Legal
Privacy Policy
Cadenly is a product of Brilio LLC ("Cadenly," "we," "us," or "our"). This Privacy Policy explains what information we collect when you use the Cadenly website at cadenly.io and the Cadenly application at app.cadenly.io (together, the "Service"), how we use and share it, and the choices and rights you have. By using the Service, you agree to the practices described here.
On this page
1. Information we collect
We collect the following categories of information:
Account information
When you create an account, we collect your name, email address, and a password. Passwords are stored only as a salted hash — we never store them in plain text and cannot see them.
Billing information
Paid subscriptions are processed by our payment provider, Stripe. When you subscribe, Stripe collects and stores your payment card details directly; Cadenly does not receive or store full card numbers. We retain limited billing records such as your subscription status, plan, billing email, the last four digits of your card, and invoice history.
Content you provide
The Service exists to help you produce product and program management artifacts, so most of what we store is the content you create or upload. Depending on the workflows you use, this can include product requirements documents, specifications, feature maps, user flows, epics, user stories, test cases, roadmaps, prioritization data, competitive and customer-feedback inputs, meeting transcripts and memos, board and issue-tracker imports, and the financial and planning inputs you enter into Living Plan (such as runway figures, revenue assumptions, milestones, and investor contacts). We store this content so the Service can function, persist your projects, and let you return to your work.
Connected services
If you choose to connect a third-party service such as GitHub or Jira, we access only the data you authorize through that connection — for example, importing issues, boards, or a repository's structure to run a workflow. You can disconnect these integrations at any time.
Usage and device information
When you use the Service we automatically collect technical and usage information, including your IP address, browser and device type, pages and features used, actions taken within workflows, timestamps, and diagnostic logs. We use this to operate, secure, and improve the Service.
Cookies and similar technologies
We use cookies and local browser storage that are strictly necessary to operate the Service — primarily to keep you signed in and maintain your session. We do not use third-party advertising cookies and we do not sell your information for advertising. If we add optional analytics in the future, we will update this policy and, where required, ask for your consent.
2. How we use information
We use the information we collect to:
- provide, maintain, and operate the Service and your account;
- generate the outputs you request from AI-assisted workflows;
- process payments, manage subscriptions, and prevent billing fraud;
- store and sync your projects so your work persists across sessions;
- respond to your support requests and communicate with you about the Service;
- monitor, secure, debug, and improve the Service and develop new features;
- comply with legal obligations and enforce our Terms of Service.
We rely on your consent, the performance of our contract with you, and our legitimate interests in operating and improving the Service as the legal bases for these uses, depending on your jurisdiction.
3. AI processing of your content
Cadenly's workflows are powered by large language models provided by Anthropic, PBC through its API. When you run a workflow, the relevant content — such as your prompts, documents, and the project data needed for that step — is transmitted to Anthropic so it can generate a response, which we return to you.
Anthropic processes this content under its commercial API terms. Anthropic does not use data submitted through its API to train its models, and such content is retained by Anthropic only for limited periods consistent with its API and trust-and-safety policies. We send only the content needed to fulfill your request, and we do not use your content to train any models of our own.
4. How we share information
We do not sell your personal information. We share information only in these limited circumstances:
- Service providers (subprocessors). We share information with vendors who host our infrastructure, store data, process payments, and provide AI processing, listed in the next section. They may use the information only to provide services to us.
- Connected services you authorize. When you connect GitHub, Jira, or similar tools, data flows between Cadenly and that service as you direct.
- Legal and safety. We may disclose information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is reasonably necessary to protect the rights, property, or safety of Cadenly, our users, or others.
- Business transfers. If Brilio LLC is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.
- With your direction. We share information at your request or with your consent, including when you choose to export or share your own content.
5. Subprocessors
We rely on the following service providers to operate the Service. Each processes only the data necessary for its function:
| Provider | Purpose |
|---|---|
| Anthropic, PBC | AI processing that powers Cadenly's workflows |
| Stripe, Inc. | Subscription billing and payment processing |
| Supabase | Application database where your account and content are stored |
| Railway | Hosting for the Cadenly application backend |
| Vercel | Hosting for the Cadenly marketing site and front end |
We update this list as our infrastructure changes. The current list is always available in this policy.
6. Data retention
We retain your account information and content for as long as your account is active, so the Service can function and your work remains available to you. We retain billing records as required for tax, accounting, and legal purposes. When you delete a project, it is removed from your active workspace; residual copies may persist in encrypted backups for a limited period before being overwritten. When you close your account, we delete or anonymize your personal information within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.
7. Your rights and choices
Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of the European Economic Area and the United Kingdom have these rights under the GDPR and UK GDPR. Residents of California have rights under the CCPA/CPRA, including the right to know what personal information we collect, to request deletion, and to not be discriminated against for exercising those rights. We do not sell or "share" personal information as those terms are defined under California law.
You can access and update most of your information directly in your account settings, and you can delete projects yourself at any time. To exercise any other right, or to request deletion of your account, email us at privacy@cadenly.io and we will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.
8. Security
We protect your information using encryption in transit (HTTPS/TLS), hashed passwords, scoped access controls, and reputable infrastructure providers. No method of transmission or storage is completely secure, so while we work to protect your information, we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.
9. International transfers
Cadenly is operated from the United States, and our service providers may process your information in the United States and other countries. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data-protection laws may differ from those in your country. Where required, we rely on appropriate safeguards such as standard contractual clauses for these transfers.
10. Children's privacy
The Service is intended for business use by adults and is not directed to children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Service or by email. Your continued use of the Service after an update means you accept the revised policy.
12. Contact us
If you have questions about this Privacy Policy or how we handle your information, contact us at privacy@cadenly.io. Cadenly is operated by Brilio LLC.