Cadence from Upgraded Privacy Policy

1. Who we are

Cadence, published as "Cadence from Upgraded", is operated by Upgraded Co Pty Ltd ("Upgraded", "we", "us"), based in Queensland, Australia. This policy explains what data we collect, how we use it, and how we protect it. It applies to the Cadence from Upgraded application and everything at cadence.upgraded.au.

Contact: hello@upgraded.au

2. What we collect

Account information

When you sign up, we collect your email address and (optionally) your name. This is used to create and manage your Cadence account.

Business profile

During onboarding, we collect information about your business: name, industry, brand voice, audience description, content themes, and website URL. This is used to generate content that matches your brand.

Platform connections

When you connect a social media or advertising platform (Meta, TikTok, LinkedIn, Google, and others), we store the OAuth access tokens required to publish content and read performance data on your behalf. These tokens are stored securely and scoped to the permissions you granted.

Content and performance data

We store all content generated and published through Cadence, along with performance metrics (reach, engagement, impressions) read back from connected platforms. This data is used to improve future content generation for your account.

Conversion events

If you install the Cadence tracking script on your website, we collect page visit data including UTM parameters, page URL, referrer, and (optionally) conversion events such as purchases. IP addresses are one-way hashed and never stored in raw form. This data is used to attribute site traffic and conversions back to published posts.

Billing information

Payment processing is handled by Stripe. We do not store card numbers or payment details. We retain billing history (plan, amount, date) for accounting purposes.

3. How we use your data

• To generate content in your brand voice using AI
• To publish content to your connected social media accounts
• To read performance data from connected platforms and improve future content
• To attribute site conversions to published posts via the tracking script
• To send transactional emails (weekly digest, platform alerts, billing receipts)
• To measure whether our emails are opened and which links are clicked, so we can tell whether Cadence is useful to you. Emails contain a single-pixel image that records an open, and links route through our own domain to record a click. Note that some mail apps, including Apple Mail, load that image automatically whether or not you read the message.
• To operate, maintain, and improve the Cadence platform

We do not sell your data to third parties. We do not use your data to train AI models shared across other clients.

4. Third-party services

Cadence uses the following third-party services to operate. Each has its own privacy policy.

• Supabase: database and authentication (data stored in AWS Sydney region)
• Vercel: application hosting
• Anthropic: AI content generation (Claude)
• Fal.ai: AI image and video generation
• Stripe: payment processing
• Resend: transactional email delivery
• Meta (Facebook/Instagram): publishing and performance data
• TikTok: publishing and performance data
• Google: Google Ads, Analytics, and Search Console integrations
• LinkedIn: publishing
• Pinterest: publishing

Content sent to AI generation services (Anthropic, Fal.ai) includes your business profile and content brief. We do not send personally identifiable information to these services.

5. Data retention

We retain your data for as long as your account is active. If you cancel your subscription and request account deletion, we will delete your account data within 30 days, except where retention is required by law (e.g. billing records).

Platform access tokens are deleted when you disconnect a platform or delete your account.

6. Your rights

You have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Disconnect any connected platform at any time
• Turn off the weekly digest at any time, using the unsubscribe link in the footer of any digest or your mail app's own unsubscribe control. No sign-in is needed. Turning it off also stops the open and click measurement described above, because we only measure emails we send you. Emails about something needing your attention, such as a disconnected account, are not marketing and continue.

To exercise any of these rights, contact us at hello@upgraded.au.

7. Security

All data is encrypted in transit (TLS) and at rest. OAuth tokens are stored in a secured database, and every request for your data is scoped to your account by a single server-side authorisation boundary that is enforced automatically on every deploy. API keys are stored as one-way SHA-256 hashes. We do not store raw IP addresses.

8. Changes to this policy

We may update this policy from time to time. We will notify you by email before material changes take effect. The date at the top of this page reflects the most recent update.

9. Contact

Privacy questions or requests: hello@upgraded.au