CommuniQueue.
Sign in

Privacy Policy

Last updated: August 29, 2026

1. Overview

Battleline Productions LLC ("CommuniQueue", "we", "us") operates a templated messaging platform. This policy explains what personal information we collect, how we use it, and the choices you have. It covers data we handle as a controller (your account information) and data we process as a processor on your behalf (message content and recipient data you send through the service).

2. Information We Collect

  • Account data: name, email, organization, and authentication identifiers.
  • Billing data: subscription and payment metadata (card data is handled by our payment processor, not stored by us).
  • Usage data: logs, API usage, and delivery events (delivered, bounced, complained). Engagement events (opens, clicks) are processed by our email delivery provider (Twilio SendGrid) and stored by CommuniQueue; CommuniQueue no longer operates its own tracking pixel or redirect links.
  • Customer message data: template content and recipient details you submit, processed to deliver your messages.
  • Support data: support-case subjects and messages, workspace and account identifiers, case status, entitlement snapshots, and support-agent actions.

3. How We Use Information

We use information to provide and secure the service, process payments, deliver your messages, provide support, prevent abuse, comply with legal obligations, and improve the platform. We do not sell personal information.

4. Legal Bases (GDPR/UK GDPR)

Where applicable, we rely on the following legal bases: performance of a contract, legitimate interests (securing and improving the service), consent (where required), and compliance with legal obligations. For recipient data you send, you are the controller and are responsible for your lawful basis.

5. Sub-processors

We use trusted service providers to operate the platform. Confirm and keep this list current for your deployment:

  • Stripe - payment processing.
  • Auth0 - authentication and identity.
  • Twilio SendGrid and any customer-configured email providers (Postmark, Mailgun, Amazon SES, etc.) - email delivery.
  • Twilio - SMS delivery, where SMS messaging is enabled for your plan.
  • Amazon Web Services - application hosting.
  • DigitalOcean - managed database hosting.
  • Cloudflare - DNS, and cookieless website analytics.
  • Google - website analytics, and sign-in where you choose to authenticate with a Google account.
  • Microsoft - website analytics (Microsoft Clarity).

6. Data Retention

We retain account data for as long as your account is active and as needed to meet legal obligations. Delivery event and message data are retained according to the retention window configured for your workspace, after which they are purged or aggregated. Support cases and their messages are retained according to the approved support retention policy, subject to legal, security, fraud, dispute, and preservation obligations. Verified privacy requests or account deletion may require removal where no continuing legal basis applies.

Delivery and engagement records are retained for the period attached to your plan, after which a scheduled process removes them: 14 days on Basic, 90 days on Pro, and 365 days on Business. Support cases and account records are retained for the life of the account and then removed on request, subject to the obligations described above.

7. Security

We use administrative, technical, and organizational safeguards to protect personal information, including encryption of sensitive credentials at rest and access controls. No system is perfectly secure; we cannot guarantee absolute security.

8. International Transfers

We and our sub-processors may process data in countries other than yours. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.

9. Your Rights

Depending on where you live, you may have rights to access, correct, delete, or port your personal information, or to object to or restrict certain processing. To exercise these rights, contact us at privacy@battlelineproductions.com. For recipient data you sent through the service, direct requests to the customer that sent the message.

10. Cookies

The application sets strictly necessary cookies, which it needs in order to function and which cannot be switched off: cq_refresh_token (keeps you signed in), cq_csrf (protects against cross-site request forgery), cq_pkce, cq_login_callback and cq_return_url (carry the sign-in exchange and return you to the page you started from), and cq_consent (remembers your answer to the cookie banner so we do not ask again on every visit). These are set as HttpOnly where the browser does not need to read them, are marked Secure in production, and use SameSite=Lax.

We also use analytics cookies on our marketing site and application to understand which pages and features are used: Google Analytics for aggregate usage and event counts, and Microsoft Clarity, which records interaction sessions and produces heatmaps so we can see where a page is confusing. These are not necessary for the service to work, and neither one loads until you accept them. We ask through a banner on your first visit; if you decline, the scripts are never fetched and no analytics cookie is set. You can change your answer at any time through the Cookie settings link in the site footer, and withdrawing consent also deletes the cookies Google and Microsoft had already stored. Clarity is configured to mask text content so that message bodies, recipient addresses and other data you enter are not captured in a recording.

We additionally use Cloudflare Web Analytics for page view counts. It sets no cookies, uses no client-side state, and does not track you across sites or visits, so it runs whether or not you accept analytics cookies.

11. Children

The service is not directed to children and is not intended for use by anyone under the age required by applicable law.

12. Changes & Contact

We may update this policy and will post the updated version with a new effective date. Questions or requests? Contact us at privacy@battlelineproductions.com. Customers requiring a Data Processing Addendum (DPA) may request one at the same address.