Privacy Policy

Who we are

The Cadenvio website, app and newsletter are operated by Software Development - Rafał Darłak, Gnojnica 59, 39-105 Gnojnica, Poland, NIP: 8181728292, REGON: 388328837 — the data controller for the data described in this policy.

For anything related to your data, write to support@cadenvio.com.

What we collect

When you sign in, we store the account identifier X assigns you, your X handle, display name and avatar, and the date and time your account was created, last updated and last used. We do not store a password or an email address for your account.

While you use the app, we store the content you create in your Personal workspace — posts, drafts, media, communities and topics you save, cadence settings and schedules — for as long as your account exists, together with your workspace's plan, its limits and how much of them you have used (for example how many posts were published to X or how many AI tokens were used in the current billing cycle).

When you connect an X account, we store the profile X gives us — its identifier, handle, display name, avatar, plan or verification status, follower and following counts and post count — plus encrypted access tokens. When you use the AI assistant, we store prompts, attached drafts, answers, conversation history and token usage. You may also save persistent AI context about yourself, your audience and your requirements. It is kept until you replace or clear it or your account is deleted. Clearing it removes the text while retaining only a content-free marker that the optional personalisation step was completed. If you ask Cadenvio to build a voice profile, performance metrics are used within Cadenvio to select up to 50 samples from your own Cadenvio-published posts, and their text is processed to create a stored summary.

When you buy a plan or top-up, Cadenvio stores the Link/Stripe customer, checkout, price and subscription identifiers, selected plan and interval, currency, payment or subscription status, trial and billing timestamps, and purchased entitlements. Sold through Link holds the name, contact, address, tax and payment-instrument details entered at checkout. Cadenvio does not store a full card number.

With analytics consent, DataFast uses pseudonymous visitor and session identifiers to record canonical page paths and a limited set of content-free events, such as the call to action that began signup and completed composer, draft, scheduling, publishing, connection, settings, analytics-control, assistant, billing, sign-out and legal-acceptance actions. Fixed properties can describe post type, destination, content label, creation and scheduling mode, whether a link exists, and attachment type and grouped count. It also receives time, browser and device information, screen and viewport dimensions, language, time zone, approximate location derived by DataFast, a fixed source category such as direct, search, X or another referral, and LCP, INP and CLS metrics. Cadenvio does not call DataFast identify or payment tracking and does not send account, workspace, X, Stripe, email or name identifiers, post text, prompts, drafts, saved AI context, files, file names, attachment contents, exact schedules, error messages, search terms, full referral URLs or arbitrary campaign values.

When you subscribe to the newsletter, we store:

• your email address,
• the published interface language you subscribed in (currently English),
• whether the signup came through the Max product-updates flow,
• the date and time of subscription,
• your confirmation status, with the time of confirmation or unsubscribing,
• while confirmation is pending: a hashed, expiring confirmation token (the link itself is never stored).

Why we process it

Your account, workspace, connected-account, AI and billing data are processed to provide the service you signed up for and to bill the plan you chose — the legal basis is the performance of a contract (Article 6(1)(b) GDPR). Billing records are additionally kept because tax and accounting law require it (Article 6(1)(c) GDPR).

Your newsletter address is processed for exactly one purpose: sending you product updates about Cadenvio. The legal basis is your consent (Article 6(1)(a) GDPR), which you give by submitting the form and confirm by clicking the link we email you (double opt-in).

Technical request and error data, IP addresses and usage counters are processed to secure and operate the service, enforce limits and control provider costs. The legal basis is our legitimate interests (Article 6(1)(f) GDPR). IP addresses used by Application Insights are masked before storage.

Optional content-free product analytics is processed only after your consent (Article 6(1)(a) GDPR). You can withdraw that consent at any time through Cookie settings without affecting the service.

We do not sell your data, share it for advertising, use it for advertising profiling, or use your content to train AI models. When you request a voice profile, Cadenvio analyses the writing style of selected posts only to personalise your assistant. No decision with legal or similarly significant effect on you is taken automatically.

X sign-in details, the information needed for a requested workspace action, and billing information for a purchase are contractual requirements: without them we cannot create the account, perform that action or complete the purchase. Newsletter subscription and optional analytics are voluntary; declining them does not affect the core service.

Sign-in and accounts

Signing in is handled by X. You are sent to x.com, you authorise Cadenvio there, and X returns us your account identifier, handle, display name and avatar — nothing else, and never your password. Signing in asks only for read access; permission to publish is a separate authorisation you give on the Connections screen.

