Legal

Privacy policy

Cadence builds and runs a workforce of AI agents inside the systems a company already uses. Agents work only where a customer connects them, act only within the permissions a customer grants, and hold anything hard to undo until a named person on that customer's staff approves it.

This policy explains how Cadence handles personal information across our website, platform, integrations, support channels, and related services.

Last updated 6 August 2026

Scope

This policy applies across the Cadence services and is not limited to a particular industry, workflow, or customer. Customer agreements, product notices, and integration-specific notices may add detail for a particular deployment.

Cadence is operated by the entity identified in the applicable customer agreement.

Customer direction and control

Cadence provides its services to businesses and other organisations. The customer decides how their agents are configured, including:

which systems and data sources are connected
which people and agents receive access, and to what
which workflows and actions are permitted
which actions require a person to approve them, and who that person is
when an integration or authorisation is changed or removed

When Cadence processes information at a customer's direction, the customer decides why and how that information is used, and Cadence processes it on the customer's behalf. Individuals connected to a customer organisation may need to direct privacy requests to that customer.

Cadence processes limited information for its own purposes when running our website, administering customer relationships, securing and supporting the service, and responding to legal and privacy requests.

What we handle on this website

Only what you choose to send us.

Booking details. When you book a call through the scheduling widget on this site, we receive your name, your email address, the time you chose, and anything you write in the notes field.

Email. Anything you send us directly.

Basic technical data. Approximate location, device type, browser type, and timestamps, collected when you load the page.

We do not run advertising trackers. We do not sell data. We do not build marketing profiles.

How agents reach a customer's data

Agents read and act inside the systems a customer already runs, through permissions the customer grants and can revoke at any time. The data stays in the customer's systems.

Cadence does not hold a duplicate of a customer's business records on its own infrastructure. Only the answer to a specific request passes through Cadence, at the moment an agent needs it, and it is discarded when that task ends. Where a particular engagement requires anything different, it is set out in the contract for that engagement before work begins.

What we retain, in a space the customer owns and can delete:

the access credential the customer grants, which the customer can revoke at any time
a log of what was read and what was done, which is the customer's audit trail
the corrections the customer's staff make, which is how their agents improve
a map of which records match across the customer's own systems

Every agent has a named owner on the customer's staff, records the actions it takes, and holds anything irreversible until that person approves it. Any agent can be stopped immediately.

AI processing and model training

Cadence uses AI models and other service providers to interpret authorised content and complete customer-requested work. AI output can be incomplete or inaccurate. Customers decide where human review, approval, or other safeguards are required in their workflows, and Cadence does not treat an agent as having authority beyond the access and instructions configured for it.

Cadence does not use customer content to train or fine tune generalised AI models.

Customer records, documents, messages, and the corrections a customer's staff make are used only to operate and improve that customer's own agents. They are not pooled with another customer's information, and they are not supplied to a model provider for that provider's own training.

Shared technology does not give one customer access to another customer's information.

Cadence does not sell customer content.

Information we process

Depending on how the service is configured and used, Cadence may process:

Customer content. Information submitted, generated, retrieved, or connected by a customer, such as business records, documents, policies, procedures, messages, prompts, agent output, corrections, and workflow results.

Integration data. Information received from or sent to systems a customer has authorised, including identifiers, connection metadata, action requests, and results.

Account and administration data. Names, business contact details, organisation, role, user identifiers, subscription information, and support communications.

Usage and security data. IP address, browser or device type, timestamps, authentication events, request metadata, activity records, diagnostic information, and security signals.

Commercial data. Contracts, billing contacts, plan information, and related business communications.

Customer content may include information about a customer's staff, clients, suppliers, or other authorised users. Customers are responsible for confirming they have the authority to connect, provide, or direct the processing of that information.

How we use it

We use information as reasonably necessary to:

provide, configure, maintain, and support the service
run the agents, integrations, workflows, and approval steps a customer has configured
authenticate users and apply the access boundaries set for each person and each agent
retrieve information and produce the drafts, updates, or actions a customer has asked for
maintain activity records, diagnose errors, monitor performance, prevent abuse, and investigate security events
communicate about the service and respond to support or privacy requests
improve reliability and usability using information we are permitted to use
comply with law, enforce agreements, and protect Cadence, our customers, and others

We do not use customer content for advertising.

How information is disclosed

We may disclose information:

to service providers that help us operate, including hosting, storage, communications, scheduling, security, support, and AI processing
to systems, integrations, agents, or recipients the customer has selected or authorised
to the customer organisation and its authorised administrators and users
to professional advisers, auditors, and insurers, subject to appropriate obligations
where required by law, or reasonably necessary to protect rights, safety, or the integrity of the service
as part of a merger, financing, acquisition, or sale of all or part of the business, subject to appropriate safeguards

Customers are told before a new service provider is introduced into an engagement that touches their data.

Cadence does not sell personal information and does not use it for advertising.

Retention and deletion

We retain information for as long as reasonably necessary to provide the service, follow customer instructions, meet contractual commitments, maintain security and business records, resolve disputes, and comply with law. Retention varies by information type, customer configuration, connected system, and whether an account, agent, or integration remains active.

Customers may export or delete information and disconnect authorised systems under the terms of their agreement. Information may remain temporarily in backups or in records preserved for security, legal, or compliance purposes until those records expire under our procedures. A request may be subject to identity verification, customer authorisation, and permitted legal exceptions.

Security

Access to a customer environment is limited to the people working on that engagement, granted through the customer's own access controls, and removed when the work ends.
Credentials are held in managed secret storage.
Every agent action is recorded, with what was read, which rule was applied, and when it acted.
Every agent is granted only the access its work requires and cannot cross a boundary it was not cleared for.

No service or transmission method is completely secure. Customers are responsible for configuring appropriate access, protecting devices and credentials, reviewing connected systems and permissions, and reporting suspected misuse promptly.

Your rights

Depending on the law that applies to you and on the role Cadence plays, you may have the right to request access to, correction of, or deletion of your personal information, to receive a portable copy of it, or to object to or restrict certain processing. You may also have the right to complain to the relevant supervisory authority.

We may verify your identity and authority before acting on a request. Where Cadence processes information on behalf of a customer, we will pass the request to that customer and support them in answering it.

Cadence will not treat anyone differently for exercising a privacy right protected by law.

International processing

Cadence and its service providers may process information in countries other than the one you are in, and those countries may have different data protection laws. Where required, we use contractual and other measures intended to support lawful transfers.

Cookies

This site sets only what is needed to serve the page and to run the embedded scheduling widget, which sets its own cookies under its provider's policy. We do not use advertising cookies.

Changes

We may update this policy as the service, our practices, or legal requirements change. The updated version appears on this page with a revised date, and we will give additional notice where required.

Contact

For privacy questions or requests, email isa@jailanico.com. If your request relates to a customer organisation, please say which one so we can route it correctly.