Privacy Policy

Cadenza ("we", "our", or "us") operates the Cadenza mobile application and web admin portal (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. Please read this policy carefully. If you do not agree with its terms, please discontinue use of the Service.

1.1 Information you provide directly

• Account information: name, email address, password, phone number, and company name when you register.
• Profile data: role (owner, admin, or technician), profile photo if uploaded.
• Service report data: chemical readings (pH, chlorine, alkalinity, etc.), equipment status, task completions, written notes, and follow-up flags entered during a job.
• Photos: before, after, and issue photos you capture or upload through the mobile app.
• Property information: property addresses, gate codes, pool specifications, and customer contact details you add to the platform.

1.2 Information collected automatically

• Usage data: pages visited, features used, timestamps, and session duration.
• Device data: device type, operating system, app version, and unique device identifiers.
• Log data: IP address, browser type, referring URLs, and error reports.
• Location data: approximate location derived from IP address. We do not collect precise GPS location unless you explicitly grant that permission in your device settings.

1.3 Information from third parties

If you sign in using a third-party provider (e.g., Google), we receive basic profile information (name, email) from that provider as permitted by your settings with them.

1.4 Device permissions

The mobile app may request access to device features only when needed to provide the Service:

• Camera: to capture before, after, and issue photos for service reports and profile photos.
• Photo library: to select existing images for upload to service reports or your profile.
• Location (optional): precise GPS location is collected only if you explicitly grant permission in your device settings. We do not require location access to use core features of the Service.

You can revoke these permissions at any time in your device settings. Some features may not work without the relevant permission.

We use the information we collect to:

• Create and manage your account and your company's workspace.
• Provide, maintain, and improve the Service.
• Enable technicians to receive job assignments and submit service reports.
• Enable admins and owners to review reports, manage teams, and export data.
• Send transactional emails (account setup, password reset, invite links).
• Monitor and analyze usage to improve user experience.
• Detect and prevent fraudulent, unauthorized, or illegal activity.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your service report data for advertising purposes.

Cadenza is a multi-tenant platform. Each company's data is strictly isolated using Row Level Security (RLS) at the database level. Users within your company can only access data that belongs to your company. Employees of other companies on the platform cannot access your data.

We may share your information only in the following circumstances:

• Within your company: owners, admins, and technicians in your account can access the data relevant to their role.
• Service providers: trusted third-party vendors who help us operate the Service (e.g., cloud infrastructure, authentication). These providers are contractually bound to protect your data.
• Legal compliance: when required by law, court order, or governmental authority.
• Business transfer: in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
• With your consent: for any other purpose with your explicit consent.

We retain your data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your data within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

Service report photos are retained for as long as your account is active. You may delete individual photos or reports from within the Service at any time.

We implement industry-standard safeguards to protect your information, including:

• TLS/HTTPS encryption in transit.
• Encrypted storage at rest via our cloud infrastructure provider.
• Row Level Security (RLS) policies at the database layer.
• Secure authentication via Supabase Auth, including hashed passwords.
• Access controls limiting employee access to production data.

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to using commercially reasonable means to protect your information.

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete data.
• Deletion: request that we delete your personal data (subject to legal retention obligations).
• Portability: request an export of your data in a machine-readable format.
• Objection / Restriction: object to or request restriction of certain processing activities.
• Withdraw consent: where processing is based on consent, you may withdraw at any time.

To exercise any of these rights, contact us at info@cadenzaops.com. We will respond within 30 days.

The Service is intended for business use by adults. We do not knowingly collect personal information from anyone under the age of 13 (or 16 in the European Economic Area). If we learn that we have collected personal information from a child without verification of parental consent, we will delete that information promptly. If you believe we might have any information from or about a child, please contact us at info@cadenzaops.com.

The Service integrates with or relies on the following third-party services, each governed by their own privacy policies:

• Supabase — database, authentication, and file storage.
• Vercel — web app hosting and delivery.
• Expo / EAS — mobile app builds and distribution.
• Apple App Store / Google Play — mobile app distribution.

We are not responsible for the privacy practices of these third parties. We encourage you to review their respective policies.

Our infrastructure is primarily hosted in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure appropriate safeguards are in place where required by applicable law.

Our website and web admin portal may use cookies and similar technologies (such as local storage) to operate the Service — for example, to keep you signed in and remember your preferences.

As of the effective date of this policy, we do not use third-party advertising cookies, Meta (Facebook) pixels, or Google Analytics on our marketing landing page. We do not use your service report data for cross-context behavioral advertising or "tracking" as defined under California law.

If we introduce analytics or advertising technologies in the future, we will update this policy and, where required by law, provide a consent mechanism before non-essential cookies are placed.

If you are a California resident, the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA") provide you with additional rights regarding your personal information.

12.1 Categories we collect

In the preceding 12 months, we may have collected the following categories of personal information as described in Section 1: identifiers (name, email, phone); commercial information (subscription and billing records); internet or network activity (usage logs, IP address); geolocation data (approximate location from IP, or precise GPS if you grant permission); professional or employment information (company name, role); and audio/visual information (photos you upload).

12.2 How we use and disclose information

We use personal information for the business purposes listed in Section 2. We disclose personal information to service providers (Section 4) who process data on our behalf under contract. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

12.3 Your California rights

Subject to certain exceptions, California residents have the right to:

• Know what personal information we collect, use, disclose, and sell or share.
• Access specific pieces of personal information we hold about you.
• Delete personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information (not applicable — we do not sell or share for cross-context advertising).
• Limit use of sensitive personal information (we use sensitive data only as needed to provide the Service).
• Non-discrimination for exercising your privacy rights.

12.4 How to exercise your rights

Submit a request to info@cadenzaops.com with the subject line "California Privacy Request." We will verify your identity before fulfilling requests and respond within 45 days (or inform you if we need additional time). You may designate an authorized agent to submit a request on your behalf with written proof of authorization.

Cadenza does not currently use artificial intelligence, machine learning, or automated decision-making to profile users, make decisions about you, or generate recommendations from your service data.

If we introduce AI-powered features in the future, we will update this Privacy Policy to describe: what categories of data are processed by AI systems; the purpose of such processing; whether outputs are reviewed by humans; any third-party AI providers involved; and how you can opt out where applicable. We will not use AI in ways that materially change how we handle your data without notice.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date and, where required by law, by sending you an email notification. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: info@cadenzaops.com
• Website: cadenzaops.com