Privacy Policy

Last updated: February 28, 2026  ·  Effective date: February 28, 2026

cadence. ("we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect information when you use cadence. at cadence.alen.world.

1. Information We Collect

1.1 Information you provide directly

  • Account information: email address, name, and password when you sign up
  • Profile information: any additional details you add to your profile
  • Project data: all projects, phases, tasks, comments, and files you create in cadence.
  • Communications: emails or messages you send to our support team

1.2 Information collected automatically

  • Usage data: pages visited, features used, and interactions within the app
  • Log data: IP address, browser type, operating system, and timestamps
  • Device data: device type, screen resolution, and settings
  • Cookies and similar technologies: session cookies for authentication, preference cookies for settings, and analytics cookies

2. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve cadence.
  • Process your account registration and authenticate your identity
  • Send transactional emails (account confirmation, password reset)
  • Send product updates and changelog notifications (you may unsubscribe)
  • Respond to support requests
  • Analyze usage patterns to improve product decisions
  • Comply with legal obligations

We do not sell your personal data to third parties. We do not use your project data to train AI models.

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process your data under the following legal bases:

  • Contract performance: processing necessary to provide the cadence. service
  • Legitimate interests: product improvement, security, and fraud prevention
  • Consent: marketing communications (you may withdraw at any time)
  • Legal obligation: compliance with applicable law

4. Data Storage and Security

Your data is stored on servers provided by Supabase, which operates on AWS infrastructure. Data is encrypted at rest using AES-256 and in transit using TLS 1.2 or higher.

We implement industry-standard security practices including:

  • Secure authentication with hashed passwords
  • Role-based access controls
  • Regular security reviews
  • Incident response procedures

No system is completely secure. In the event of a data breach that affects your rights, we will notify you within 72 hours as required by GDPR.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law. Project data is retained for 30 days after account deletion to allow for recovery in the event of accidental deletion.

6. Your Rights (GDPR)

If you are located in the EEA, you have the following rights:

  • Right to access: request a copy of your personal data
  • Right to rectification: correct inaccurate data
  • Right to erasure: request deletion of your personal data
  • Right to portability: receive your data in a machine-readable format
  • Right to restrict processing: limit how we use your data
  • Right to object: object to processing based on legitimate interests
  • Right to withdraw consent: for processing based on consent

To exercise these rights, email: cadence@alen.world. We will respond within 30 days.

7. Cookies

cadence. uses the following cookies:

  • Session cookies: required for authentication. Expire when you close your browser.
  • Preference cookies: remember your theme and settings. Last 12 months.
  • Analytics cookies: Vercel Analytics, which collects anonymized usage data. No personal identifiers are collected by analytics.

You may disable cookies in your browser settings. Disabling session cookies will prevent you from logging in.

8. Third-Party Services

cadence. uses the following third-party services:

  • Supabase: database, authentication, and file storage (supabase.com/privacy)
  • Vercel: hosting and analytics (vercel.com/legal/privacy-policy)
  • Stripe: payment processing (stripe.com/privacy)

Each service has its own privacy policy governing their data practices.

9. International Transfers

cadence. is operated from the European Union. If you access cadence. from outside the EU, your data may be transferred to and processed in countries where data protection laws differ from yours. Where we transfer data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

10. Children's Privacy

cadence. is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the app or sending an email to your registered address. Continued use of cadence. after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or to exercise your rights: