Privacy Policy

How we collect, use, and protect your data.

Last updated: August 10, 2026

1. Information We Collect

We collect information you provide directly to us, as well as information generated through your use of our services.

Account Information

  • Name and display name
  • Email address
  • Profile image or avatar URL
  • Account creation and last update timestamps

Account and Linked-Provider Information

  • Clerk account ID, email address, name, and profile image
  • Linked Discord provider ID, when you connect Discord
  • Authentication and account status information

Event and Scheduling Data

  • Events you create (names, descriptions, dates, times)
  • Your availability responses
  • Event participation records
  • Event invitations

Organization and Group Data

  • Organizations you create or join
  • Your role and permissions within organizations
  • Organization invitations
  • Organization settings

Preferences and Settings

  • Discord notification preferences
  • User interface preferences
  • Privacy settings
  • Calendar integration settings

Technical and Usage Data

  • IP address and approximate location data
  • Browser type and version
  • Device information
  • Session information and authentication tokens
  • Request logs, error reports, and other operational data

Cookies and Tracking Technologies

  • Strictly Necessary Cookies: Session cookies and authentication tokens required for secure login.
  • Functional Storage: Local storage for UI preferences (theme settings).
  • Operational telemetry: Request logs and traces used to monitor reliability and diagnose errors.

We do not use non-essential cookies for marketing. You can manage cookies through browser settings, but disabling them will prevent login.

2. How We Use Your Information

Service Delivery

  • Create and manage your account through Clerk
  • Authenticate you and maintain your session
  • Store and synchronize data across devices
  • Enable event creation and coordination
  • Facilitate organization management
  • Generate scheduling suggestions from availability responses

Communication and Notifications

  • Send event and organization notifications via Discord
  • Deliver technical notices and security alerts
  • Communicate about service updates and features
  • Respond to support requests

Service Improvement and Analytics

  • Analyze usage patterns
  • Debug technical issues
  • Monitor service performance
  • Develop new features
  • Conduct security monitoring

AI and Model Training

Cadence does not use personal information or your scheduling content to train AI models.

Data Sharing Within the Platform

  • Your profile (name, avatar) visible to organization members
  • Availability responses visible to event organizers and participants
  • Participation status visible to event attendees
  • Your role visible to authorized organization members

Automated Decision-Making

Cadence uses deterministic scheduling calculations to generate time suggestions and availability heatmaps based on your responses. These suggestions are informational only; Cadence does not use them to make decisions about your eligibility, employment, credit, or access to essential services.

Legal and Compliance

  • Comply with legal obligations
  • Enforce Terms of Service
  • Protect rights and prevent fraud
  • Investigate policy violations

3. Legal Basis for Processing (GDPR & CCPA)

For Users in the EU/EEA (GDPR)

We process personal information based on:

  • Contract Performance: Processing necessary to create and maintain your account
  • Legitimate Interests: Service improvement, analytics, security, fraud prevention. Details available upon request.
  • Legal Obligation: Compliance with laws and law enforcement requests

For Users in California (CCPA)

California residents have rights under CCPA (see Section 13).

For Users in Other States

Virginia, Colorado, Connecticut, Utah, and Montana residents have similar privacy rights. Same contact methods and response timelines apply.

4. Discord Integration

When you connect Discord, Cadence receives the provider information needed to link your account and deliver notifications. Discord's use of your information is governed by their Privacy Policy. You can revoke access through Discord settings anytime.

5. Third-Party Service Providers

Cadence works with the following service providers:

Clerk

Purpose: Authentication and user management, including account identity, email, profile information, and linked sign-in providers. clerk.com/legal/privacy

Convex (Hosted Service)

Purpose: Hosted real-time database and backend for application data. Cadence uses Convex's cloud service to store and process application data and run backend functions. convex.dev/legal/privacy

Cloudflare

Purpose: Web hosting, content delivery, and application security. cloudflare.com/privacypolicy

Discord

Purpose: Linked account information and event or organization notifications when you choose to connect Discord. discord.com/privacy

Data Processing Agreements

We use provider agreements and data-processing terms where applicable. You can request information about these arrangements by contacting privacy@unknownhost.name.

6. Organization and Event Data Visibility

When You Join an Organization

  • Your display name, avatar, and role visible to organization members
  • Organization owners can see your role and permissions

When an Event Is Created

  • Organization events visible to all organization members
  • Private events restricted to invitees only
  • Participants see each other's names and availability

When You Leave or Delete Your Account

  • Some event or organization records may remain for other participants
  • Your profile may be removed or disassociated from shared records
  • Your availability responses and account-linked records are removed where supported
  • You can request details about deletion by contacting privacy@unknownhost.name

7. Information Sharing

We do not sell or rent personal information. We share data only with:

  • Clerk (authentication and user management)
  • Convex (database and backend)
  • Cloudflare (hosting and content delivery)
  • Discord (linked account and notifications)
  • You (with explicit consent)
  • Legal authorities (as required by law)

8. Data Storage and Retention

Data Location and Backups

Application data is stored in Convex's hosted cloud service. We rely on Convex for infrastructure-level availability and backups, while Cadence handles account and data deletion requests as described in this policy.

