Privacy Policy

What Cadence collects, why, who else touches it, and how to get it back or get rid of it.

Last updated 5 September 2026.

Cadence is operated by Marketing & Technology (16663885 Canada Inc.), 326 East 34th Street, Hamilton, Ontario L8V 3X3, Canada. We are the organisation responsible for the personal information described here. You can reach us at mat@marketingtech.ca about anything on this page.

This policy is written to be read. Where a thing is genuinely a trade-off, we say so rather than hiding it in a defined term.

What Cadence is

Cadence plans, writes, illustrates, publishes and measures marketing for a business, and holds every piece for a named person's approval before it goes anywhere. To do that it connects to accounts you already own — your website, your analytics, your email list — and acts inside them on your instruction.

What we collect

Information you give us

Your account — name, email address, and a password (stored only as a cryptographic hash; we never see it).
Your business — company name, website address, the services you offer, who your customers are, your brand voice, and anything you tell us never to claim. You give us this during setup and can change it at any time.
Billing details — handled entirely by Stripe. Card numbers never reach our systems and we cannot see them. We store your subscription status and Stripe's identifier for you.

Information from accounts you connect

Only after you explicitly connect them, and only what the work needs:

Google Analytics — visit and traffic figures for your own site. Read only.
Google Search Console — the search queries and rankings your site earns. Read only.
Google Ads and Meta Ads — spend and campaign performance. Read only, permanently. Cadence analyses your advertising and writes recommendations for a person to act on. It cannot spend your budget or change a campaign, and this is enforced in the software, not just promised here.
WordPress — permission to publish articles and upload images to your own site.
Mailchimp and social platforms — permission to send or post the things you have approved, and to read back how they performed.

Information created by using Cadence

The content the system drafts for you, and every version of it.
A record of who approved what, when, and what changed — kept deliberately, so "why does our website say this" always has an answer.
Ordinary technical logs: IP address, browser type, timestamps, errors.

What we never hold. Cadence never stores the passwords or access tokens for the accounts you connect. Those are held by our integration provider (Nango), and our software asks it to make calls on your behalf. This is deliberate: the fewer places a credential exists, the fewer places it can leak from.

Why we use it, and on what legal basis

What for	Basis
Running the service you asked for — planning, writing, publishing, measuring	Performing our contract with you
Billing and account administration	Performing our contract; legal obligation for tax records
Keeping the service secure, diagnosing faults	Our legitimate interest in a working, safe product
Connecting to your own platform accounts	Your consent, given per platform, withdrawable at any time
Product emails you can turn off	Your consent

We do not sell your personal information, and we never have. We do not share it with advertisers, and we do not use your business data to train anyone's AI models — see below.

Artificial intelligence, specifically

Cadence uses third-party AI models to draft text and generate images. Your brand profile and your content are sent to those providers so they can do the work.

We use these providers under commercial terms that prohibit training their models on our customers' data.
We send what the task needs and no more. Your analytics figures are summarised into findings before they reach a model; the raw data is not sent.
Nothing a model produces is published anywhere until a named person at your business approves it.

Who else touches your data

We use a small number of service providers. Each one only receives what it needs to do its job.

Provider	What it does	Where
Supabase	Database, sign-in, file storage	Canada / United States
Vercel	Hosting the application	United States
Nango	Holds the credentials for the accounts you connect	United States / EU
Anthropic	Writing content	United States
OpenAI	Generating images	United States
Stripe	Payments	United States / Canada

This means your information is processed outside Canada, including in the United States, where it may be accessible to courts and authorities under the laws of those countries. We use providers that offer contractual protections for international transfers, but we would rather state the position plainly than imply the data never leaves.

We will also disclose information if the law genuinely requires it, or to protect someone's safety. If we are compelled to hand over your data, we will tell you unless we are legally barred from doing so.

Google user data

Cadence's use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

We use Google data only to provide and improve the features you connected it for — reporting on your traffic, your rankings, your advertising, and publishing to your own properties.
We do not transfer Google user data to third parties except as needed to provide those features, for security, or where the law requires it.
We do not use Google user data for advertising.
No human at Marketing & Technology reads your Google data except with your explicit permission, to resolve a support issue you raised, for security purposes, or where the law requires it.
Google user data is not used to train generalised AI models. Where analytics figures inform a written summary, they are reduced to findings first, and the models we use are contractually barred from training on that input.

How long we keep it

While your account is open — everything above, so the product can do its job and show you your own history.
After you close your account — we delete your workspace data within 30 days, except records we must keep for tax and accounting, which we hold for seven years as Canadian law requires.
Anything already published stays on your own website, your own social channels and your own email platform. It is yours. Closing your Cadence account does not remove it, and we would not want it to.
Backups roll off within 35 days.

Your rights

Under Canada's Personal Information Protection and Electronic Documents Act — and, if you are in the UK or European Economic Area, under the GDPR — you can:

ask what we hold about you, and get a copy;
have anything inaccurate corrected;
have your information deleted;
withdraw a consent you gave, including disconnecting any platform, at any time and from inside the product;
object to, or ask us to restrict, a particular use;
take your data elsewhere in a portable format;
complain to a regulator — in Canada, the Office of the Privacy Commissioner.

Email mat@marketingtech.ca and we will respond within 30 days. We will not charge you for it and we will not make it difficult.

Disconnecting an account

You can disconnect any connected platform from the Integrations screen at any time. Doing so revokes our access immediately. You can also revoke it from the platform's own settings — Google, Meta and the rest all provide this, and we would rather you knew that than depended on us.

Security

Data is encrypted in transit and at rest. Access to production systems is limited to people who need it. Every business's data is separated at the database level rather than by application filtering alone, so a bug in our code returns nothing rather than someone else's information.

No system is perfectly secure, and anyone who tells you otherwise is selling something. If a breach affects your personal information, we will notify you and the Office of the Privacy Commissioner of Canada as the law requires, and we will tell you what actually happened.

Cookies

Cadence uses cookies that are strictly necessary to keep you signed in and to keep the application secure. We do not use advertising cookies and we do not track you across other websites. Because we use no non-essential cookies, there is no banner to dismiss.

Children

Cadence is a business product and is not intended for anyone under 18. We do not knowingly collect information from children.

Changes to this policy

If we change how we handle your information in a way that matters, we will email you before it takes effect — not quietly update the date at the top and consider you notified.