Privacy Policy
CadenHQ is operated by Jeva Technologies ("Jeva", "we", "our", "us"). This Privacy Policy explains how we collect, use, disclose, and protect information when you use CadenHQ (the "Service").
Who This Policy Applies To
This policy applies to visitors, account holders, and anyone whose information is processed through the Service ("you"). If you use CadenHQ on behalf of an organization, your organization may be the data controller of information you submit to the Service.
Information We Collect
- Account information: name, email address, organization/workspace details, and authentication data.
- Service usage data: feature interactions, pages/screens viewed, timestamps, device/browser information, IP address, and diagnostic logs.
- Billing data: transaction records, invoice details, and payment status. We do not store full card numbers.
- Customer content: information you upload or send through the Service (e.g., contact/prospect data, campaign content, message templates).
- Integrations data: information necessary to connect third-party services (e.g., OAuth tokens and mailbox identifiers).
Email Provider and OAuth Data (e.g., Gmail)
If you connect an email provider (such as Google/Gmail), we will process data needed to provide email sending, inbox reading (as enabled), and message tracking features. This may include mailbox metadata, message headers, message content, and email thread data.
Important: We use this data only to operate and improve the Service, secure accounts, prevent abuse, and provide customer support. We do not sell mailbox data, and we do not use it to train advertising profiles.
How We Use Information
- Provide, maintain, and improve the Service (including delivering emails, tracking events, and supporting integrations).
- Authenticate users, secure accounts, detect abuse, and enforce our policies.
- Process payments, prevent fraud, and maintain accounting and tax records.
- Communicate with you about the Service (e.g., support responses, important notices, and product updates).
- Analyze performance and reliability, including debugging and monitoring.
Legal Bases (Where Applicable)
- Contract: to provide the Service you request.
- Legitimate interests: to secure, operate, and improve the Service.
- Consent: where required (e.g., certain marketing communications).
- Legal obligations: for accounting, tax, compliance, and lawful requests.
How We Share Information
We do not sell personal information. We may share information in the following circumstances:
- Service providers: hosting, databases, email delivery/integrations, analytics, error monitoring, and payment processors, strictly to operate the Service.
- Compliance and safety: to comply with law, protect rights, prevent fraud/abuse, or respond to lawful requests.
- Business transfers: if we are involved in a merger, acquisition, financing, or sale of assets (information may be transferred as part of that transaction).
Data Retention
We retain information for as long as needed to provide the Service and for legitimate business purposes, including security, auditing, dispute resolution, and legal compliance. Retention periods may vary by data type.
- Account data: retained while your account is active; deleted or anonymized after account closure unless legally required to retain.
- Logs and security records: retained for a limited period for monitoring, abuse prevention, and reliability.
- Billing records: retained as required by law and standard accounting practices.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. No system is 100% secure; you are responsible for keeping your credentials confidential and using strong authentication methods.
International Transfers
We may process and store information in countries other than where you live. Where required, we implement safeguards intended to protect information during cross-border transfers.
Your Choices and Rights
Depending on your location, you may have rights to access, correct, export, object to processing, restrict processing, or delete your personal information. You can also disconnect integrations at any time.
To request access, correction, export, or deletion, contact support@cadenhq.com.
Children’s Privacy
The Service is not intended for children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children.
Changes to This Policy
We may update this Privacy Policy from time to time. We will update the effective date above and, where appropriate, provide additional notice.
Contact
For privacy questions, contact Jeva Technologies at support@cadenhq.com.