Privacy Policy
How we collect, use, and protect your data.
Last updated: August 10, 2026
1. Information We Collect
We collect information you provide directly to us, as well as information generated through your use of our services.
Account Information
- Name and display name
- Email address
- Profile image or avatar URL
- Account creation and last update timestamps
Account and Linked-Provider Information
- Clerk account ID, email address, name, and profile image
- Linked Discord provider ID, when you connect Discord
- Authentication and account status information
Event and Scheduling Data
- Events you create (names, descriptions, dates, times)
- Your availability responses
- Event participation records
- Event invitations
Organization and Group Data
- Organizations you create or join
- Your role and permissions within organizations
- Organization invitations
- Organization settings
Preferences and Settings
- Discord notification preferences
- User interface preferences
- Privacy settings
- Calendar integration settings
Technical and Usage Data
- IP address and approximate location data
- Browser type and version
- Device information
- Session information and authentication tokens
- Request logs, error reports, and other operational data
Cookies and Tracking Technologies
- Strictly Necessary Cookies: Session cookies and authentication tokens required for secure login.
- Functional Storage: Local storage for UI preferences (theme settings).
- Operational telemetry: Request logs and traces used to monitor reliability and diagnose errors.
We do not use non-essential cookies for marketing. You can manage cookies through browser settings, but disabling them will prevent login.
2. How We Use Your Information
Service Delivery
- Create and manage your account through Clerk
- Authenticate you and maintain your session
- Store and synchronize data across devices
- Enable event creation and coordination
- Facilitate organization management
- Generate scheduling suggestions from availability responses
Communication and Notifications
- Send event and organization notifications via Discord
- Deliver technical notices and security alerts
- Communicate about service updates and features
- Respond to support requests
Service Improvement and Analytics
- Analyze usage patterns
- Debug technical issues
- Monitor service performance
- Develop new features
- Conduct security monitoring
AI and Model Training
Cadence does not use personal information or your scheduling content to train AI models.
Data Sharing Within the Platform
- Your profile (name, avatar) visible to organization members
- Availability responses visible to event organizers and participants
- Participation status visible to event attendees
- Your role visible to authorized organization members
Automated Decision-Making
Cadence uses deterministic scheduling calculations to generate time suggestions and availability heatmaps based on your responses. These suggestions are informational only; Cadence does not use them to make decisions about your eligibility, employment, credit, or access to essential services.
Legal and Compliance
- Comply with legal obligations
- Enforce Terms of Service
- Protect rights and prevent fraud
- Investigate policy violations
3. Legal Basis for Processing (GDPR & CCPA)
For Users in the EU/EEA (GDPR)
We process personal information based on:
- Contract Performance: Processing necessary to create and maintain your account
- Legitimate Interests: Service improvement, analytics, security, fraud prevention. Details available upon request.
- Legal Obligation: Compliance with laws and law enforcement requests
For Users in California (CCPA)
California residents have rights under CCPA (see Section 13).
For Users in Other States
Virginia, Colorado, Connecticut, Utah, and Montana residents have similar privacy rights. Same contact methods and response timelines apply.
4. Discord Integration
When you connect Discord, Cadence receives the provider information needed to link your account and deliver notifications. Discord's use of your information is governed by their Privacy Policy. You can revoke access through Discord settings anytime.
5. Third-Party Service Providers
Cadence works with the following service providers:
Clerk
Purpose: Authentication and user management, including account identity, email, profile information, and linked sign-in providers. clerk.com/legal/privacy
Convex (Hosted Service)
Purpose: Hosted real-time database and backend for application data. Cadence uses Convex's cloud service to store and process application data and run backend functions. convex.dev/legal/privacy
Cloudflare
Purpose: Web hosting, content delivery, and application security. cloudflare.com/privacypolicy
Discord
Purpose: Linked account information and event or organization notifications when you choose to connect Discord. discord.com/privacy
Data Processing Agreements
We use provider agreements and data-processing terms where applicable. You can request information about these arrangements by contacting privacy@unknownhost.name.
6. Organization and Event Data Visibility
When You Join an Organization
- Your display name, avatar, and role visible to organization members
- Organization owners can see your role and permissions
When an Event Is Created
- Organization events visible to all organization members
- Private events restricted to invitees only
- Participants see each other's names and availability
When You Leave or Delete Your Account
- Some event or organization records may remain for other participants
- Your profile may be removed or disassociated from shared records
- Your availability responses and account-linked records are removed where supported
- You can request details about deletion by contacting privacy@unknownhost.name
7. Information Sharing
We do not sell or rent personal information. We share data only with:
- Clerk (authentication and user management)
- Convex (database and backend)
- Cloudflare (hosting and content delivery)
- Discord (linked account and notifications)
- You (with explicit consent)
- Legal authorities (as required by law)
8. Data Storage and Retention
Data Location and Backups
Application data is stored in Convex's hosted cloud service. We rely on Convex for infrastructure-level availability and backups, while Cadence handles account and data deletion requests as described in this policy.
