Privacy Policy

Cadenza ("we", "our", or "us") operates the Cadenza mobile application and web admin portal (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. Please read this policy carefully. If you do not agree with its terms, please discontinue use of the Service.

1.1 Information you provide directly

• Account information: name, email address, password, phone number, and company name when you register.
• Profile data: role (owner, admin, or technician), profile photo if uploaded.
• Service report data: chemical readings (pH, chlorine, alkalinity, etc.), equipment status, task completions, written notes, and follow-up flags entered during a job.
• Photos: before, after, and issue photos you capture or upload through the mobile app.
• Property information: property addresses, gate codes, pool specifications, and customer contact details you add to the platform.

1.2 Information collected automatically

• Usage data: pages visited, features used, timestamps, and session duration.
• Device data: device type, operating system, app version, and unique device identifiers.
• Log data: IP address, browser type, referring URLs, and error reports.
• Location data: approximate location derived from IP address. We do not collect precise GPS location unless you explicitly grant that permission in your device settings.

1.3 Information from third parties

If you sign in using a third-party provider (e.g., Google), we receive basic profile information (name, email) from that provider as permitted by your settings with them.

We use the information we collect to:

• Create and manage your account and your company's workspace.
• Provide, maintain, and improve the Service.
• Enable technicians to receive job assignments and submit service reports.
• Enable admins and owners to review reports, manage teams, and export data.
• Send transactional emails (account setup, password reset, invite links).
• Monitor and analyze usage to improve user experience.
• Detect and prevent fraudulent, unauthorized, or illegal activity.
• Comply with legal obligations.

We do not sell your personal information to third parties. We do not use your service report data for advertising purposes.

Cadenza is a multi-tenant platform. Each company's data is strictly isolated using Row Level Security (RLS) at the database level. Users within your company can only access data that belongs to your company. Employees of other companies on the platform cannot access your data.

We may share your information only in the following circumstances:

• Within your company: owners, admins, and technicians in your account can access the data relevant to their role.
• Service providers: trusted third-party vendors who help us operate the Service (e.g., cloud infrastructure, authentication). These providers are contractually bound to protect your data.
• Legal compliance: when required by law, court order, or governmental authority.
• Business transfer: in connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections.
• With your consent: for any other purpose with your explicit consent.

We retain your data for as long as your account is active or as needed to provide the Service. If you close your account, we will delete or anonymize your data within 90 days, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

Service report photos are retained for as long as your account is active. You may delete individual photos or reports from within the Service at any time.

We implement industry-standard safeguards to protect your information, including:

• TLS/HTTPS encryption in transit.
• Encrypted storage at rest via our cloud infrastructure provider.
• Row Level Security (RLS) policies at the database layer.
• Secure authentication via Supabase Auth, including hashed passwords.
• Access controls limiting employee access to production data.

No method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to using commercially reasonable means to protect your information.

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete data.
• Deletion: request that we delete your personal data (subject to legal retention obligations).
• Portability: request an export of your data in a machine-readable format.
• Objection / Restriction: object to or request restriction of certain processing activities.
• Withdraw consent: where processing is based on consent, you may withdraw at any time.

To exercise any of these rights, contact us at privacy@cadenzaops.com. We will respond within 30 days.

The Service is intended for business use by adults. We do not knowingly collect personal information from anyone under the age of 13 (or 16 in the European Economic Area). If we learn that we have collected personal information from a child without verification of parental consent, we will delete that information promptly. If you believe we might have any information from or about a child, please contact us at privacy@cadenzaops.com.

The Service integrates with or relies on the following third-party services, each governed by their own privacy policies:

• Supabase — database, authentication, and file storage.
• Vercel — web app hosting and delivery.
• Expo / EAS — mobile app builds and distribution.
• Apple App Store / Google Play — mobile app distribution.

We are not responsible for the privacy practices of these third parties. We encourage you to review their respective policies.

Our infrastructure is primarily hosted in the United States. If you are located outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to this transfer. We take steps to ensure appropriate safeguards are in place where required by applicable law.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated effective date and, where required by law, by sending you an email notification. We encourage you to review this policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@cadenzaops.com
• Website: cadenzaops.com