Retention Timeline

  • Active accounts: Data retained while active
  • Deleted accounts: Data is deleted or disassociated through the account-deletion process, subject to provider and legal retention requirements
  • Backups and logs: Retained for the periods configured by our providers and as needed for security, recovery, and legal obligations
  • Legal hold: Retained as required by law

Account Deletion

When deletion is completed, Cadence removes or disassociates account-linked data where supported by the relevant service:

  • Your Cadence profile and account-linked credentials
  • Your availability responses
  • Calendar tokens and notifications associated with your account
  • Shared event or organization records may remain for other participants

9. International Data Transfers

For EU/EEA Users

Your application data may be processed in the regions used by Convex and our other service providers. We support international transfers through:

Legal Safeguards

  • Standard Contractual Clauses (SCCs) with relevant service providers
  • Binding agreements with each processor
  • Regular security audits

Technical Safeguards

  • Encryption in transit (TLS 1.2+) and at rest
  • Access controls
  • Security assessments

Your Rights

  • Request transfer safeguard details anytime
  • Object to transfers if you believe risk is unacceptable
  • Lodge complaint with your data protection authority
  • Request data deletion if transfers can't be made compliant

10. Data Security

Security Measures

  • TLS encryption for all data in transit
  • Clerk authentication and secure session management
  • Role-based access controls
  • Security monitoring and audit logs
  • Regular security patches

Limitations

No method is 100% secure. We cannot guarantee protection against all attacks or breaches. You're responsible for keeping your authentication credentials confidential.

Internal Data Access

  • Access is limited according to role and operational need
  • Organization data is visible only to authorized members and participants

11. Breach Notification

If we become aware of a security incident involving your personal information, we will investigate it and notify affected users and authorities as required by applicable law.

12. Children's Privacy

Cadence is not intended for users under 13. We don't knowingly collect data from children under 13. If discovered, we'll delete the account and data immediately. Contact privacy@unknownhost.name if you believe we've collected data from a child under 13.

13. Your Rights and How to Exercise Them

Contact privacy@unknownhost.name with your request. Include details to identify your account.

All Users - General Rights

  • Access: View your data in account settings
  • Update: Modify profile and settings anytime
  • Delete Account: Request account and data deletion
  • Data Requests: Request access, correction, or deletion of your data
  • Revoke Discord Access: Through Discord settings

EU/EEA Users - GDPR Rights

  • Rectification: Correct inaccurate data
  • Erasure: Request deletion (with exceptions)
  • Restrict Processing: Limit how we use your data
  • Data Portability: Receive data in machine-readable format
  • Object: Opt out of certain processing
  • Withdraw Consent: Withdraw optional processing consent
  • Lodge Complaint: File with your data protection authority

California Users - CCPA Rights

  • Right to Know: Request what data we collect and use
  • Right to Delete: Request data deletion
  • Right to Opt-Out: Opt out of data sales (we don't sell)
  • Right to Correct: Request correction of inaccurate data
  • Right to Limit Use: Limit use of sensitive data
  • Right to Non-Discrimination: No penalty for exercising rights
  • Authorized Agent: Designate agent for requests

Other States (VCDPA, CPA, CTDPA, UCPA, MCDPA)

Virginia, Colorado, Connecticut, Utah, and Montana residents have similar rights to CCPA.

We will respond to verified requests within the time required by applicable law. We may request identity verification, charge fees where permitted by law, and explain any denial.

14. Changes to This Policy

We may update this policy from time to time. Material changes will be posted on this page with an updated effective date, and we will provide additional notice where required by law.

15. Dispute Resolution and Governing Law

Internal Resolution Process

Contact privacy@unknownhost.name with details. We'll review your request and:

  • Verify your identity where reasonably necessary
  • Investigate and respond as required by applicable law
  • Propose remedial action if needed
  • Provide info about escalation options

Governing Law

Governed by US law and Indiana state law (except GDPR applies to EU/EEA residents).

16. Contact Us

Primary Contact

Data Protection Authorities - EU/EEA

If you've exhausted our internal process, lodge a complaint with your data protection authority:

California Attorney General

California residents can contact the California Attorney General's Consumer Protection Division at oag.ca.gov/privacy.

18. Acknowledgment

By using Cadence, you acknowledge that you have read this policy and understand our privacy practices. If you disagree with any part, you should not use Cadence.

We will respond to all inquiries as specified and will do our best to resolve any concerns you may have.