Cadence / Legal
Privacy policy
What we collect, why we need it, who can see it, how long we keep it, and the choices and rights you have.
Last updated
Who we are
Cadence (trycadence.me) is operated by Leo, an individual based in Ontario, Canada (“Cadence”, “we”, “us”). This policy explains how we handle personal information when you use the Cadence website and app, and the emails we send about your account. Leo is responsible for Cadence’s privacy practices and acts as its privacy officer. You can reach us at cadence.supports@gmail.com.
In short:
- We collect what is needed to run your account and group projects, and an optional study profile that you can edit or ask us to remove.
- We do not sell personal information, show ads, or use advertising or third-party analytics trackers.
- Assignment and submission text goes to our AI provider only when you use an AI feature. Neither we nor that provider use it to train AI models.
- You can ask us for a copy of your information, to correct it, or to delete your account at any time.
Information we collect
Information you give us
- Account: your name, email address, sign-in method, and any profile picture you add. Passwords are handled by our authentication provider and are never visible to us.
- Study profile (optional): education level, year of study, expected graduation year, country, region, school, subject, goals, group-work experience and workspace preferences. Birthday and academic average are optional within it.
- Project content: assignment briefs and files and the text we extract from them, generated plans and tasks, group nicknames, comments, reactions, private messages, submissions and their files, review decisions and notes, invitation settings and project covers.
- Support: what you send when you contact us.
Information from your teammates
Teammates can add content that mentions you, such as comments, review notes or files, and a leader can assign you tasks or remove you from a project.
Information from Google
If you sign in with Google, we receive your name, email address, profile picture and Google account identifier. If you import a Google Doc into a submission, you choose the document in Google’s picker and we receive only that document, exported as text. We do not store your Google access token.
Information collected automatically
- Sign-in and activity records: your active sessions, the days you sign in (for the login streak), when you accepted our terms and which version, and project and plan-generation activity used to apply monthly allowances.
- Technical data: IP address, browser and device details, and request times. We use IP addresses in short-lived, hashed form to limit abusive traffic. Our hosting and infrastructure providers also keep operational logs.
- Cookies and browser storage: described in “Cookies and browser storage” below. We do not use advertising or analytics cookies.
How we use information
We use personal information only for these purposes. Where a law asks for a legal basis, such as the GDPR, the basis is shown in brackets.
- To provide Cadence: create and secure your account, run your projects, show your team’s work, deliver notifications, generate contribution reports, and remember your preferences (to perform our agreement with you).
- To run the AI features you use: turn briefs into plans, apply plan changes the leader requests, and check submissions (to perform our agreement with you).
- To apply plans and limits: count monthly project generations, including canceled or deleted ones, and apply plan or gift access (to perform our agreement with you).
- To keep Cadence safe: prevent abuse and fraud, enforce our Terms of Use, investigate problems and protect users (our legitimate interest in a secure service).
- To understand and improve Cadence: view aggregate usage statistics and service health in a restricted owner dashboard, and look up individual accounts when needed for support, gifts or abuse cases (our legitimate interest in running and improving the service).
- To communicate with you: send verification codes, password resets and replies to your requests. We do not send marketing email (to perform our agreement with you).
- To meet legal obligations and respond to lawful requests (legal obligation).
Study-profile answers set the workspace defaults you choose and contribute to aggregate statistics. They are never shown to teammates or sent to the AI provider. You can defer the study profile, edit your answers in Cadence, or ask us to remove them by emailing cadence.supports@gmail.com.
AI features
Cadence uses open-weight language models hosted by Cloudflare Workers AI. When you use an AI feature, we send only what that feature needs: the assignment text to create a plan; the plan and the leader’s instruction to change it; or the task and submitted work to check a submission. Cloudflare states that it does not use this content to train AI models. We do not train AI models on your content either.
AI output can be wrong. When a leader turns on submission checks, a passing check marks the task complete automatically. Any other result sends the work to the leader, and you can always ask your leader to review your work directly. AI checks look for basic relevance and completeness. They are not grades and are not used for decisions with legal or similarly significant effects.
Where information is processed
Our providers store and process information in the United States and other countries, which may be outside where you live. Laws there may differ from those in your country, and authorities there may be able to access information under their laws. We rely on our providers’ contractual commitments to protect it, including standard contractual clauses for transfers from the European Economic Area, the United Kingdom and Switzerland where they apply. Quebec residents: we consider the protection this gives before information about you leaves Quebec.
