Cadence Lab Privacy Policy

Last updated: May 20, 2026 Effective date: May 20, 2026

This Privacy Policy applies to the Cadence Lab app (also referred to as "Cadence" or "CadenceLab"; the "App" or "Service"), a content automation platform for creators available at https://cadencelab.app and related domains. Cadence Lab is operated by VAUNTED LABS LLC ("Cadence Lab", "Cadence", "we", "our"). This document describes how Cadence Lab collects, uses, discloses and protects your personal data when you access or use the Service.

We respect your privacy and comply with applicable data protection laws, including the General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), and other relevant frameworks.

1. Who we are

Data controller: VAUNTED LABS LLC 254 Chapman Rd, Ste 208 Newark, DE 19702 United States EIN: 32-0843694

Privacy contact: Email: hello@cadencelab.app

If you live in the European Economic Area (EEA), the United Kingdom or Switzerland, please note that we have not currently appointed an EU representative under Article 27 GDPR. You can contact us directly at the address above for any data-protection question.

2. Data we collect

We collect the following categories of personal data:

2.1 Data you give us directly

• Account data: name, email address, password (hashed), job title, company name.
• Billing data: billing address, payment information (handled by our payment provider; we do not store full card numbers).
• Brand profile data: your website URL, social accounts, niche, ICP, USP, MOAT, competitors, branding assets, product demos, and any other content you upload or connect.
• Communications: messages you send us via email, contact form or support.

2.2 Data we collect automatically

• Usage data: pages viewed, features used, clicks, session duration, referrer sources.
• Technical data: IP address, browser type and version, operating system, device identifiers, time zone.
• Cookies and similar technologies: see our Cookies Policy for details.

2.3 Data from third parties

• Connected social accounts: when you connect TikTok, Instagram or YouTube, we receive metadata about your accounts and published content (analytics, engagement metrics, follower count). We do not receive passwords.
• Connected payment platforms: when you connect Stripe, LemonSqueezy, RevenueCat or Superwall, we receive transaction metadata (amount, timestamp, customer ID) used to estimate revenue contribution per post. We do not receive your end customers' payment details.
• Public web data: we may collect publicly available information about your website, your competitors, and trending content in your niche.

2.4 Sensitive data

We do not knowingly collect sensitive data (racial origin, health data, biometric data, etc.). Do not upload sensitive data to the Service.

3. How we use your data

We process your data for the following purposes, on the legal bases shown:

Purpose	Legal basis (GDPR)
Provide, operate and maintain the Service	Performance of contract (Art. 6.1.b)
Generate content based on your brand profile	Performance of contract
Publish content on your connected social accounts	Performance of contract
Estimate revenue contribution per post via engagement modelling	Performance of contract / Legitimate interest (Art. 6.1.f)
Process payments and manage subscriptions	Performance of contract
Send transactional emails (account, billing, security)	Performance of contract
Send marketing communications	Consent (Art. 6.1.a), withdrawable any time
Improve the Service, debug, run analytics	Legitimate interest
Comply with legal obligations (tax, accounting, anti-fraud)	Legal obligation (Art. 6.1.c)
Protect against fraud, abuse and security threats	Legitimate interest

4. AI and automated decisions

Cadence uses AI and machine learning to:

• Build a brand profile from your website, posts and other materials you provide;
• Generate content (carousels, slideshows, copy);
• Estimate revenue contribution per post via engagement signals tied to payment data, with an estimated 7-10% margin of error.

These processes are automated but produce content and recommendations you validate (manually or via the autopilot settings you control). They do not produce legal or similarly significant decisions about you within the meaning of Article 22 GDPR.

You can request a human review of any automated output by writing to hello@cadencelab.app.

5. How we share your data

We do not sell your data. We share it only with:

5.1 Service providers (processors)

We use the following categories of processors:

• Cloud infrastructure: AWS, Google Cloud or Cloudflare
• AI / LLM providers: Anthropic, OpenAI (for content generation only; data processing agreements in place)
• Payment processing: Stripe (for our own billing)
• Email delivery: transactional email providers (e.g. Postmark, SendGrid, Resend)
• Analytics: privacy-respecting product analytics (e.g. PostHog, Plausible)
• Customer support: ticketing platforms

An up-to-date processor list is available on request at hello@cadencelab.app.

5.2 Connected platforms

When you connect TikTok, Instagram, YouTube, Google Drive, Stripe, RevenueCat, Superwall, Whop or LemonSqueezy, you authorise us to exchange data with those platforms strictly for the purposes described here and in their own terms.

