Cadence Privacy Policy

Last updated: June 22, 2026  
Version: 0.2

This Privacy Policy explains how Cadence collects, uses, discloses, and protects personal information in connection with our websites, applications, and Services.

### 1. Personal Information We Collect

| Category | Examples |
|---|---|
| Account information | Name, work email, employer, role, account credentials, tenant membership, permissions. |
| Customer employee data | Reporting lines, job role, goals, performance information, 1:1 notes, recognition, survey information, ER case information, audit trails. |
| Communications | Support requests, feedback, legal notices, sales communications. |
| Usage and device data | Log data, IP address, browser, device identifiers, pages viewed, feature usage, security events. |
| Payment data | Billing contact, plan, invoices, transaction metadata; payment card data is processed by our payment processor. |
| Recordings/transcripts if enabled | Meeting audio, transcripts, summaries, action items, tone/sentiment signals, and AI-derived coaching insights. |
| Sensitive information if configured | Employment, disciplinary, accommodation, demographic, biometric/voiceprint, or other sensitive information included by Customer or enabled features. |

### 2. How We Use Personal Information

We use personal information to:

- provide, secure, operate, and support the Services;
- create and administer accounts;
- generate workflows, summaries, insights, and AI-assisted outputs;
- process payments and manage subscriptions;
- communicate about the Services;
- improve reliability, performance, and usability;
- detect, prevent, and investigate security incidents, fraud, and misuse;
- comply with legal obligations and enforce agreements.

### 3. Customer-Controlled Data

Most employee and workplace data in Cadence is controlled by the Customer organization. If you are an employee or user of a Cadence customer and have questions about your workplace data, contact your employer first. Cadence supports Customers in responding to lawful privacy requests as described in the DPA.

### 4. AI Processing

Cadence may use AI systems to generate summaries, coaching suggestions, classifications, risk signals, or recommendations. AI outputs are intended for human review and decision support. Cadence does not provide legal, HR, employment, or medical advice.

### 5. Recordings and Transcripts

If a Customer enables recording, transcription, tone, sentiment, or related features, Cadence processes recordings, transcripts, and related outputs according to Customer configuration and the applicable agreement. Customers are responsible for required workplace notices and consents. Some jurisdictions require all-party consent to recording or specific biometric notices/releases for voice data.

### 6. How We Disclose Personal Information

We may disclose personal information to:

- service providers and subprocessors that help us provide the Services;
- Customer administrators and authorized users according to Customer configuration;
- professional advisers, insurers, auditors, and legal counsel;
- authorities or third parties when required by law or to protect rights and safety;
- parties to a business transaction such as a merger, financing, or acquisition.

We do not sell Customer employee personal information. We do not share Customer employee personal information for cross-context behavioral advertising.

### 7. Subprocessors

Our subprocessor list is published at `/subprocessors`. The list identifies vendors that may process Customer personal data to help provide Cadence.

### 8. Retention

We retain personal information for as long as needed to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and follow Customer configuration. Customer-controlled data may be deleted or exported according to product functionality and the Agreement.

### 9. Security

We use administrative, technical, and physical safeguards designed to protect personal information. No system is perfectly secure, and we cannot guarantee absolute security.

### 10. Your Privacy Rights

Depending on location, individuals may have rights to access, correct, delete, port, restrict, or object to certain processing of personal information. California residents may have rights under the CCPA/CPRA, including rights to know, delete, correct, opt out of sale/share, limit certain sensitive personal information uses, and non-discrimination. Because much Cadence data is controlled by Customer employers, we may direct requests to the relevant Customer.

### 11. International Data Transfers

Cadence may process personal information in the United States and other countries where we or our service providers operate. Where required, we use appropriate transfer mechanisms.

### 12. Children's Privacy

Cadence is not directed to children and should not be used to collect children's personal information.

### 13. Changes

We may update this Privacy Policy from time to time. We will post the updated version and update the "Last updated" date. Material changes may require additional notice or acknowledgment.

### 14. Contact

Privacy requests and legal notices should be sent to the privacy contact published by Cadence. Cadence must publish a monitored privacy/legal contact before production launch.