Privacy Policy

This Privacy Policy explains how Cadence (“Cadence,” “we,” “us,” or “our”) collects, uses, discloses, and safeguards your personal information when you use our websites, applications, and services (collectively, the “Services”). It should be read together with our Terms of Service. By using the Services, you acknowledge the practices described in this Policy.

Cadence is an online marketplace that connects businesses (such as churches, venues, and event organizers) with freelance musicians. We are based in Ontario, Canada, and we handle personal information in accordance with applicable privacy laws, including Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Depending on where you live, you may have additional rights, described in Section 9.

Information you provide directly. When you create an account, we collect your name, email address, password, and account role (business or musician). When you build a profile, we collect the details you choose to add, such as a photo or logo, biography, location, instruments, genres, rates, availability, and links. For businesses, we collect organization details. We also collect the content you submit through the Services, including bookings, job postings, messages, community posts, photos and videos, reviews, and support requests.

Payment and payout information. Payments and payouts are processed by our payment processor, Stripe. When you pay for a booking or set up payouts, you provide information (such as card or bank details and, for payouts, identity and tax information) directly to Stripe. We do not collect or store your full card or bank account numbers on our own servers; we receive limited information such as confirmation of payment, payout status, and non-sensitive identifiers.

Information collected automatically. When you use the Services, we and our providers may automatically collect technical information such as your device type, browser, IP address, pages viewed, actions taken, and timestamps, including through cookies and similar technologies (see Section 7).

Information from third parties. We may receive information about you from our service providers, such as Stripe (for example, verification and payout status), and from other users (for example, when they invite you to a booking or leave a review).

We use personal information to: create and manage your account; operate the marketplace, including discovery, bookings, messaging, and reviews; process payments and payouts through Stripe; send transactional communications such as confirmations, notifications, and account or security messages; provide customer support; personalize and improve the Services; maintain the safety, security, and integrity of the Services, including detecting and preventing fraud, abuse, and violations of our Terms (such as attempts to circumvent the platform); and comply with legal obligations.

We rely on various legal bases for processing where applicable, including performance of our contract with you, your consent, our legitimate interests in operating and improving the Services, and compliance with legal obligations.

With other users. The marketplace works by sharing certain information between users. Your profile, listings, community posts, and reviews are visible to other users as appropriate, and when a booking is arranged, relevant details are shared between the business and musician involved so they can communicate and complete the engagement.

With service providers. We share information with vendors who perform services on our behalf, including: Stripe (payment processing, payouts, and identity verification); Supabase (database, authentication, and file storage hosting); and our email delivery provider (for transactional and support emails). These providers are permitted to use personal information only to provide services to us.

For legal and safety reasons. We may disclose information if required by law, regulation, legal process, or governmental request, or where we believe disclosure is necessary to protect the rights, property, or safety of Cadence, our users, or others, or to enforce our Terms.

Business transfers. If Cadence is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction, subject to this Policy.

We do not sell your personal information for money. We do not share your personal information for cross-context behavioral advertising.

We retain personal information for as long as your account is active and as needed to provide the Services, comply with our legal obligations (including tax, accounting, and record-keeping requirements related to payments), resolve disputes, and enforce our agreements. When information is no longer needed, we delete or de-identify it. Some information may persist in backups for a limited period, and certain records may be retained where required or permitted by law. Content you shared with others may remain visible to them after your account is closed.

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, loss, misuse, or alteration, including encryption in transit, access controls, and reliance on established infrastructure providers. Payment card and bank details are handled by Stripe, a PCI-DSS-compliant payment processor, and are not stored on our servers. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

We and our providers use cookies and similar technologies to keep you signed in, remember your preferences, operate and secure the Services, and understand how the Services are used. Some cookies are essential for the Services to function (for example, authentication). You can control non-essential cookies through your browser settings, but disabling certain cookies may affect functionality.

We and our service providers may store and process personal information in Canada, the United States, and other countries where our providers operate. These countries may have data-protection laws that differ from those in your jurisdiction. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

Depending on your location, you may have rights regarding your personal information, including the rights to access, correct, update, or delete your information; to withdraw consent; to request a copy of certain information in a portable format; to object to or restrict certain processing; and to lodge a complaint with a supervisory authority. You can exercise many of these rights directly in your account settings, or by contacting us using the details in Section 13.

For residents of the European Economic Area and the United Kingdom: you have rights under the GDPR/UK GDPR, including access, rectification, erasure, restriction, portability, and objection, and the right to complain to your local data-protection authority.

For residents of California and certain other U.S. states: you have rights to know what personal information we collect and how we use and disclose it, to access and delete your information, to correct inaccurate information, and to not be discriminated against for exercising your rights. As noted above, we do not sell personal information or share it for cross-context behavioral advertising.

For residents of Canada: you may access and request correction of your personal information and may direct questions or complaints to us or to the Office of the Privacy Commissioner of Canada.

We will respond to verifiable requests within the time required by applicable law. We may need to verify your identity before acting on a request, and you may use an authorized agent where permitted by law.

The Services are intended for users who are at least 18 years old. We do not knowingly collect personal information from children. If we learn that we have collected personal information from a child, we will take steps to delete it. If you believe a child has provided us with personal information, please contact us.

The Services may contain links to third-party websites or rely on third-party services (such as Stripe). This Policy does not apply to the practices of those third parties, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services you use.

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the Services or by email and update the “Effective date” above. Your continued use of the Services after the effective date of an updated Policy constitutes acceptance of the changes.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us through the Help option in the application or by email at the address published below. We will do our best to respond promptly and to resolve any concerns.