The API uses a strictly necessary random session cookie and a ten-minute correlation cookie for the X redirect. Both are HttpOnly, Secure, SameSite=Lax and host-only. The session expires after seven days without use and after thirty days in all cases. The Cookie and Local Storage Policy gives the full inventory.

To request account deletion, export, access or correction, write to support@cadenvio.com from information that lets us verify the request. For DataFast records, include the analytics visitor ID shown in Cookie settings for each browser in scope; Cadenvio deliberately keeps no account-to-visitor mapping. We respond without undue delay and normally within 30 days. Account and workspace data is removed within 30 days after a verified deletion request, except records that law requires us to retain.

Your connected X account

When you connect an X account, you authorise X to give Cadenvio limited access to it. We read its identifier, handle, name, avatar, plan or verification status, follower and following counts and post count. For publishing, we send X the scheduled text, reply references, media identifiers, poll options and duration, chosen community and follower-sharing choice, and Made with AI or paid-partnership labels. For analytics, Cadenvio asks X by the exact identifiers of root posts published through Cadenvio, at bounded checkpoints, for impressions, likes, reposts, replies, quotes, bookmarks, profile and URL clicks and video views where X makes them available. We also read the connected account's follower, following and post counts once per day. Analytics does not request post text, timestamps, reply references, community identifiers, thread continuations, posts published outside Cadenvio or replies. X also processes the sign-in and authorisation requests and the technical identifiers those interactions require. X Internet Unlimited Company is the independent controller for people in the EU, EFTA states and the United Kingdom; X Corp. is the independent controller elsewhere, under X's privacy policy.

Access tokens are encrypted at rest (AES-GCM) and used only by our API. Disconnecting an account revokes the access at X and deletes the tokens; when X tells us you removed the app on its side, we do the same. We do not read your timeline, your direct messages, or anyone else's posts, and we never act on your account beyond publishing what you scheduled.

The AI assistant

When you use the assistant, the text you type, an attached draft, the recent chat context and any saved AI context are sent to Microsoft Azure OpenAI Service, which runs the model for us as a processor in the EU data zone. Saved AI context is sent with every user-facing assistant request until you clear it; it is not added to the separate internal request that creates a voice profile. To create a voice profile, Cadenvio uses performance metrics locally to select up to 50 of your own Cadenvio-published posts; only the selected post text is sent to Azure OpenAI, and the resulting summary is stored. Microsoft does not use prompts or outputs to train its foundation models and may process abuse-monitoring data under its documented controls.

We store up to 50 conversations and 200 messages in each so you can return to them. You can delete a conversation in the app. Clearing saved AI context stops it being included in future requests but does not alter requests already processed. All conversations, saved AI context and the voice summary are deleted with your account.

We meter the assistant in tokens per workspace and per user to enforce plan allowances and daily limits. The saved context's input tokens count each time it is sent; the usage counters themselves hold no content.

Payments and billing

Paid plans and top-ups are facilitated by Sold through Link, LLC using Stripe services. Sold through Link is the merchant of record, while Cadenvio remains the seller and service provider. Link operates hosted checkout, tax calculation, receipts, invoices, payment security, transaction support, refunds and disputes as an independent controller. Its pages use their own cookies.

Cadenvio receives identifiers, purchase and subscription status and timestamps needed to activate and support the service. Billing and tax records are kept for the statutory period, normally five years counted under applicable Polish tax and accounting rules.

How the newsletter works

Submitting the form emails you a confirmation link — updates only start after you click it, and the link stays valid for 72 hours. If you submit an address that is already registered, we keep the existing subscription instead of creating a new one and, if it is still unconfirmed, we resend the confirmation link. Every update includes an unsubscribe link, and a message to support@cadenvio.com works at any time.

How long we keep it

Account, workspace, connected-X-account data, saved AI context and AI conversations are kept while the account exists, unless you delete an item earlier. Saved AI context is deleted when you clear it; only the content-free onboarding-completion marker remains. The DataFast Growth plan advertises 5+ years of pseudonymous pageviews, visitor journeys and product events; Cadenvio can request earlier deletion using the visitor ID. IP-masked request, dependency, exception and trace telemetry in Application Insights is kept for 30 days. Usage and security records are kept only as long as needed to enforce limits, resolve disputes and protect the service.

An unconfirmed newsletter entry is deleted after 30 days. A confirmed address is kept until you unsubscribe or withdraw consent; after that, only the minimum suppression and consent evidence is kept for three years. Billing and tax records are kept for the statutory period.

