Security
How we protect your account and your show data.
StandbyCue runs live shows, so the safety and availability of your data matter to us as much as they do to you. Here's how it works in plain terms.
Encryption in transit
All traffic between you and StandbyCue runs over HTTPS/TLS. Your rundowns, live state and uploads are never sent in the clear.
Where your data lives
Your content is stored in a managed PostgreSQL database (Supabase), with the app and APIs running on Vercel's infrastructure. Both are established providers with encryption at rest. The exact services we rely on are listed on our Sub-processors page.
Row-level access control
Every row in our database is protected by PostgreSQL Row-Level Security. You only ever see data for the teams, events and rundowns you're a member of — that's enforced at the database, not just in the UI. Granular roles (owner, admin, show caller, editor, viewer) and per-column permissions control who can do what.
Authentication
Passwords are hashed by our authentication provider — we never see or store them in plain text. You can sign in with a password or a magic link, enable two-factor authentication (2FA), and new accounts confirm their email before first use.
Payments
Billing is handled by Lemon Squeezy, our Merchant of Record. Card details never touch StandbyCue — they go straight to the payment processor.
Your data is yours
You can export everything you hold (PDF / CSV) at any time, and delete your account and data whenever you want — no lock-in. We do not sell your data or use it for advertising. See our Privacy Policy for your full GDPR rights.
Reliability
For live-show software, uptime is everything. You can check the service in real time on our status page. The live engine autosaves continuously, mirrors state across every screen, and has a safety auto-end so a forgotten live session can't run forever.
Reporting a vulnerability
Found something? Please email hello@standbycue.app and we'll respond quickly. We appreciate responsible disclosure.
StandbyCue is operated by Steinskog Apps (org. no. 921 660 650), Norway, and is subject to the GDPR.