Privacy PolicyPrivacy Policy

Last updated [date] · Draft for attorney review

This policy explains what information [Cadespace legal entity name] ("Cadespace", "we") collects, how we use it, and the choices people have. It covers our website, web app and phone app.

1. Two kinds of people

• Studios: the business owners and team members who sign up for Cadespace.
• Clients: the people studios work with, who use a studio's portal, forms, galleries and pages.

For information about their clients, the studio is in charge (the "controller") and Cadespace processes it on the studio's behalf and instructions. If you're a client, contact the studio you work with about your information; we'll help them respond.

2. What we collect

From studios

• Account details: name, email, phone, password (stored securely hashed), two-step sign-in settings.
• Business details: studio name, address, logo, brand kit, services and prices.
• Billing details: plan, invoices and payment status. Card numbers are handled by Stripe, not stored by us.
• Payout and tax savings setup through Stripe, which collects the identity and bank details needed for verification.
• Connected accounts: tokens that let Cadespace use your Gmail or Outlook, calendars, Instagram, Facebook and Canva for the features you turn on.
• Usage: basic app page usage and four milestones (signed up, finished setup, first booking, first payment received). Device, browser and IP address for security and troubleshooting.

From clients, on the studio's behalf

• Details the studio or client enters: name, email, phone, address, event dates, partner name, birthdays and anniversaries, questionnaire answers, notes and messages.
• Documents and signatures: signed contracts with the signing record (name, email, time, IP address, browser and a fingerprint of the document).
• Payments: amounts, dates and status. Card details go directly to Stripe.
• Galleries: photos and videos, favorites, downloads and comments.

We do not run analytics or advertising trackers on client portals, forms, galleries or pages.

3. How we use information

• To provide the Service: store your records, send emails and reminders you set up, show galleries, process signatures and payments.
• To run Cadence: to draft messages and suggestions for the studio, and to answer client questions only from the studio's own files, services and FAQ. We do not use studio or client content to train AI models.
• To keep Cadespace secure and prevent fraud and abuse.
• To support you when you ask for help, and to send service messages (billing, security, changes to terms).
• To improve Cadespace using the limited usage information described above.
• To follow the law.

We don't sell personal information and don't use it for targeted advertising.

4. Who we share it with

We share information only as needed to provide the Service, with service providers bound by contract to protect it:

• Stripe for payments, payouts and sales tax calculation.
• Anthropic (an AI provider) to power Cadence.
• Google and Microsoft, when you connect your mailbox or calendar.
• Meta and Canva, when you connect them for posting and designs.
• Cloud hosting, storage and email delivery providers: [list providers before launch].

We may also share information if the law requires it, to protect people's safety or our rights, or as part of a merger or sale of the business (with notice to you). A current list of service providers is available at [subprocessors page].

5. How long we keep it

• While a studio is active, we keep its information until the studio deletes it. Deleted items stay in Trash for 30 days.
• If a studio cancels, its data is read-only for 90 days, then permanently deleted. Client galleries go offline 30 days after cancellation.
• We keep billing, payment and tax records as long as the law requires.
• Backups are overwritten on a rolling schedule of [number] days.

6. Security

We use encryption in transit and at rest, access controls based on each person's role, two-step sign-in (required for studio owners), and activity logs. No system is perfectly secure; if a breach affects your information, we'll notify you as the law requires.

7. Your choices and rights

• Studios can view, correct, export and delete their information in the app, disconnect connected accounts anytime, and choose which notifications they get.
• Depending on where you live (for example California), you may have the right to know, access, correct, delete or get a copy of your personal information, and not to be discriminated against for using these rights. We don't sell or share personal information for cross-context advertising.
• To make a request, email [privacy email]. Clients should contact their studio first; we'll pass along any request we receive.

8. Cookies

Our website and app use cookies that are needed to sign in, keep you signed in and keep the Service secure. [If an analytics tool is added to the marketing website, describe it here and offer a choice where required.] Client pages don't use tracking cookies.

9. Children

Cadespace is for businesses and isn't directed at children under 13. Studios may store information about their clients' family members, including children, as part of their work; the studio is responsible for having permission to do so.

10. Where data is stored

Cadespace is operated in the United States, and information is stored in the United States.

11. Changes

We'll post updates here and notify studios of material changes by email or in the app before they take effect.

12. Contact

[Cadespace legal entity name] · [business address] · [privacy email]