Cadenzova DecisionsPrivacy Policy
Last updated August 18, 2026
This Privacy Policy explains what information Cadenzova Decisions ("the Service," "we," "us") collects, why, and how it's used. It's written to describe what the Service actually does — not a generic template — so if something here looks vague, ask us at decisions@cadenzova.com and we'll clarify it.
1. Information we collect
Account information
When you sign up, we collect your email address and, if you sign in with Google, the basic profile information Google provides (name, email, avatar). Authentication is handled by Supabase; we never see or store your password in plain text.
Decision content
Everything you record — the text you type, voice recordings you capture, screenshots you import, and the structured reason, alternatives, chosen approach, expected outcome, status, and review notes derived from them. This is the core of the Service and is stored so you (and your teammates, for a business space) can search, review, and ask questions against it later.
Team and billing information
If you create or join a business space: teammate email addresses and roles, invite records, and (for paid plans) your Stripe customer and subscription identifiers. We do not receive or store your payment card details — those go directly to Stripe.
Cadenzova connection data
If you connect a business space to a Cadenzova account (optional, and initiated by you), we receive decision-relevant activity signals from that account — for example, a platform being connected or disconnected — which appear as pending items for you to review before anything is turned into a recorded decision. Nothing from Cadenzova is captured automatically without you seeing it first. We also make a limited summary of your recorded decisions available back to Cadenzova, scoped to the account you connected and only when it's queried from within that Cadenzova session.
Usage and device information
We use Google Analytics, Microsoft Clarity, and Vercel Analytics to understand how the Service is used — pages visited, general usage patterns, and (via Clarity) session behavior such as clicks and scrolling. These tools may set cookies or use similar device identifiers. We don't use them to build advertising profiles, and we don't sell any information they collect.
Brand & business account notes
The optional "Brand & business accounts" feature in Settings stores whatever you choose to enter about where a business space's services live and how you sign in to them (for example, "GitHub, signed in with Google"). We ask you not to store passwords, API keys, or other secrets there, and the feature is designed only to hold references and notes — never credentials.
2. How we use your information
- To provide the Service — storing and retrieving your decisions, running search and AI synthesis over them, and sending you the emails described below.
- To process what you submit through AI models (see "AI processing" below) that structure your input, detect related or contradicting decisions, and answer your questions grounded in your own history.
- To send transactional email: weekly digests, review reminders, auto-detected outcome notifications, and team invites. Each of these can be turned off individually — weekly digests and outcome notifications from your Team settings, or with the one-click unsubscribe link included in every such email; review reminders follow the same preference.
- To process payments and manage subscriptions through Stripe.
- To maintain the security and reliability of the Service, including detecting abuse.
- To understand aggregate usage patterns and improve the Service, via the analytics tools listed above.
3. AI processing
Structuring a decision, proposing links between decisions, answering questions, generating weekly digests, and (on Business and Agency plans) auto-detecting outcomes all involve sending relevant text — what you typed or a transcription of what you said — to Anthropic's Claude models. Voice recordings are transcribed using OpenAI's Whisper, and decision text is converted to embeddings (a numeric representation used for search) using an OpenAI embedding model. These providers process the data to generate their response; we don't permit them to use your content to train their own models beyond what's necessary to provide that response, consistent with their respective business/API terms.
4. Who we share information with
We share information only with the service providers necessary to operate the Service, and only for that purpose:
- Supabase — authentication and database hosting (our primary data store).
- Anthropic and OpenAI — AI processing described above.
- Stripe — payment processing and subscription management.
- Resend — sending transactional email on our behalf.
- Google Analytics, Microsoft Clarity, and Vercel Analytics — usage analytics, described above.
- Cadenzova — only if and to the extent you connect a business space to a Cadenzova account, as described in "Cadenzova connection data" above.
We do not sell your personal information, and we do not share your decision content with anyone outside your own account/space except as described here or with your explicit direction (for example, a white-label report you choose to generate and hand to a client on the Agency plan).
We may also disclose information if required by law, to protect the rights and safety of Cadenzova or our users, or in connection with a merger, acquisition, or sale of assets — in which case we'll make reasonable efforts to notify you.
5. International data transfers
Our primary database is hosted in the EU. Several of the service providers listed above (including Anthropic, OpenAI, Stripe, and our analytics providers) process data in the United States or other countries outside your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for these transfers.
6. Data retention
We retain your account and decision content for as long as your account is active. If you delete your account, we delete your personal data and decision content within a reasonable period, except where we're required to retain certain records (for example, billing records) for legal or accounting purposes. Removing a teammate from a business space does not delete decisions they authored — those remain part of the space's record.
7. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can access and edit most of your data directly in the Service. For anything else — including a full export or account deletion — contact us at decisions@cadenzova.com and we'll respond within a reasonable timeframe.
8. Cookies and local storage
The Service stores your authentication session in your browser's local storage so you stay signed in, and (if you belong to more than one account) which account you last selected. These are strictly necessary for the Service to function and aren't used for tracking. The analytics tools described above may separately set their own cookies or device identifiers, consistent with each provider's own practices.
9. Children's privacy
The Service isn't directed at anyone under 18, and we don't knowingly collect personal information from children. If you believe a child has provided us information, contact us and we'll remove it.
10. Changes to this policy
We may update this Privacy Policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you directly.
11. Contact
Questions about this policy or your data? Reach us at decisions@cadenzova.com.