Privacy Policy
Effective Date: February 16, 2026
1. Introduction
Craft and Code LLC ("we," "us," or "our") operates Cadence CX ("the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
We collect information you provide directly to us, including: account information (name, email address, password), content you create within the Service (documents, notes, meeting records, journey maps), and communications with us.
We also automatically collect usage information through Google Analytics, including pages visited, time spent on the Service, and general usage patterns. This helps us understand how users interact with our Service and improve it. You can opt out of Google Analytics tracking at https://tools.google.com/dlpage/gaoptout.
Google OAuth and Calendar Data Collection
When you choose to sign in with Google, we access the following Google user data:
- Basic Profile Information: Your name and email address associated with your Google account
- Google Account Identifier: A unique identifier for your Google account to enable authentication
When you connect your Google Calendar (optional), we access:
- Calendar Events: Event titles, descriptions, dates, times, locations, and attendees
- Calendar Metadata: Calendar names and settings
- Read-Only Access: We only read your calendar data; we do not create, modify, or delete calendar events
We only request the minimum necessary data required for account creation, authentication, and calendar integration features. We do not access your Google Drive files, Gmail, or any other Google services unless explicitly stated.
Chrome Extension Privacy
Our Chrome extension captures only content you explicitly select and syncs it with your CadenceCX workspace using the same security and data handling practices described in this policy.
- We do not track your browsing history or collect URL data unrelated to your explicit actions.
- We do not inject advertisements or sell your browsing data.
- Data is only transmitted when you actively choose to save a task, note, or meeting to your workspace.
3. How We Use Your Information
We use the information we collect to provide, maintain, and improve the Service; process requests; send technical notices; respond to comments; and protect against fraudulent activity.
Use of Google OAuth and Calendar Data
Google user data obtained through OAuth is used exclusively for:
- Account Authentication: Verifying your identity to provide secure access to your account
- Account Creation and Management: Creating and maintaining your user profile within our Service
- Communication: Sending you essential Service-related notifications using your email address
- Meeting Management: Syncing your Google Calendar events into our Meeting Manager feature to help you prepare for meetings, capture notes, and track action items
- Calendar Display: Showing your upcoming meetings in the Service's agenda dropdown and meeting views
We do not use Google data for advertising, marketing to third parties, or any purpose unrelated to providing our core Service functionality. Google data is not shared with third parties except as necessary for Service operation (e.g., our hosting provider Supabase for data storage) or as required by law.
Calendar Data Storage: Calendar event data is stored in our database only for meetings you've explicitly synced or worked with in the Service. We sync calendar data periodically to keep your meeting list up to date.
Revoking Access: You can disconnect your Google Calendar at any time through your account settings in the Service, or by visiting your Google Account permissions at https://myaccount.google.com/permissions. Revoking access will stop calendar synchronization but will not delete meetings you've already worked with in the Service.
Data Retention: Google OAuth data is retained only as long as your account remains active. Upon account deletion, all Google-sourced data is permanently removed from our systems within 30 days.
Google API Services User Data Policy Compliance
CadenceCX's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This means:
- We only use Google user data to provide and improve user-facing features in CadenceCX
- We do not transfer Google user data to third parties except as necessary to provide the Service, comply with applicable law, or as part of a merger or acquisition with user notification
- We do not use or transfer Google user data for serving ads, including retargeting, personalized or interest-based advertising
- We do not allow humans to read Google user data unless: (a) we have your affirmative agreement, (b) it is necessary for security purposes, (c) to comply with applicable law, or (d) the data has been aggregated and anonymized
4. Third-Party AI Services
Our Service includes optional AI-powered features that utilize third-party providers (e.g., OpenAI, Anthropic, Google Gemini). Your content may be processed by these services according to their policies. We do not monetize your data; if you provide your own API keys, they are stored locally in your browser and never transmitted to our servers.
5. We Do Not Sell Your Information
We do not sell, rent, or trade your personal information. Your data is used solely to provide and improve the Service.
6. Data Storage and Security
We use Supabase as our infrastructure provider to store and process your data. Supabase acts as a data processor on our behalf. Your data is stored on Supabase's servers in the United States and is protected with industry-standard security measures, including encryption at rest and in transit.
While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your information while your account is active. You may request account and data deletion at any time by contacting us at support@cadencecx.com. Upon request, we will delete your account and all associated data within 30 days.
8. Your Rights
Depending on your location, you may have rights to access, correct, delete, or export your personal data. To exercise these rights, please contact us at support@cadencecx.com.
9. Communications
By creating an account, you consent to transactional emails and occasional product updates. You can unsubscribe from non-essential emails at any time.
10. Cookies and Tracking
We use essential cookies for session management. We also use Google Analytics to collect information about how visitors use our site, which helps us improve the Service. These cookies are only activated if you provide consent via our cookie banner. We do not use third-party tracking cookies for advertising purposes.
11. Children's Privacy
The Service is not intended for children under 13 years of age.
12. Security Incidents
In the event of a data breach that affects your personal information, we will notify you within 72 hours via email at the address associated with your account. We will provide details about the breach, the types of information affected, and steps you can take to protect yourself.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top. We encourage you to review this Privacy Policy periodically for any changes.
14. Contact Us
For questions about this Privacy Policy, please contact us at:
Email: support@cadencecx.com