Privacy Policy

Who’s responsible

For our website and for the businesses that use Cadence, we decide how information is used, and this policy applies.

For the clients of a business who join its app, the business decides how their information is used, and Cadence handles it on the business’s behalf. If you’re a client, the business’s own privacy policy applies too, and the business is the best place to start with questions or requests. You can also contact us.

What we collect from businesses

• Your name, work email, business name and website, and your mobile number if you give it to us.
• What you build: your app’s design, logo, photos, services, prices, offers and rewards.
• What we read from your public website when you use Import from your website, or when we prepare a demo app for you: services, prices, hours, contact details, logo and photos.
• Your plan, its status and your payment history. Card details go straight to Stripe; we never see or store your full card number.
• The messages you send us.

What we collect about a business’s clients

• Your first and last name, email, mobile number and birthday (month and day only), when you join the business’s app. We email you a code to check the email is yours, and again when you sign in on a new phone.
• Whether you agreed to receive offers from the business.
• If you turn on notifications, the details your phone or browser’s notification service gives us to deliver them.
• Your points, rewards, visits and other activity the business records in its app.
• If the business brings in its client list: the name, mobile number, email, last visit and last treatment the business gives us, so its app knows when you’re due and recognizes you when you join.
• The messages you send the business in its app’s chat.

A business accepts our Client Data Agreement before it brings in its client list.

What we collect from visitors

• What you send us through our forms.
• Basic usage information: pages viewed, device and browser type, approximate location from your IP address, and how you found us.
• Cookies, explained below.

How we use it

• To run Cadence: create and secure accounts, send sign-in codes, build and publish apps, deliver notifications, and keep points and rewards up to date.
• To bill businesses for their plans and send receipts, through Stripe.
• To answer questions and support businesses.
• To follow up with businesses that asked about Cadence or signed up. You can unsubscribe at any time.
• To understand how our website and dashboard are used, so we can improve them.
• To keep Cadence safe, prevent fraud and abuse, and meet our legal obligations.

We don’t sell personal information. We don’t use a business’s clients’ information for our own marketing, and we never share one business’s clients with another.

Text messages: we text a sign-in code only when you ask for one by entering your mobile number. Message and data rates may apply; reply STOP to stop texts or HELP for help. We never share or sell mobile numbers or text-message consent to anyone for their own marketing.

Who we share it with

We use trusted service providers to run Cadence. They may only use information to provide their service to us:

• Supabase, our database (Canada, in Montréal)
• Vercel, which hosts our website, dashboard and apps (United States and other regions)
• Resend, which sends our emails, such as sign-in codes (United States)
• Twilio, which sends our text messages, such as sign-in codes (United States)
• Stripe, for billing and payments (Canada and the United States)
• PostHog, for website analytics (United States)
• Anthropic, which reads the text of a business’s public website for Import from your website, and, when a business turns on its chat assistant, reads the messages its clients send in the app’s chat, with their first name, to answer them (United States). It doesn’t use them to train its models.
• Apple, Google, Mozilla and Microsoft, which deliver notifications to phones and browsers

We may also share information if the law requires it, to protect our rights or someone’s safety, or as part of a sale or reorganization of our business, with this policy still applying.

Where it’s stored

Our database, which holds business accounts and clients’ information, is in Canada, in Montréal. Some of our service providers are in the United States, so information can be processed there while we run Cadence, and may be subject to the laws of that country.

How long we keep it

• Business accounts: while the account is open, and for 90 days after a plan ends or the account is closed. Then we delete them.
• Clients’ information: for as long as the business keeps it in Cadence, and no longer than 90 days after the business’s plan ends.
• Questions and requests about Cadence: up to 2 years after we last heard from you.
• Billing records: as long as tax law requires.

Cookies

We use cookies only to make Cadence work and to understand how it’s used. We don’t use advertising cookies.

• Keeping businesses and our team signed in to the dashboard.
• Keeping a client signed in to the app they joined.
• Remembering settings, like light or dark mode.
• Website analytics (PostHog).

You can block cookies in your browser, but Cadence won’t work properly without the ones that keep you signed in.

Your choices and rights

• Ask for a copy of your information, or ask us to correct or delete it.
• Withdraw your consent, for example to offers or follow-ups. Some features may then stop working for you.
• Unsubscribe from our emails with the link in any of them.
• Turn off notifications in your phone’s settings. Clients can also ask the business to stop sending offers.

Email hello@cadencerewards.com and we’ll answer within 30 days. If you’re a client of a business, we may pass your request to that business.

Security

We protect information with encryption in transit, signed sign-in codes and sessions, restricted access for our team, and checks on everything Cadence fetches from the web. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we’ll tell you and the Privacy Commissioner of Canada, as the law requires.

Children

Cadence is meant for adults. Businesses shouldn’t invite children to join their app, and we don’t knowingly collect information from children.

Changes

We’ll post any changes here and update the date at the top. If a change matters, we’ll tell businesses by email first.

Contact

Our Privacy Officer is responsible for this policy: Privacy Officer, Hauer Studios Inc., hello@cadencerewards.com. If you’re not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.