Privacy Policy
Last updated: 2026-05-25 · version 2.0
Cadence is software for Instagram creators and the teams who help them ship. This policy describes what we collect, why, and how we protect it. Plain language, no legalese dressed up as clarity.
Who we are
Cadence is operated by Vikas Bendha, trading as Cadence. Contact: connect@vikasbendha.com. If you are an Italian or EU resident, we are the data controller for your account under the GDPR.
What we collect
- Account data — email, name, workspace name, timezone, language preference. Required to run the service.
- Workspace + team data — the name of each workspace you create, the email addresses of teammates you invite, their role (Owner / Admin / Strategist / Editor / Viewer), and the audit trail of who joined or left.
- Instagram public data — on your behalf we scrape publicly available reels and carousels of accounts you add as your own or as competitors. We do not log into Instagram. We do not access private accounts. Data is fetched through Apify using your own Apify key.
- AI provider keys — you connect your own Apify, OpenRouter, Google AI, and Anthropic keys. We encrypt them with AES-256-GCM before writing to disk. They are never stored in plaintext, never logged, and never leave Cadence decrypted.
- Usage logs — model runs, scrape runs, and actions you take inside the app, so we can show you costs and debug failures.
- Billing data — handled by Stripe. We store your Stripe customer id, subscription status, and period end. We never see your card number.
Workspaces and teammates
Cadence is multi-tenant: a single account can own or belong to multiple workspaces, and each workspace can have several teammates with different roles. Data scoped to one workspace (reels, carousels, ideas, reports, calendar items) is isolated by Postgres row-level security and never shown to members of another workspace.
When you invite a teammate by email, we send them a transactional email via Resend containing a single-use sign-in link. The link expires in 7 days. The invited person becomes a member of that workspace only after they click and accept.
Why we collect it
To provide the service, to show you how much your own API keys are costing, to send you the reports, invites, and notifications you opted into, and to comply with tax and accounting law.
BYOK — bring your own keys
You pay Apify, OpenRouter, Google, and Anthropic directly. Cadence bills only its own software subscription. Your keys are your property; you can rotate or revoke them from Settings at any time. When you create a second workspace, Cadence may copy your existing active keys forward into the new workspace so you do not have to re-enter them; you can remove or rotate any carried-over key from Settings.
Subprocessors
We use a short list of third parties to run Cadence. The full list with locations and DPAs lives at /legal/subprocessors. The current set includes Hostinger (KVM hosting), self-hosted Supabase (Postgres + auth + storage on that KVM), Stripe (payments), Resend (transactional email including workspace invites), Apify (Instagram scraping — your key), OpenRouter (LLM routing — your key, optional), Google AI Studio (LLM + multimodal vision + embeddings — your key), Anthropic (LLM — your key, optional), and Sentry (server-side error monitoring).
Retention
- Archived content items: 90 days from the archive date, then deleted.
- Audit logs: 12 months, then rolling deletion.
- Account data: kept while your account is active. On deletion, purged within 30 days except where law requires us to retain records.
- Revoked or expired invites: kept for 90 days as an audit trail, then deleted.
Cookies
Session cookies only. We do not use third-party analytics cookies or tracking pixels without your consent.
Your rights
You can access, export, or delete your data at any time. Email connect@vikasbendha.com or use the Settings page. EU users have full GDPR rights including the right to object and the right to lodge a complaint with a supervisory authority.
Changes
We will tell you in-app and by email before any change that expands what we collect or share.