Retention Timeline
- Active accounts: Data retained while active
- Deleted accounts: Data is deleted or disassociated through the account-deletion process, subject to provider and legal retention requirements
- Backups and logs: Retained for the periods configured by our providers and as needed for security, recovery, and legal obligations
- Legal hold: Retained as required by law
Account Deletion
When deletion is completed, Cadence removes or disassociates account-linked data where supported by the relevant service:
- Your Cadence profile and account-linked credentials
- Your availability responses
- Calendar tokens and notifications associated with your account
- Shared event or organization records may remain for other participants
9. International Data Transfers
For EU/EEA Users
Your application data may be processed in the regions used by Convex and our other service providers. We support international transfers through:
Legal Safeguards
- Standard Contractual Clauses (SCCs) with relevant service providers
- Binding agreements with each processor
- Regular security audits
Technical Safeguards
- Encryption in transit (TLS 1.2+) and at rest
- Access controls
- Security assessments
Your Rights
- Request transfer safeguard details anytime
- Object to transfers if you believe risk is unacceptable
- Lodge complaint with your data protection authority
- Request data deletion if transfers can't be made compliant
10. Data Security
Security Measures
- TLS encryption for all data in transit
- Clerk authentication and secure session management
- Role-based access controls
- Security monitoring and audit logs
- Regular security patches
Limitations
No method is 100% secure. We cannot guarantee protection against all attacks or breaches. You're responsible for keeping your authentication credentials confidential.
Internal Data Access
- Access is limited according to role and operational need
- Organization data is visible only to authorized members and participants
11. Breach Notification
If we become aware of a security incident involving your personal information, we will investigate it and notify affected users and authorities as required by applicable law.
12. Children's Privacy
Cadence is not intended for users under 13. We don't knowingly collect data from children under 13. If discovered, we'll delete the account and data immediately. Contact privacy@unknownhost.name if you believe we've collected data from a child under 13.
13. Your Rights and How to Exercise Them
Contact privacy@unknownhost.name with your request. Include details to identify your account.
All Users - General Rights
- Access: View your data in account settings
- Update: Modify profile and settings anytime
- Delete Account: Request account and data deletion
- Data Requests: Request access, correction, or deletion of your data
- Revoke Discord Access: Through Discord settings
EU/EEA Users - GDPR Rights
- Rectification: Correct inaccurate data
- Erasure: Request deletion (with exceptions)
- Restrict Processing: Limit how we use your data
- Data Portability: Receive data in machine-readable format
- Object: Opt out of certain processing
- Withdraw Consent: Withdraw optional processing consent
- Lodge Complaint: File with your data protection authority
California Users - CCPA Rights
- Right to Know: Request what data we collect and use
- Right to Delete: Request data deletion
- Right to Opt-Out: Opt out of data sales (we don't sell)
- Right to Correct: Request correction of inaccurate data
- Right to Limit Use: Limit use of sensitive data
- Right to Non-Discrimination: No penalty for exercising rights
- Authorized Agent: Designate agent for requests
Other States (VCDPA, CPA, CTDPA, UCPA, MCDPA)
Virginia, Colorado, Connecticut, Utah, and Montana residents have similar rights to CCPA.
We will respond to verified requests within the time required by applicable law. We may request identity verification, charge fees where permitted by law, and explain any denial.
14. Changes to This Policy
We may update this policy from time to time. Material changes will be posted on this page with an updated effective date, and we will provide additional notice where required by law.
15. Dispute Resolution and Governing Law
Internal Resolution Process
Contact privacy@unknownhost.name with details. We'll review your request and:
- Verify your identity where reasonably necessary
- Investigate and respond as required by applicable law
- Propose remedial action if needed
- Provide info about escalation options
Governing Law
Governed by US law and Indiana state law (except GDPR applies to EU/EEA residents).
16. Contact Us
Primary Contact
- Email: privacy@unknownhost.name
Data Protection Authorities - EU/EEA
If you've exhausted our internal process, lodge a complaint with your data protection authority:
California Attorney General
California residents can contact the California Attorney General's Consumer Protection Division at oag.ca.gov/privacy.
18. Acknowledgment
By using Cadence, you acknowledge that you have read this policy and understand our privacy practices. If you disagree with any part, you should not use Cadence.
We will respond to all inquiries as specified and will do our best to resolve any concerns you may have.