Kadenzo Privacy Policy

Last updated: August 2026

1. Who We Are and What This Covers

Kadenzo is operated by Jan Oršula, IČO 75463822, Marie Majerové 1633, 356 01 Sokolov, Czech Republic. For the purposes of the GDPR we are the data controller for the data described here, and you can reach us at jan@kadenzo.app. We are not required to appoint a Data Protection Officer.

This policy covers two things:

  • kadenzo.app — this website: the free tools, the guides, the contact form, and the newsletter. Most of it you can use without an account, and many of the tools never send your input anywhere at all.
  • studio.kadenzo.app — the scheduling app: your account, your connected social profiles, your scheduled posts, and your subscription.

Cookies have their own page, with a table of every cookie and a button to change your choice: Cookie Policy.

2. Using the Free Tools on This Site

You do not need an account to use the tools, and we do not build a profile of you from them. How your input is handled depends on the tool:

  • Tools that run entirely in your browser — image resizers, grid splitters, the background remover, video conversion, counters, formatters, previewers and similar. Your text, images and video are processed on your own device and are never uploaded to us. We never receive them, so there is nothing for us to store or delete. Each such tool says so on its own page.
  • Tools that use AI — the caption, bio, hook, title, hashtag, alt-text and chapter generators. The text you submit is sent to our server and passed to OpenAI to produce the result, then returned to you. We do not store your prompts or the generated output in a database, and we do not use them to train models. OpenAI processes the request as our processor under its API terms, which exclude API data from model training.
  • The voice generator — the script you type is sent to Google Cloud Text-to-Speech to be read aloud, and the audio is returned to you. The script is not stored.
  • The link previewer — fetches the public page at the URL you enter so it can show you its preview card. The URL is requested by our server; it is not stored.

We apply rate limiting to the AI tools to prevent abuse, which means our servers briefly process your IP address for that purpose.

3. Contact Form and Newsletter

  • Contact form: your name, email and message are delivered to us by email through Resend. We keep the correspondence for up to 2 years so we can follow up and refer back to it.
  • Newsletter: we store the email address you give us, and nothing else, to send the newsletter. Every email has an unsubscribe link, and unsubscribing removes you from the list.

4. Information We Collect in the App

  • Account Data: Name, email, password.
  • Third-Party Login Data: If you sign in with Google, we collect your Google account email and profile information for authentication purposes only.
  • Social Media Platform Data:
    • Meta Platforms (Facebook, Instagram, Threads): User ID, page/account names, page access tokens, content permissions
    • Pinterest: User ID, board information, authentication tokens for pin creation
    • Other Platforms (X/Twitter, LinkedIn, YouTube, TikTok, Bluesky): Authentication tokens, usernames, profile information necessary for posting
    • Content Data: Posts, images, videos you create and schedule
    • Analytics: Post performance metrics for your own connected accounts
  • Payment Data: Processed securely via Stripe (we never store full card details).
  • Usage Data: Browser, IP address, time zone, app interactions.

5. How We Use Your Data

  • To provide and improve the Service.
  • To authenticate and connect your social media accounts.
  • To publish scheduled posts on your behalf to connected platforms.
  • To display analytics and performance metrics for your content.
  • To process payments and manage subscriptions.
  • To send you updates and important account information.
  • To comply with legal obligations.

6. Our Legal Bases (GDPR Article 6)

We only process personal data where one of these applies:

  • Performance of a contract — running your account, publishing your scheduled posts, showing your analytics, and taking payment. Without this data there is no service to provide.
  • Consent — the newsletter. You give it freely, and you can withdraw it at any time with the unsubscribe link in any issue.
  • Legitimate interests — analytics and advertising measurement, so we can tell which pages and tools are worth keeping and whether our ads pay for themselves. These are on by default rather than opt-in, and you can switch them off at any time on the Cookie Policy page. Doing so does not affect anything else on the site.
  • Legitimate interests — keeping the service secure, preventing abuse of the free tools, and answering the messages you send us. We have weighed these against your rights and use the minimum data needed.
  • Legal obligation — retaining invoices and payment records for the periods Czech tax law requires.