How long we keep information
| Information | How long |
|---|---|
| Account and profile | While your account exists. After you ask us to delete your account, we delete it within 30 days, apart from the exceptions below. |
| Study-profile answers | Until we fulfil your request to remove them or your account is deleted. |
| Project content | Until the project’s leader deletes the project. Its active records are removed and associated files are removed by our cleanup process. |
| Uploads not attached to a project | About three hours. |
| Files from an unsuccessful plan generation | Seven days after the last attempt, or sooner if you remove them. |
| Generation records (without file contents) | Kept to calculate monthly allowances and account history. |
| Sign-in days | The most recent 370 recorded UTC sign-in dates, which may span more than 370 calendar days. |
| Rate-limiting records (hashed) | Used for up to 24 hours. Expired entries are removed during routine cleanup. |
| Usage statistics | Daily totals are pruned after 400 days. Lifetime totals and per-account generation totals are kept for usage history. |
| Service health records | Pruned after 30 days during routine cleanup. |
| Database backups | Retention follows our database provider’s configured backup schedule. Deleted information can remain in a backup until it expires. |
We may keep information longer where the law requires it, or where it is reasonably needed to resolve a dispute, prevent abuse or keep a record of a security incident. When you delete your account, comments and submissions you added to other people’s projects may remain there in de-identified form so your teammates’ records stay complete. Ask us if you want them removed.
How we protect information
We use safeguards suited to the information’s sensitivity. All connections use HTTPS. Files are kept in private storage and opened through short-lived links only after a permission check. Session tokens are stored hashed. Every private request is authenticated and checked against project permissions, and requests are rate-limited. Only authorized operational access is permitted.
No online service is completely secure. If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and report it to the Privacy Commissioner of Canada and other authorities as the law requires.
Your choices and rights
In Cadence you can edit your name, picture, preferences and notification settings; edit your study-profile answers; delete your own comments; delete projects you lead; and sign out on any device you use. To remove study-profile answers, email cadence.supports@gmail.com.
To make any other request, email cadence.supports@gmail.com. You can ask to access a copy of your personal information, receive it in a portable format, correct it, delete your account, withdraw consent, or object to or restrict certain processing. We will verify your identity before acting and reply within 30 days, or sooner where the law requires. If we cannot fully meet a request, for example because the law requires us to keep certain information, we will tell you why. You will not be treated differently for using your rights.
Canada
You have rights under the Personal Information Protection and Electronic Documents Act and, in Quebec, the Act respecting the protection of personal information in the private sector. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, the Commission d’accès à l’information.
European Economic Area, United Kingdom and Switzerland
You have the rights of access, rectification, erasure, restriction, data portability and objection, and you can withdraw consent at any time. You can also complain to your local data protection authority.
California and other U.S. states
Depending on where you live, you may have the right to know, access, correct and delete your personal information, and to opt out of its sale or sharing. Cadence does not sell or share personal information, and uses sensitive information only to provide the service. You can use an authorized agent, and you can appeal a decision by replying to our response. We treat Global Privacy Control signals as an opt-out request. Because we do not track you across other sites, we do not respond differently to Do Not Track signals.
Children, students and schools
Cadence is for people aged 13 or older and is not directed to children under 13. Users under the age of majority where they live need a parent or guardian’s permission. In Quebec, the consent of a parent or tutor is required for users under 14. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has used Cadence, or you are a parent or guardian who wants to review or delete your child’s information, contact cadence.supports@gmail.com and we will act promptly.
Students use Cadence directly. It is not provided on behalf of, or under contract with, a school. A school that wants to use Cadence under its own agreement can contact us.
Google user data
Cadence’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google Doc import uses the “drive.file” permission, so Cadence can open only the document you select. That document’s text is used only for your submission and its check, is never used for advertising, is never used to train AI models, and is not transferred to anyone except as described in this policy.
Changes to this policy
We will update this policy as Cadence changes, and change the date at the top. If a change materially affects how we handle your information, we will tell you in Cadence or by email before it takes effect, and ask you to accept it when you next sign in. Earlier versions are available on request.
Contact
For privacy questions, requests or complaints, contact Cadence’s privacy officer at cadence.supports@gmail.com. You can also contact the authorities listed under “Your choices and rights”.
We’re here to help.