Cadence Advisors Group LLC ("Cadence", "we", "us", or "our") is a boutique advisory firm providing strategic consulting services on artificial intelligence. This Privacy Policy explains how we collect, use, disclose, and protect information about visitors to our website, prospective clients, current and former clients, and other individuals whose personal information we process in connection with our business.
This policy is written to be compatible with the European Union General Data Protection Regulation (GDPR), the United Kingdom GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other state privacy laws in the United States. Where a specific jurisdiction grants you stronger rights than those described in this policy, those stronger rights apply.
1. Information we collect
We collect only the information we reasonably need to operate our website, deliver our services, comply with law, and communicate with people who have expressed interest in Cadence. Specifically, we may collect:
- Information you provide to us directly: your name, business email, company, job title, phone number, and any details you include in a contact form, proposal request, engagement agreement, or communication with our team.
- Engagement information: materials, data, documents, and information that clients share with us during an engagement. This category may include information that is confidential, proprietary, or, in some cases, personal information about the client's employees or customers. We treat engagement information under separate confidentiality obligations (see Section 6).
- Billing and payment information: for clients who pay by card, payment details are collected and processed directly by our payment processor, Stripe, Inc.We do not store full payment card numbers on our systems; we typically retain only the last four digits, card brand, and an internal reference issued by Stripe. Payment processing is subject to Stripe's own privacy policy.
- Website usage information: information automatically collected when you visit our website, including IP address (which may be truncated), user agent, referring URL, pages viewed, and the time and date of your visit. We use privacy-preserving analytics to understand how the site is used.
- Cookies and similar technologies: we use a small number of essential cookies for site function. Any non-essential analytics or preference cookies are used only where permitted by law and, where required, after obtaining your consent through our cookie banner.
We do not knowingly collect personal information from children under the age of 16. Our services are directed to businesses, not to individuals acting in a personal capacity.
2. How we use information
We use the information we collect for the following purposes, each of which corresponds to one or more lawful bases under GDPR:
- To respond to inquiries, schedule conversations, prepare proposals, and negotiate engagement terms (pre-contractual measures).
- To deliver engagements, invoice clients, and provide ongoing advisory services (performance of a contract).
- To maintain and improve our website, analyze how the site is used, and protect it from abuse (legitimate interests).
- To send occasional substantive writing and engagement news to people who have opted in (consent). You can withdraw consent at any time using the unsubscribe link in any email or by contacting us.
- To comply with tax, accounting, anti-money-laundering, sanctions, and other legal obligations (legal obligation).
- To defend, establish, or exercise legal claims (legitimate interests or legal obligation).
We do not sell personal information, and we do not share personal information with third parties for their own marketing purposes. We do not use your personal information to train any generative AI model, and we do not provide engagement information to any AI system provider in a way that allows your data to be used to train their models.
3. Service providers and sub-processors
We rely on a small number of reputable service providers to operate our business. Each is contractually required to protect information to a standard at least equivalent to our own. Our primary categories of service providers are:
- Payment processing: Stripe, Inc., for card payments and subscription billing.
- Website hosting and infrastructure: Vercel Inc. and Amazon Web Services (AWS) for hosting, content delivery, and related services.
- Email and scheduling: reputable business email and calendar providers used for day-to-day communication.
- Analytics: a privacy-preserving, server-side analytics platform configured to drop or truncate IP addresses and to avoid cross-site tracking.
- Document storage and collaboration: encrypted storage providers used to host engagement materials.
4. International transfers
Cadence is headquartered in the United States, and our service providers are located in the United States and other jurisdictions. Where personal information originating in the European Economic Area, the United Kingdom, or Switzerland is transferred to a jurisdiction that has not been granted adequacy status, we rely on Standard Contractual Clauses or other valid transfer mechanisms, supplemented by technical and organizational measures appropriate to the risk.
5. Your rights
Subject to applicable law, you may have the following rights regarding your personal information: the right to access, correct, delete, restrict, or object to the processing of your personal information; the right to data portability; the right to withdraw consent where we process information on that basis; and the right to lodge a complaint with a supervisory authority.
If you are a California resident, you have additional rights under CCPA/CPRA, including the right to know the categories of personal information we collect and share, the right to request deletion or correction of personal information, the right to limit the use of sensitive personal information, and the right not to be discriminated against for exercising your rights. We do not "sell" personal information as that term is defined by CCPA, and we do not share personal information for cross-context behavioral advertising.
To exercise any of these rights, email privacy@cadenceadvisors.com. We will verify your identity before responding substantively to any request and will respond within the timeframes required by applicable law.
6. Confidentiality of engagement information
Information that clients share with us in connection with an engagement is treated under the confidentiality provisions of our engagement agreement, in addition to this Privacy Policy. We limit access to engagement information to the personnel and sub-processors who reasonably need it to perform the engagement, and we do not use engagement information for purposes beyond the engagement without the client's written consent.
7. Data retention
We retain personal information for as long as reasonably necessary to provide our services, comply with legal obligations (for example, tax and anti-money-laundering record-keeping), resolve disputes, and enforce our agreements. When personal information is no longer needed, we securely delete it or anonymize it.
8. Security
We maintain administrative, technical, and physical safeguards designed to protect personal information from unauthorized access, disclosure, alteration, and destruction. These include encryption in transit, encryption at rest for engagement materials, role-based access control, multi-factor authentication, and periodic access review. No method of transmission or storage is perfectly secure; if we become aware of a security incident affecting your personal information, we will notify you in accordance with applicable law.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of the page and, where appropriate, notify you by email or by a prominent notice on our website.
10. Contact us
Questions about this policy, or about our processing of your personal information, should be directed to:
Cadence Advisors Group LLC
Attn: Privacy
privacy@cadenceadvisors.com