data, and object to processing. For website data, write to privacy@cutabove.ai. For data in a customer's workspace, contact that customer; we assist them.

Changes

We update this page when our practices change and note the date above. Material changes are announced to workspace administrators.