Who processes it for us

We work with a small number of providers, each bound by a GDPR data processing agreement or acting as an independent controller where the law says so:

• Microsoft Ireland Operations Ltd. — Microsoft Azure hosting, database, media storage, secrets, Application Insights and Azure OpenAI in the EU data zone; processor.
• JustShipIt Pte. Ltd. (Singapore), trading as DataFast — consented pseudonymous website and product analytics, including pageviews, visitor journeys, goals, device/browser data and approximate location; processor. Cadenvio does not enable DataFast identity or payment integrations.
• Resend, Inc. (USA) — delivery of confirmation and product-update emails; processor.
• Sold through Link, LLC and relevant Stripe affiliates — hosted checkout, payments, tax, receipts, invoices, refunds and disputes as merchant of record; independent controller.
• X Internet Unlimited Company for people in the EU, EFTA states and the United Kingdom, and X Corp. elsewhere — independent controllers for sign-in, authorisation, profile and metrics access, and publication to the connected X account.

International data transfers

Cadenvio's primary application data is stored in Azure regions in the European Union, and Azure OpenAI inference uses the EU data zone. DataFast is operated from Singapore and states that most of its analytics infrastructure is outside the EU, including in the United States; its current subprocessors are listed in the DataFast DPA. Resend and the US organisations behind Microsoft, Link/Stripe and X may also process data outside the EEA or the United Kingdom. Where Cadenvio is responsible for a restricted transfer, it relies on the provider's applicable contractual safeguards, including Standard Contractual Clauses and supplementary measures where required, or an applicable adequacy decision. Independent controllers describe their own safeguards in their notices.

Server-side processing

To protect the service from abuse, our API briefly processes the IP address a request comes from — and, when you are signed in, your account identifier — in order to limit request rates. Neither is stored with your newsletter subscription. To enforce plan limits, the API checks the connected X account and counts published and scheduled X posts, storage, AI tokens and the calls X charges us for.

With analytics consent, the browser sends the pseudonymous pageviews and fixed product events described above directly to DataFast; Cadenvio's API does not receive them. Independently, the API sends IP-masked request timings, dependencies and errors to Azure Application Insights for 30 days so we can keep the service reliable and secure.

Cookies, local storage and analytics choices

Cadenvio runs no advertising or cross-site advertising scripts. Strictly necessary cookies support sign-in, and functional local or session storage remembers the theme, language, active workspace, composer preference, local drafts, AI-panel state and temporary connection context.

DataFast cookies, product events and Web Vitals stay off until you accept analytics. Your versioned choice is stored for six months and can be changed through Cookie settings. Withdrawal stops tracking and removes DataFast identifiers and queued events from the browser. The Cookie and Local Storage Policy at https://cadenvio.com/cookies/ lists every item, purpose, access and lifetime.

Your rights

If the GDPR applies to our processing of your data, and subject to its conditions and exceptions, it gives you the right to:

• access the data we hold about you,
• correct it or have it deleted,
• restrict or object to its processing,
• receive it in a portable, machine-readable format — and take your posts, drafts, schedules, saved AI context and media with you when you leave,
• withdraw your consent, with effect for the future.

Additional rights by region

If United Kingdom data-protection law applies, you have the corresponding rights under the UK GDPR and Data Protection Act 2018 and may complain to the Information Commissioner's Office at https://ico.org.uk/make-a-complaint/. The categories, sources, purposes, recipients and retention periods for your data are described throughout this policy.

Where an applicable US state privacy law applies to Cadenvio and grants you rights, you may ask to confirm or access the personal information we process, correct or delete it, obtain a portable copy, and opt out of a sale, sharing for cross-context behavioural advertising, targeted advertising or qualifying profiling. Cadenvio does not sell personal information, share it for cross-context behavioural advertising, or use it for targeted advertising. The relevant categories are identifiers, commercial and subscription information, internet or app activity, user content and the voice-profile inference you request; they come from you, X, Link/Stripe and your use of Cadenvio and are disclosed to the providers identified above for the stated purposes.

Send a request to support@cadenvio.com. An authorised agent may act for you if we can verify the agent's identity and authority and, where law permits, confirm the request directly with you. If we deny a US state privacy request, reply with the word appeal and the reasons you disagree; we will review the appeal and explain the result and any right to contact your state attorney general.

Complaints

If you believe we handle your data unlawfully, you can lodge a complaint with your local supervisory authority. In Poland this is the President of the Personal Data Protection Office (UODO), uodo.gov.pl.

Changes and contact

If this policy changes, the new version appears here with an updated date. Material changes are announced prominently in the app and by email where we hold an address. A changed analytics purpose or provider requires a new choice.

Business customers who need a data processing agreement for their workspace can request one at support@cadenvio.com. Questions? Write to the same address.