← Back

Privacy Policy

Last updated: 13 May 2026

1. Who we are

Cadenz.io ("we", "us", "our") is a music composition platform operated as a web application. We are committed to protecting your personal data and complying with the EU General Data Protection Regulation (GDPR) and applicable data protection laws.

2. What data we collect

  • Account data: Name, email address, profile picture (via Google SSO)
  • Profile data: Username, country, musical interests, bio
  • Activity data: GPS track (latitude, longitude, bearing, speed, timestamp) — only stored within your activity records
  • Usage data: App interactions (analytics, if consented)
  • Payment data: Stripe customer ID (payment card data never touches our servers)

3. How we use your data

  • To provide and improve the Cadenz.io service
  • To generate musical compositions from your GPS activity
  • To manage your account and subscription
  • To send transactional emails (subscription receipts, account alerts)
  • To comply with legal obligations

4. Location data

Location data (GPS coordinates) is collected only during an active recording session and stored solely as part of your activity record. We do not sell, share, or use location data for advertising. Location data is not collected in the background.

5. Data sharing

We share your data only with:

  • Supabase — database and file storage (EU region, GDPR compliant)
  • Vercel — hosting and serverless functions (GDPR compliant)
  • Stripe — payment processing (PCI DSS compliant)
  • Google — authentication only (OAuth)

We never sell your personal data to third parties.

6. Your rights (GDPR)

  • Access: Request a copy of your data
  • Rectification: Correct inaccurate data
  • Erasure: Delete your account and all associated data
  • Portability: Export your data in JSON format
  • Objection: Object to processing for marketing purposes

Exercise your rights from Settings → Privacy or by emailing privacy@cadenz.io

7. Data retention

We retain your data for as long as your account is active. Inactive accounts receive a notice at 12 months and are deleted at 24 months. You may request deletion at any time.

8. Cookies

We use essential cookies for authentication. Analytics cookies are only set with your explicit consent via the banner shown on first visit.

9. TikTok integration

Cadenzio (the social media publishing component of Cadenz.io) uses the TikTok Content Posting API to publish video content to the official @cadenzio TikTok account. This integration is operated solely by the account owner and does not collect or process data from any third-party TikTok users. The integration uses the following TikTok API scopes: video.publish (to post videos directly to the creator's profile) and user.info.basic (to validate the access token). No TikTok user data is stored by Cadenz.io.

10. Contact

Data controller: Cadenz.io · privacy@cadenz.io