Cadence is a social scheduling tool for independent music artists, indie labels, and artist managers to publish their own content to their own connected accounts. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have over it.

1. Information we collect

• Account information. When you create a Cadence account, we collect your name, email address, password (stored hashed via bcrypt), and billing details (handled by Stripe — we do not store card numbers).
• Connected social accounts. When you connect a TikTok account via OAuth, TikTok provides us with an access token and refresh token scoped to the permissions you grant. We store these tokens encrypted at rest using AES-256.
• Content you create or upload. Videos, captions, hashtags, scheduled times, and any analytics responses you choose to view through Cadence.
• Usage data. Standard server logs (IP, timestamps, request paths) retained for 30 days. No third-party analytics or advertising trackers.

2. How we use information

• Deliver scheduled posts to the social platforms you've connected.
• Authenticate you and secure your account.
• Process subscription billing through Stripe.
• Send transactional emails (post confirmations, scheduling failures, account notices). No marketing emails without opt-in.

3. Third-party services

• TikTok — Content Posting API for publishing
• Stripe — subscription billing
• Render.com — hosting
• Anthropic API — optional caption-assist (off by default, requires opt-in)

4. Data retention and deletion

• Account data is retained while your account is active.
• You can delete your account at any time from Settings → Delete Account. All personal data, connected tokens, scheduled posts, and content cache are permanently removed within 7 days.
• You can revoke Cadence's access to your TikTok account independently at tiktok.com/setting/security under "Manage app permissions."
• Stripe billing records are retained for 7 years per US tax law.

5. Your rights

Under GDPR (EU), CCPA (California), and similar frameworks, you have the right to access, correct, delete, export, or restrict processing of your data. Submit any request to jakedouglas@biggerdreamsco.com. We respond within 30 days.

6. Children

Cadence is not directed at and does not knowingly collect data from anyone under 13 (or 16 in the EU). If you believe a child has provided us data, contact us and we will delete it.

7. Security

• TLS 1.2+ on all traffic
• OAuth tokens encrypted at rest with AES-256 (Fernet)
• Passwords hashed with bcrypt (cost factor 12)
• Per-user isolated token storage
• Annual security review

8. International transfers

Cadence is operated from Los Angeles, California, USA. By using the service you consent to the transfer of your data to the United States.

9. Changes to this policy

Material changes will be announced by email at least 30 days before they take effect. The "Last updated" date at the top reflects the current version.

10. Contact

Privacy questions or to exercise your data rights: jakedouglas@biggerdreamsco.com.

Cadence is operated by Bigger Dreams, LLC. Mailing address: 101 E 17th St, Los Angeles, CA 90015.