Legal
Last updated: 14 October 2026
Cadence, published as "Cadence from Upgraded", is operated by Upgraded Co Pty Ltd ("Upgraded", "we", "us"), based in Queensland, Australia. This policy explains what data we collect, how we use it, and how we protect it. It applies to the Cadence from Upgraded application and everything at cadence.upgraded.au.
Contact: hello@upgraded.au
When you sign up, we collect your email address and (optionally) your name. This is used to create and manage your Cadence account.
During onboarding, we collect information about your business: name, industry, brand voice, audience description, content themes, and website URL. This is used to generate content that matches your brand.
When you connect a social media or advertising platform (Meta, TikTok, LinkedIn, Google, and others), we store the OAuth access tokens required to publish content and read performance data on your behalf. These tokens are stored securely and scoped to the permissions you granted.
We store all content generated and published through Cadence, along with performance metrics (reach, engagement, impressions) read back from connected platforms. This data is used to improve future content generation for your account.
If you install the Cadence tracking script on your website, we collect page visit data including UTM parameters, page URL, referrer, and (optionally) conversion events such as purchases. IP addresses are one-way hashed and never stored in raw form. This data is used to attribute site traffic and conversions back to published posts.
Payment processing is handled by Stripe. We do not store card numbers or payment details. We retain billing history (plan, amount, date) for accounting purposes.
Cadence stores a small amount of information in your browser, only to make the service work. It uses no advertising or analytics cookies, and no third party serves content or advertising through Cadence. The only third-party cookies are Stripe's, described below.
When something goes wrong, error reports (including your browser type and the page you were on) are sent to Sentry, our error monitoring service, so we can fix it. If you install the Cadence tracking script on your own website, it stores the campaign details of a visitor's arrival in that visitor's browser session storage, as described under Conversion events, and sets no cookies.
We do not sell your data to third parties. We do not use your data to train AI models shared across other clients.
Cadence connects to Google services only when you choose to connect them, and only with the permissions shown on Google's consent screen. For each service:
Google user data is used only to provide and improve the features you see in your own Cadence account: your dashboards, your AI performance brief, publishing to your channel, and content suggestions for your business. It never informs another account, including the anonymised industry benchmarks Cadence builds from other platforms. It is never used for advertising, never sold, and never used to develop, improve or train generalised AI or machine learning models.
Anthropic (Claude) processes some Google user data on our behalf, only to produce what is shown to you: a summary of your own metrics, to write your AI performance brief; the text of a review and the first name the reviewer shows publicly, when you ask Cadence to draft a reply to it; the text of your recent reviews, at most once a day, to list what your customers mention most; and your own listing photos that you add to your Cadence photo library, looked at once so Cadence can describe them and suggest them for posts; and the words of a review you choose to share, with the first name you chose to show, so Cadence can write the caption for that post. No other transfer of Google user data takes place, except where required by law or with your explicit consent.
Our staff do not read your Google user data, except with your permission, where it is needed for security purposes such as investigating abuse, or where required by law.
Google access tokens are encrypted at rest. Google data is stored in your isolated Cadence account (Supabase, Sydney region) and shown only to your account. It is deleted within 30 days of you asking us to delete your account or your Google data.
In addition to disconnecting a service in Cadence or asking us to delete your data, you can revoke Cadence's access to your Google data, including YouTube, at any time from the Google security settings page at https://security.google.com/settings/security/permissions. Questions or complaints about how Cadence handles your data can be sent to hello@upgraded.au.
Cadence's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Cadence uses YouTube API Services. By using Cadence you agree to be bound by the YouTube Terms of Service, and Google's handling of your data is governed by the Google Privacy Policy.
Cadence uses the following third-party services to operate. Each has its own privacy policy.
Content sent to AI generation services (Anthropic, Fal.ai) includes your business profile and content brief. Photos you add to your Cadence photo library are sent to Anthropic once, to be described so Cadence can match them to posts; a post built on one of your photos crops it (adding your own logo when your brand kit asks for it) and never alters it otherwise, and it is sent to Fal.ai only if you choose to make a video from it. Apart from the public first name of a reviewer you ask Cadence to reply to (see section 4), we do not send personally identifiable information to these services.
We retain your data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your account data within 30 days, except where retention is required by law (e.g. billing records).
Platform access tokens are deleted when you disconnect a platform or delete your account.
You have the right to:
To exercise any of these rights, contact us at hello@upgraded.au.
All data is encrypted in transit (TLS) and at rest. OAuth tokens are stored in a secured database, and every request for your data is scoped to your account by a single server-side authorisation boundary that is enforced automatically on every deploy. API keys are stored as one-way SHA-256 hashes. We do not store raw IP addresses.
We may update this policy from time to time. We will notify you by email before material changes take effect. The date at the top of this page reflects the most recent update.
Privacy questions or requests: hello@upgraded.au