Privacy Policy

For personal information about a Subscriber’s own customers and contacts that we process on the Subscriber’s behalf (“Subscriber Data”), the Subscriber is the controller and we act as a processor / service provider, handling that information under the Subscriber’s instructions and our agreement with them. If you are one of those customers (an “End Customer”), please direct privacy requests to the business collecting from you; you may also contact us and we will route your request. For information about our Subscribers and their Authorized Users, and about our websites, we act as a controller.

• Account and user information — names, business email addresses, roles, and authentication identifiers from your single sign-on provider (for example, Microsoft Entra or Google) or sign-in link. We do not receive or store your single sign-on password.
• Accounting and receivables data — when you connect QuickBooks Online or a similar system, we import and store customer records, invoices, balances, and payment records to provide the Service.
• End-Customer information — contact details (name, business, email, phone, mailing address) and account information for the customers our Subscribers collect from, including invoices, balances, promises-to-pay, disputes, and notes.
• Communications content — emails sent and received through connected mailboxes, text messages, call metadata, call recordings, machine-generated transcripts and summaries of those calls, and in-app messages.
• Payment information — when a payment is made, our payment processors tokenize the card or bank account; we store limited, non-sensitive details such as the method type, a token or reference, and the last four digits — not the full card number or bank credentials.
• Usage and device data — log data, IP address, timestamps, pages and actions, and diagnostic information generated when the Service is used.

With your authorization, the Service accesses the specific mailbox a Subscriber connects, using delegated permissions, in order to send collection correspondence from that mailbox and to capture replies from End Customers. We request only the scopes needed for that purpose (for example, sending mail, and reading and filing messages in the connected mailbox) and access only the connected mailbox — not other users’ mail, and not Teams, SharePoint, OneDrive, Google Drive, or other services.

We use this mail data only to provide the Service’s email features to you. We do not use it for advertising, do not sell it, and do not use it to train generalized AI models. Cadence AR’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use information to:

• operate, maintain, and secure the Service;
• sync your accounting data;
• send and receive the communications you direct — email, SMS, and calls — from your connected accounts;
• provide AI-assisted drafting, transcription, and summarization features;
• process payments you or your End Customers initiate or schedule;
• provide support and respond to requests;
• detect, prevent, and investigate fraud, abuse, and security incidents;
• enforce our Terms; and
• comply with legal obligations.

We do not sell personal information, and we do not use End-Customer communications content for advertising.

Certain features use automated and AI tools — including Cloudflare Workers AI for drafting and refining message text and speech-to-text transcription of call recordings — to generate suggestions and transcripts within the Service. Content processed by these features is used to provide the feature to you and is not used to train third-party foundation models beyond what is necessary to return the result. AI outputs may be inaccurate and should be reviewed before use.

We share information with:

• Service providers and subprocessors that host and power the Service, including Cloudflare (application hosting, database, storage, and AI); Intuit / QuickBooks (accounting sync and QuickBooks Payments); Microsoft and Google (connected mailboxes and sign-in); Twilio (voice and SMS); payment processors (Intuit / QuickBooks Payments, Sola / CardKnox, USAePay); and email-delivery providers such as Resend for system notifications like sign-in links and reminders.
• The relevant Subscriber — End-Customer information is accessible to the Subscriber, and its authorized staff, that the information pertains to.
• Legal and safety — when required by law, subpoena, or to protect the rights, safety, and integrity of the Service and its users.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy.

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

We retain information for as long as needed to provide the Service and for legitimate business and legal purposes such as recordkeeping, dispute resolution, and compliance. Subscriber Data is retained per our agreement with the Subscriber; on termination we make it available for export where feasible and then delete it in the ordinary course, subject to legal retention obligations.

We use technical and organizational measures designed to protect information, including encryption in transit, tokenization of payment credentials, access controls, and logical separation of each Subscriber’s data (multi-tenant isolation). No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location and role, you may have rights to access, correct, delete, or port personal information, or to object to or restrict certain processing. Subscribers and Authorized Users can exercise these by contacting us. End Customers should contact the business collecting from them (the Subscriber, acting as controller); we will assist that business or route your request appropriately.

End Customers can opt out of reminder or marketing communications by following the unsubscribe or STOP instructions in a message, or by asking the business to stop contacting them. To make a request or ask a question, contact privacy@cadence-ar.com.

The Service is operated in the United States. If you access it from outside the United States, you understand your information is processed in the United States.

The Service is a business tool and is not directed to children under 16, and we do not knowingly collect their personal information.

We may update this Policy. We will revise the “Effective” date above and, where appropriate, provide notice. Your continued use after an update takes effect constitutes acceptance.

Horizon Consulting of Monsey Inc. · privacy@cadence-ar.com