Privacy policy

What we collect

Account data: your name, email address and organization, managed through our authentication provider WorkOS.

Content you provide: what you teach your Company Brain, the texts you submit for review, the situations you open Flows on, and your training answers. This content belongs to you.

Free Security Check: the URL or draft you submit on the public scan page, and the work email you enter to see the full review.

Lead forms: name, work email, company and team size when you contact us or order a crisis kit.

Newsletter: the email address you enter, the language and the form you used, plus the dates of your signup, your confirmation and your unsubscription. Nothing is sent before you click the confirmation link.

Usage data: aggregated, cookie-free page analytics.

Advertising measurement, only if you accept it in the cookie banner: Meta, LinkedIn Insight Tag and TikTok pixels, which set cookies and report page views, signups and form submissions to those platforms so we can measure our ad campaigns. Refusing keeps the page pixel-free, and you can change your mind at any time from the Cookies link in the footer.

What we use it for

To run the service: reviews, Flows and training drills are produced by AI models processing the content you submit, grounded in your Company Brain.

To reply when you contact us, to deliver a crisis kit you ordered, and to operate your account.

To send the newsletter, if you asked for it and confirmed your address. Every issue carries a one-click way out, and leaving takes effect immediately.

To measure our advertising, if and only if you accepted advertising cookies.

We never sell your data. We never use your content to train shared or third-party models. Your Company Brain is isolated per organization.

Chrome extension

The Cadence Security Check extension reads no page. It installs no script into the sites you visit and does not watch what you type. The only text that passes through it is the text you select and send through the right-click menu, or paste into the panel yourself.

That text is sent to our servers, reviewed by the same models the app uses, and the verdict is returned to you. We keep no server-side copy: the check stays on your machine, in the browser's local storage, limited to your last 20 checks. It enters your organization's history only when you click "Share with the team".

The extension holds an access key issued from your signed-in Cadence account. It never sees your password, and you can revoke the key at any time from the extension page in the app.

This text is never sold, and never used to train shared or third-party models.

Processors

We rely on: Vercel (hosting), Neon (database), WorkOS (authentication), OpenRouter (AI model routing), Stripe (payments), Resend (internal notifications), Slack (only if your organization connects its workspace) and, subject to your consent, Meta, LinkedIn and TikTok for advertising measurement. Each processes data strictly to provide its function.

Your content is stored and processed in the European Union. Both the servers running Cadence and the database holding your workspace are located in Frankfurt, Germany. Account identity (WorkOS), model inference (OpenRouter), payments (Stripe, Ireland and USA) and internal lead notifications (Resend) still involve providers established in the United States: those transfers are covered by the European Commission's standard contractual clauses. A data processing agreement is available on request.

Reviews are produced by large language models reached through OpenRouter. Your content is sent for inference only, under agreements that forbid training on it, and is not used to train shared or third-party models.

Retention

Account and organization data is kept for the life of the account and deleted upon account deletion. Lead and contact data is kept at most 24 months. Free Security Check results are kept at most 12 months.

Newsletter: your address is kept until you unsubscribe. A signup left unconfirmed is erased after 30 days. After you leave, we keep your address flagged as unsubscribed, and nothing else, so that no later import can put you back on the list.

Your rights (GDPR)

You can request access, rectification, erasure or portability of your personal data, and object to or restrict its processing, by writing to cadencecrisis@gmail.com. You can also lodge a complaint with the CNIL (cnil.fr).

Data controller: CADENCE, 11 bis rue de Maubeuge, 75009 Paris, France.

Cookies

Strictly necessary cookies: authentication, and a first-party attribution cookie that records how you first reached the site. These are set without consent, as the law allows.

Analytics: aggregated and cookie-free.

Advertising cookies: Meta, LinkedIn and TikTok pixels, set only after you accept them in the banner, and used to measure our campaigns. Nothing loads if you refuse. You can withdraw consent at any time from the Cookies link in the footer.