7. Meta Platform Data Handling

When you connect your Facebook, Instagram, or Threads accounts:

  • Data We Access: Only the minimum data required to post content and read basic analytics.
  • Data Storage: Access tokens are encrypted and stored securely in our database.
  • Data Usage: Used solely to perform actions you explicitly request (posting, scheduling, analytics).
  • Data Deletion: You can disconnect accounts anytime. We support Meta's data deletion callbacks.
  • No Third-Party Sharing: We never sell or share your Meta platform data with advertisers or other third parties.

This is separate from our own advertising on Meta, which is described in section 9 and never uses your connected-account data.

8. YouTube API Services

When you connect a YouTube channel, Kadenzo uses YouTube API Services. By using this feature you agree to the YouTube Terms of Service, and your use of data obtained through Google is subject to the Google Privacy Policy.

  • Data We Access: Your own channel's name and avatar (to show which channel is connected); videos you upload through Kadenzo and their thumbnails; and comments on your own videos, which you read and reply to in the Inbox. We never access other users' channels or content.
  • How We Use It: Solely to perform actions you explicitly request — uploading and scheduling your videos, deleting a video you remove in Kadenzo, and reading and replying to comments on your own videos.
  • Storage & Security: OAuth access and refresh tokens are encrypted and stored securely; all API calls use HTTPS.
  • Retention & Deletion: Tokens are deleted immediately when you disconnect YouTube in Settings or delete your account. Kadenzo does not retain copies of your YouTube comments beyond what is needed to display your Inbox.
  • Revoking Access: You can disconnect YouTube anytime in Kadenzo Settings, and you can revoke Kadenzo's access to your Google account at any time via Google security settings.
  • Limited Use: Kadenzo's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use this data for advertising, sell it, or use it to train generalized AI/ML models.

9. Analytics and Advertising

We use Google Analytics 4 to understand which pages people find useful, and Microsoft Clarity to see where our tools trip people up. Clarity records an anonymous replay of your visit — pages opened, scrolling, clicks and taps — which we watch to find the broken step or the button nobody notices. It is configured to mask text and form fields, so what you type into a tool is not captured, and a recording is not linked to your name, email, or any account. We advertise Kadenzo on Google Ads and Meta, which measure whether an ad led to a signup and can show our ads to people who visited before.

These are on by default; we do not put a cookie pop-up in front of you. If you would rather they did not run, the Cookie Policy page switches them off in one click, and remembers it for every later visit. We would rather state that plainly here, where you can act on it, than bury it in a banner.

Switching analytics off is a real off, not a preference we note and ignore. We run Google Consent Mode, so Google's tools drop to a restricted state that stores nothing on your device and cannot identify you. Clarity does not read Consent Mode, so we handle it directly: its script stops loading, and the switch also erases the cookies it already set and ends the recording.

This is entirely separate from the social accounts you connect in the app. We never use your connected-account data, your posts, or your audience for our own advertising, and we never upload them to an ad platform.

10. Data Processors and Service Providers

We work with trusted service providers to deliver our service:

  • Supabase Inc.: Database hosting and authentication services
  • Cloudflare, Inc.: Media storage and content delivery
  • Vercel Inc.: Application hosting and deployment
  • OpenAI, L.L.C.: AI-powered content suggestions and the AI tools on this site
  • Stripe, Inc.: Payment processing (no social media data shared)
  • Resend, Inc.: Transactional and newsletter email delivery
  • Upstash, Inc.: Rate limiting and queueing
  • Google Cloud: Text-to-speech synthesis for the voice generator tool
  • Google Ireland Ltd.: Analytics and advertising measurement — until you switch it off
  • Meta Platforms Ireland Ltd.: Advertising measurement — until you switch it off
  • Microsoft Corporation: Session replay and heatmaps (Microsoft Clarity) — until you switch it off

These processors are contractually bound to protect your data and use it only as we direct. For analytics and advertising, Google, Meta and Microsoft act as independent controllers for parts of the data, and their own policies apply alongside this one.