5.3 Google API Services User Data Policy

Cadence complies with Google's Limited Use Policy for all data obtained through Google APIs.

Requested Google scopes and purposes:

• userinfo.email — Google account email. Purpose: identify the signed-in user in Cadence.
• userinfo.profile — Google name and profile photo. Purpose: display the user in the interface.
• drive.file — Files created by Cadence in Google Drive only. Purpose: create a per-project folder and upload carousels the user explicitly sends via the "Send to Drive" button.
• youtube.readonly — Channel metadata for the user's YouTube channel. Purpose: surface stats (views, subscribers, videos) in the Analytics dashboard.
• youtube.upload — Permission to upload videos. Purpose: upload Cadence-generated Shorts to the user's channel (explicit action only).
• yt-analytics.readonly — YouTube analytics data. Purpose: display audience and revenue trends inside Cadence.

Limited Use compliance:

• Cadence uses Google data only to deliver the features above, at your direct request.
• We do not transfer your Google data to third parties unless required by law or with your explicit consent.
• We do not use your Google data for targeted advertising or to train general-purpose AI models.
• No human at Cadence reads your Google data except: (a) with your explicit consent (support), (b) for security reasons (abuse detection), (c) where the law requires it, (d) for anonymised internal operations.
• You can revoke access at any time from myaccount.google.com/permissions or from the /integrations screen inside Cadence.

5.4 Legal disclosures

We may disclose your data if required by law, by court order, or to protect our rights, users or the public.

5.5 Business transfers

In the event of a merger, acquisition or asset sale, your data may be transferred. We will notify you and provide options where the law requires it.

6. International data transfers

We are based in the United States. If you live in the EEA, the United Kingdom or Switzerland, your data is transferred to and processed in the United States and other jurisdictions where our providers operate.

For those transfers we rely on:

• The Standard Contractual Clauses (SCCs) approved by the European Commission;
• Supplementary measures (encryption in transit and at rest, access controls, contractual limitations);
• The UK International Data Transfer Addendum for UK transfers.

You can request a copy of our SCCs by writing to hello@cadencelab.app.

7. Data retention

We keep your data only for as long as necessary for the purposes described:

• Account data: for the lifetime of the account, plus 12 months after closure.
• Brand profile data: for the lifetime of the account. Deleted within 30 days of closure unless required by law.
• Billing data: 10 years (US/EU tax and accounting obligations).
• Generated content and publishing history: for the lifetime of the account, plus 6 months.
• Logs and analytics: 90 days in general, up to 12 months for security reasons.

You can request deletion any time (see Section 9).

8. Security

We implement appropriate technical and organisational measures:

• TLS/HTTPS encryption in transit
• Encryption at rest for sensitive data
• Role-based access controls
• Regular security reviews
• Incident management procedures

No system is 100% secure. In the event of a personal data breach, we will notify affected users and competent authorities within 72 hours where the law requires.

9. Your rights

Depending on your location, you have the following rights:

9.1 GDPR / UK GDPR (EEA, UK, Switzerland users)

• Access to the data we hold about you
• Rectification of inaccurate data
• Erasure ("right to be forgotten")
• Restriction or objection to processing
• Portability: receive your data in a structured, machine-readable format
• Withdrawal of consent any time (without affecting prior processing)
• Complaint to your supervisory authority

9.2 CCPA / CPRA (California residents)

• Right to know what data we collect, use and disclose
• Right to delete the data we hold about you
• Right to correct inaccurate data
• Right to opt out of "sale" or "sharing" (we do not sell)
• Right to limit use of sensitive data
• Right to non-discrimination for exercising your rights

9.3 How to exercise your rights

Email: hello@cadencelab.app We respond within 30 days (GDPR) or 45 days (CCPA), with possible extension where the law allows. We may need to verify your identity before responding.

10. Children's data

The Service is not intended for people under 16. We do not knowingly collect data about minors. If you believe a child has provided us with data, contact hello@cadencelab.app for deletion.

11. Third-party links

The Service may contain links to third-party sites. Their privacy practices are governed by their own policies. We are not responsible for their content or practices.

12. Changes to this policy

We may update this policy. Material changes will be notified by email or in-app notification at least 30 days before they take effect. The last-updated date is at the top of the document.

13. Contact

For any question about this policy or your data:

VAUNTED LABS LLC 254 Chapman Rd, Ste 208 Newark, DE 19702 United States

Email: hello@cadencelab.app