Cadenz ("we", "us", "our") is a worship musician workspace application. This policy explains what data we collect when you use Cadenz, how we use it, and your rights over it.
If you have questions, contact us at: legal@getcadenz.com
Data you give us directly
- —Email address — when you create an account
- —Full name — when you sign up
- —Song data — titles, keys, BPM, chord progressions, and ChordPro charts you upload, which may contain lyrics
- —Setlists — the setlists you create and organise
- —CCLI license number — if you choose to add it to your profile
Data we collect automatically
- —AI usage records — when and how often you trigger AI-powered features, tied to your account, used solely to enforce fair-usage limits and control operating costs
- —Authentication tokens — managed by Supabase to keep you logged in
- —IP address and request logs — automatically recorded by our hosting provider (Vercel) for security and to operate the service
Data we do NOT collect
- —Audio files — audio you load into the Practice Mode transposer is stored and processed in your browser only (via IndexedDB) and is never uploaded to our servers
- —Payment data — payment processing is handled entirely by our payment provider; we never see or store your card details
We use your data only to provide and improve Cadenz:
- ✓To authenticate you and maintain your account
- ✓To store and display your songs, setlists, and chord charts
- ✓To enable Team Sharing (generating share links you choose to create)
- ✓To enforce fair usage limits on AI-powered features
- ✓To send share notification emails and account emails, such as confirming that your account was deleted
We do not sell your data. We do not use your data for advertising.
We process your data on the following bases: performance of a contract (to provide the service you signed up for); legitimate interests (securing the service, controlling AI costs, and preventing abuse); and consent (for example, sending a share-notification email when you choose to share). You can withdraw consent at any time.
Cadenz lets you create share links for setlists and chord charts. When you create a share link, anyone with that link can view the shared content — including any names, song data, or notes it contains. You are responsible for what you choose to share and with whom. If a setlist includes information about other members of your team, you are responsible for having the right to share it. Share links remain active until you revoke them or delete your account.
We use a small number of trusted third-party services to operate Cadenz:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Database and authentication | Your account and song data |
| Vercel | Application hosting | Request logs |
| Resend | Transactional email | Email address (for share notifications, account emails such as deletion confirmation, and new-signup alerts to us) |
| Anthropic | AI chord analysis | Chord/setlist data submitted for analysis |
No other third parties receive your data.
Each provider processes data on our behalf under its own data processing terms.
Your data is stored in Supabase (hosted on AWS infrastructure). We apply Row Level Security (RLS) on all database tables, meaning your songs and setlists are only accessible by your own account.
Your data is encrypted at rest. Our infrastructure and providers are located in the United States; if you access Cadenz from the EU or EEA, your data is transferred to and processed in the US under the safeguards offered by our providers.
Share links you create are accessible by anyone with the link — this is intentional and under your control.
We take reasonable measures to protect your data. In the event of a data breach affecting your personal data, we will notify affected users without undue delay, and will notify the relevant supervisory authority where required by law.
Wherever you live, you can use the rights below. Some come from Bahrain's Personal Data Protection Law and, if you are in the European Union or European Economic Area, from the GDPR. We offer all of them to everyone, free of charge:
- —Access — request a copy of the data we hold about you
- —Correction — ask us to correct inaccurate data
- —Deletion — delete your account yourself in Settings › Delete account, or ask us to. If you lead a team that still has other members, email us instead. See Data Retention for what may remain in backups and logs
- —Portability — request your data in a portable format
- —Objection — object to how we process your data
To exercise any of these rights, email us at legal@getcadenz.com. We will respond to correction and deletion requests within 10 business days, and to other requests within 15 business days.
If you are unhappy with how we handle your request, you can complain to the data protection authority in Bahrain or, in the EU or EEA, to your local data protection authority.
We keep your data for as long as your account is active. When you delete your account in Settings, your data is deleted straight away; if you ask us by email, we delete it within 10 business days. After deletion, we keep data only where the law requires it. Copies may remain for a limited time in our providers' routine backups and logs (such as login and email delivery logs) and in our account-notification emails, until those expire or are cleared.
Cadenz uses only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.
Cadenz is not directed at children under 13. We do not knowingly collect data from children under 13.
We may update this policy. We will notify you by email if we make material changes. Continued use of Cadenz after changes constitutes acceptance.
Jesudas Jason Swamy
Email: legal@getcadenz.com