11. Data Security

  • Industry-standard encryption for data in transit and at rest
  • Row-level security on database access
  • Regular security audits and updates
  • Secure OAuth 2.0 authentication for social platforms
  • Automatic token refresh and validation

12. Your Rights and Controls

Under the GDPR you have the right to access your data, correct it, have it erased, restrict or object to how we process it, and receive it in a portable format. In the app, most of this is self-service:

  • Access: View all data we have about you in your account settings
  • Correction: Update your profile and connected accounts anytime
  • Deletion: Request complete account and data deletion
  • Portability: Export your data in a machine-readable format
  • Disconnection: Remove social media connections instantly
  • Consent Withdrawal: Change your cookie choices on the Cookie Policy page, or unsubscribe from any email

Write to jan@kadenzo.app to exercise any of these; we respond within one month. We do not charge for this, and we do not make automated decisions that produce legal effects about you.

13. Complaints

If you think we have handled your data wrongly, please tell us first — we would rather fix it. You also have the right to complain to a supervisory authority. Ours is the Czech data protection authority:

  • Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, Czech Republic — uoou.gov.cz

If you live elsewhere in the EU or the UK, you may instead complain to your own national authority.

14. Data Retention

  • Account Data: Until you delete your account
  • Posted Content: Removed after 90 days
  • Payment Data: Retained as required by law (typically 7 years)
  • Support Records: 2 years
  • Media Files: Automatically deleted after successful posting
  • Disconnected Social Accounts: Tokens deleted immediately upon disconnection
  • Free tool input: Not retained. Browser-based tools never send it to us; AI tool prompts are passed through and not stored in a database.
  • Newsletter: Until you unsubscribe

15. Sharing Data

We share limited data only with the processors listed in section 10, and with the social media APIs you connect, in order to post and manage content on your behalf.

We never sell personal or social media data, and we do not share it with data brokers.

16. API & Platform Compliance

  • We use APIs of Meta (Facebook, Instagram, Threads), Pinterest, X/Twitter, LinkedIn, YouTube, TikTok, and Bluesky only as necessary to provide the Service
  • We do not use social media data for advertising or analytics outside the Service
  • Users may disconnect accounts at any time via Kadenzo or directly at the platform
  • We comply with each platform's developer policies

17. International Data Transfers

Several of our processors are based in the United States, so your data may be transferred outside the EEA. Those transfers rely on the European Commission's Standard Contractual Clauses, and, where the provider is certified, the EU–US Data Privacy Framework. We apply GDPR-compliant safeguards in every case.

18. Legal Requests and Compliance

We may disclose your information if required by law or valid legal process. We will:

  • Review the legality of all requests
  • Challenge unlawful requests when appropriate
  • Minimize data disclosure to what's legally required
  • Notify you of requests unless legally prohibited
  • Document all requests and our responses

19. California Privacy Rights (CCPA)

California residents have additional rights including the right to know, delete, and opt-out of data sales. We do not sell or share personal information as those terms are defined by the CCPA, and we do not offer financial incentives for personal information. To exercise these rights, email us — we will not discriminate against you for doing so.

20. Children's Privacy

Kadenzo is not intended for children under 16, and we do not knowingly collect their data. If you believe a child has given us personal data, email us and we will delete it.

21. Changes to This Policy

We may update this policy and will notify you of material changes via email or in-app notification. The date at the top always reflects the current version.

22. Contact Us

Kadenzo – operated by Jan Oršula

  • IČO: 75463822
  • Not a VAT payer
  • Business Address: Marie Majerové 1633, 356 01 Sokolov, Czech Republic
  • Email: jan@kadenzo.app
  • Data Deletion Requests: Email jan@kadenzo.app with subject "Data Deletion Request"
  • Support: Contact Form