Privacy Policy

This Privacy Policy explains how Cadaba ("Cadaba", "we", "us") collects, uses, discloses and safeguards information when you use our website and our service (the "Service"). We are committed to handling personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

Who we are

Cadaba provides an AI revenue platform for service businesses. Our customers are businesses ("Customers") who connect their own communication channels so Cadaba can help them respond to and convert their leads. If you are an end customer of one of those businesses, the business is the controller of your personal information and its own privacy policy governs that relationship; we process that information on the business's behalf.

Information we collect

• Account & contact information you provide (name, business name, email, phone) when you request access, contact us, or set up the Service.
• Connected channel data that a Customer authorizes us to access to deliver the Service — for example email messages, SMS, call records, web-form submissions and calendar availability for that Customer's own accounts.
• Usage and device data such as pages visited and aggregate, privacy-first analytics. Our public website does not use advertising cookies.

SMS/text messaging

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties. This applies both to phone numbers and SMS opt-in data that Cadaba collects directly, and to any end-customer phone numbers or SMS opt-in data that Cadaba processes on a Customer's behalf — Cadaba does not share or sell that information.

Message frequency varies depending on the services you request. Message and data rates may apply.

How we use information

• To operate and provide the Service — drafting suggested replies, follow-ups, quotes and scheduling for a Customer's review and approval.
• To maintain, secure, debug and improve the Service.
• To communicate with you about access, support and account matters.
• To comply with legal obligations.

Every piece of generated copy is reviewed by a human at the Customer before it is sent. Cadaba does not send communications on a Customer's behalf without that review.

Google user data and the Google API Services User Data Policy

When a Customer connects a Google account (for example Gmail), Cadaba requests only the access needed to provide its features. We may access Google user data to:

• read incoming messages in the connected mailbox so the Service can draft a suggested reply and understand where a conversation stands;
• create and update draft replies, and apply labels, in the connected mailbox so the Customer's reviewer can review and approve a draft before it is sent; and
• send replies that the Customer's reviewer has explicitly approved, on that Customer's behalf.

Limited Use. Cadaba's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Google user data only to provide and improve the user-facing features described above.
• We do not use Google user data for advertising.
• We do not sell Google user data.
• We do not transfer Google user data to others except as necessary to provide or improve these features, to comply with applicable law, or as part of a merger or acquisition with appropriate safeguards — and never to build advertising profiles.
• We do not use Google user data to develop, improve or train generalized or standalone artificial-intelligence or machine-learning models. Generated drafts are produced for the specific Customer interaction and are not used to train general-purpose models.
• We allow humans to read Google user data only with the Customer's consent for support, for security, to comply with law, or where the data is aggregated and anonymized.

Sharing and service providers

We share information with a limited set of service providers (sub-processors) who help us run the Service — for example cloud hosting and the AI model provider that generates draft copy. These providers act on our instructions, are bound to protect the information, and may use it only to provide their services to us. We do not sell personal information.

Data retention and deletion

We retain personal information only as long as needed to provide the Service and for legitimate or legal purposes, then delete or anonymize it. A Customer or individual may request deletion of their personal information at any time by contacting us; we honour verified deletion requests consistent with our PIPEDA obligations. Disconnecting a Google account stops further access, and you may also revoke Cadaba's access from your Google Account security settings.

Security

We use industry-standard safeguards — encryption in transit and at rest, least-privilege access controls, and secret management — to protect information. No method of transmission or storage is perfectly secure, but we work to protect your information and review our practices regularly.

Your rights

Subject to applicable law, you may request access to, correction of, or deletion of your personal information, and you may withdraw consent. To exercise these rights, contact us using the details below. You may also contact the Office of the Privacy Commissioner of Canada.

International transfers

Information may be processed in Canada, the United States or other jurisdictions where we or our service providers operate. Where required, we use appropriate safeguards for such transfers.

Children

The Service is for businesses and is not directed to children, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the "Last updated" date.

Contact us

Questions or privacy requests: hi@cadaba.com.