1. Introduction
CadenceRadar ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our engineering delivery intelligence platform.
Our privacy-first approach means we design our systems to minimize data collection and maximize privacy protection while still providing valuable insights to engineering leaders.
This policy applies to all users of our platform, website, and related services. By using our services, you consent to the data practices described in this policy.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Name and email address
- Company information and job title
- Account preferences and settings
- Billing and payment information (processed securely through third-party providers)
- Communication preferences and notification settings
2.2 Platform Usage Data
We collect aggregated, non-personal data about:
- Task completion patterns and velocity metrics (without content)
- Calendar availability and meeting patterns (time blocks only)
- System performance and usage statistics
- Feature usage and interaction patterns
- Integration connection status and health
- Dashboard views and report generation frequency
2.3 Technical Information
We automatically collect:
- IP address, browser type, and operating system
- Device information and screen resolution
- Log files, error reports, and performance metrics
- Cookies and similar tracking technologies
- Referral sources and navigation patterns
3. How We Use Your Information
We use collected information to:
- Provide and maintain our platform services and features
- Generate delivery risk assessments and team health insights
- Improve platform performance, reliability, and user experience
- Communicate with you about your account, updates, and support
- Provide customer support and technical assistance
- Process billing and manage subscriptions
- Conduct research and development for new features
- Ensure security and prevent fraud or abuse
- Comply with legal obligations and regulatory requirements
- Send marketing communications (with your consent)
4. Privacy-First Principles
4.1 No Personal Content Access
We never access, store, or analyze:
- Task descriptions, comments, or content
- Meeting details, calendar content, or personal schedules
- Code repositories, source code, or development artifacts
- Personal communications, messages, or emails
- Individual performance reviews or personal documents
- Private conversations or team discussions
4.2 Aggregated Data Only
Our analytics work exclusively with:
- Metadata and timing patterns without personal identifiers
- Aggregated team-level metrics and trends
- Statistical correlations and anonymous usage patterns
- Velocity measurements and delivery risk indicators
- Calendar conflict patterns without meeting details
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in these limited circumstances:
- With your explicit written consent
- To comply with legal obligations, court orders, or regulatory requirements
- To protect our rights, property, and safety, or that of our users
- With trusted service providers under strict confidentiality agreements
- In connection with a merger, acquisition, or sale of assets (with notice)
- To prevent fraud, security threats, or illegal activities
- With law enforcement when required by applicable law
6. Data Security
We implement comprehensive security measures including:
- End-to-end encryption for all data transmission and storage
- Regular security audits and penetration testing
- Multi-factor authentication requirements for all accounts
- Role-based access controls and principle of least privilege
- Regular security training for all employees and contractors
- Incident response and breach notification procedures
- SOC 2 Type II compliance and annual security certifications
- Data backup and disaster recovery procedures
- Network security monitoring and intrusion detection
7. Data Retention
We retain your information only as long as necessary for legitimate business purposes:
- Account data: Until account deletion plus 30 days for recovery
- Usage analytics: 24 months maximum for trend analysis
- Support communications: 12 months for quality assurance
- Billing records: 7 years as required by tax regulations
- Security logs: 13 months for incident investigation
- Legal compliance data: As required by applicable law
- Marketing data: Until consent is withdrawn
8. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request a copy of your personal information
- Correction: Update or correct inaccurate data
- Deletion: Request deletion of your account and data
- Portability: Export your data in a machine-readable format
- Restriction: Limit how we process your information
- Objection: Object to certain types of processing
- Consent withdrawal: Withdraw consent for marketing communications
- Complaint: File complaints with data protection authorities
- Non-discrimination: Exercise rights without penalty
9. International Data Transfers
Your data may be processed in the United States and other countries where we operate. We ensure appropriate safeguards are in place for international transfers, including:
- Standard contractual clauses approved by regulatory authorities
- Adequacy decisions from relevant data protection authorities
- Certification schemes and codes of conduct
- Binding corporate rules for intra-group transfers
- Explicit consent for specific transfer scenarios
10. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience. For detailed information about our cookie practices, please see our Cookie Policy.
You can control cookie settings through your browser or our cookie preference center.
11. Third-Party Services
Our platform integrates with third-party services for enhanced functionality. These integrations are governed by the privacy policies of the respective providers:
- Task management platforms (Jira, Asana, Trello)
- Calendar services (Google Calendar, Outlook)
- Communication tools (Slack, Microsoft Teams)
- Version control systems (GitHub, GitLab)
- Analytics and monitoring services
12. Children's Privacy
Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information promptly.
13. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes via:
- Email notification to your registered address
- In-platform notifications and announcements
- Updates to our website with change summaries
- For material changes, we may require re-consent
Your continued use of our services after changes become effective constitutes acceptance of the updated policy.
14. Contact Us
If you have questions about this Privacy Policy or our privacy practices, please contact us:
