Your API key:

All requests below will use this key. Your API key is sent directly to api.cueapi.ai and never stored by the docs site.

GET/v1/auth/me/processing

Processing Information

Returns what personal data we process, why, the lawful basis, retention periods, sub-processors, and your rights.

Returns a structured JSON document describing every category of personal data CueAPI processes on the authenticated user, the purpose for each, the lawful basis under GDPR, retention periods, current sub-processors, and the data subject rights available.

This is the GDPR Right to Information endpoint (Article 15). Content is generated from app/gdpr/processing_info.json so updates ship via PR — there is no UI for editing the response.

Request

bash

curl https://api.cueapi.ai/v1/auth/me/processing \
  -H "Authorization: Bearer cue_sk_YOUR_KEY"

Response

json

{
  "schema_version": "1.0",
  "generated_at": "2026-04-19T22:00:00Z",
  "controller": {
    "name": "CueAPI",
    "address": "...",
    "contact_email": "[email protected]"
  },
  "data_types": [
    {
      "category": "Account credentials",
      "data": ["email", "password_hash"],
      "purpose": "Authentication, account recovery",
      "lawful_basis": "Performance of contract (GDPR Art. 6(1)(b))",
      "retention": "Lifetime of account + 30 days after deletion request"
    }
  ],
  "sub_processors": [
    {"name": "Railway", "role": "Hosting", "region": "us-west"},
    {"name": "Stripe", "role": "Payments", "region": "global"},
    {"name": "Resend", "role": "Transactional email", "region": "us"}
  ],
  "your_rights": [
    {"right": "Access", "endpoint": "GET /v1/auth/me/export"},
    {"right": "Erasure", "endpoint": "DELETE /v1/auth/me"},
    {"right": "Rectification", "endpoint": "PATCH /v1/auth/me"}
  ],
  "data_protection_contact": "[email protected]",
  "supervisory_authority": "..."
}

Updating the response

The response shape is stable under schema_version. New data_types or sub_processors rows can be added at any time. Removing rows or renaming fields requires a schema_version bump.

Errors

Status	Code	Cause
401	`not_authenticated`	Missing/invalid bearer token

GET/v1/auth/me/processing

Try it

Enter your API key above to send requests

Previous← Export Personal Data NextCreate Checkout →