Privacy Policy

1. Who we are

The data controller responsible for your personal data is:

"Cadenus", "we", "us" and "our" refer to GTW Scaling Solutions S.R.L. throughout this policy.

2. What data we collect

Depending on how you interact with us, we may process the following categories of personal data:

• Account & identity data — name, email address, profile details and the workspace/role you belong to, created when you sign in.
• Authentication data — login credentials and tokens managed through our authentication provider (including Google sign-in, if you choose it).
• Workspace content — the operational data you create in the app: clients, projects, posts, schedules, tasks, notes and uploaded media.
• Connected-account data — when you connect third-party services (e.g. social or calendar accounts) we process the tokens and the data needed to perform the actions you request, such as publishing content on your behalf.
• Usage & technical data — IP address, device and browser information, log data, and error/diagnostic information used to keep the service secure and reliable.
• Communications — the content of messages you send us (e.g. support requests) and any related correspondence.

3. How and why we use your data

We process personal data for the following purposes, each with a legal basis under Article 6 GDPR:

• To provide the service — operating your account, workspace and the features you use (performance of a contract).
• To secure and maintain the platform — authentication, fraud prevention, monitoring, backups and troubleshooting (legitimate interests).
• To communicate with you — sending transactional emails, service notices and responses to your enquiries (contract / legitimate interests).
• To comply with the law — meeting accounting, tax and other legal obligations (legal obligation).
• To improve Cadenus — understanding how the product is used so we can make it better (legitimate interests).

Where we rely on consent (for example certain optional cookies), you may withdraw it at any time.

4. Cookies and similar technologies

This website and the application use a limited set of cookies and local storage that are strictly necessary to keep you signed in, remember your preferences and keep the service secure. We do not use advertising cookies on this site. You can control or delete cookies through your browser settings; disabling essential cookies may prevent parts of the service from working.

5. Service providers and recipients

We share personal data only with trusted providers who process it on our behalf (as processors) under appropriate contractual safeguards, and only as needed to run the service:

• Hosting, database & authentication — to store your data and manage sign-in.
• Network, security & content delivery — to deliver the site securely and protect it from abuse.
• Transactional email — to send login links and service notifications.
• Error monitoring — to detect and fix technical problems.
• Connected integrations you enable — such as social publishing and calendar providers (e.g. Meta/Instagram, Google), used solely to perform the actions you request.

We do not sell your personal data. We may also disclose data where required by law, or to protect our rights, users or the integrity of the service.

Google user data — Calendar integration

If you choose to connect your Google Calendar, Cadenus requests the https://www.googleapis.com/auth/calendar.events scope. We use this access solely to provide the two-way calendar features inside the app — reading your events to show your agenda, and creating, updating or deleting events when you ask us to. We do not access any other Google data.

We store only the OAuth tokens needed to keep the connection working (encrypted at rest) and the event data required to display and sync your agenda. You can disconnect at any time from Settings → Connections in the app, or revoke access from your Google Account permissions; revoking access stops all further use.

Limited Use. Cadenus's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not allow humans to read it except as needed for security, to comply with the law, or where you have given explicit consent.

6. International transfers

Some of our providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards recognised under the GDPR — such as European Commission adequacy decisions or Standard Contractual Clauses — to ensure your data remains protected.

7. How long we keep your data

We keep personal data for as long as your account is active and for as long as needed to provide the service. After your account is closed, we delete or anonymise your data within a reasonable period, except where we must retain certain records to meet legal, accounting or tax obligations, or to resolve disputes.

8. How we protect your data

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, role-based permissions, monitoring and regular backups. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

9. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete data;
• request erasure of your data ("right to be forgotten");
• restrict or object to certain processing;
• receive your data in a portable, machine-readable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at contact@cadenus.io. We will respond within the time limits set by the GDPR. You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing (ANSPDCP) — dataprotection.ro.

10. Children

Cadenus is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, where the changes are significant, take reasonable steps to notify you. Your continued use of the service after an update means you accept the revised policy.

12. Contact us

For any question about this policy or how we handle your data, contact GTW Scaling Solutions S.R.L. at contact@cadenus.io or by post at the address listed in Section 1.