Image description
LEGAL

Privacy Policy

Effective date: July 10, 2026

This Privacy Policy explains how Cadix Digital Solutions, LLC ("Cadix," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use Cadix, including our website at cadix.app, our application, and related services (the "Service").

Cadix is an operations-focused document and workflow management product. Organizations use Cadix to manage documentation governance, internal workflows, document review, assignments, comments, metadata, and operational visibility.

This draft is a starting point. It should be reviewed by counsel before publication.

1. Who this policy applies to

This policy applies to:

  • Visitors to our public websites.
  • Users of the Cadix application.
  • Administrators, employees, contractors, and authorized users of Cadix customer accounts.
  • People who contact us, request support, or communicate with us.

When Cadix processes content, documents, comments, assignments, metadata, or other information submitted by a customer into the Service, we generally process that information on behalf of the customer. The customer controls that content and is responsible for providing any notices or permissions required for its users and personnel.

2. Information we collect

We collect information in the following categories.

Account and contact information

This may include name, work email address, company name, job title, phone number, account role, login credentials, and authentication information.

Customer content

This may include documents, document metadata, review comments, assignments, workflow status, approval records, internal notes, attachments, audit history, and other content uploaded to or created in Cadix.

Usage and device information

This may include IP address, device identifiers, browser type, operating system, pages viewed, features used, referring URLs, log data, timestamps, session information, and diagnostic data.

Billing and transaction information

If Cadix offers paid plans, billing information may include plan type, billing contact, payment status, invoice history, and transaction records. Payment card information, if collected, is processed by our payment provider and not stored directly by Cadix unless stated otherwise.

Support and communications

If you contact us, we may collect the contents of your message, contact details, support history, and any information you choose to provide.

Cookies, analytics, and similar technologies

We may use cookies, local storage, pixels, and similar technologies to operate the Service, keep users signed in, remember preferences, secure sessions, measure usage, and improve performance. Where required, we will provide choices for non-essential cookies.

Our public website at cadix.app uses Google Analytics to help us understand website traffic and usage. Google Analytics is used on the website only and is not used inside the Cadix application.

3. How we use information

We use personal information to:

  • Provide, operate, secure, and maintain the Service.
  • Create and manage accounts.
  • Enable document management, workflow, review, assignment, comment, and metadata features.
  • Authenticate users and prevent unauthorized access.
  • Provide customer support and respond to requests.
  • Monitor performance, troubleshoot issues, and improve the Service.
  • Send administrative messages, security notices, service updates, and billing notices.
  • Analyze website usage and improve product functionality.
  • Enforce our agreements and protect our rights, users, customers, and the Service.
  • Comply with legal obligations.

We do not use customer content for advertising.

4. Legal bases for processing

Where laws such as the GDPR or UK GDPR apply, we process personal information under one or more of the following legal bases:

  • Contract: to provide the Service and perform our agreements.
  • Legitimate interests: to secure, maintain, analyze, and improve the Service, communicate with customers, and prevent abuse.
  • Consent: where we ask for consent, such as for certain cookies or marketing communications.
  • Legal obligation: to comply with applicable laws, legal process, and regulatory requirements.

5. How we disclose information

We may disclose personal information as described below.

Service providers and subprocessors

We may disclose information to vendors that help us provide the Service, such as cloud hosting, database infrastructure, website analytics, error monitoring, customer support, email delivery, security, and payment processing providers. These providers are authorized to use information only as needed to provide services to us.

Current subprocessors and service providers: Vercel for website and application hosting; Supabase for database, authentication, and related backend infrastructure; Google Analytics for website analytics on cadix.app only.

Customer administrators

Customer administrators may access information associated with their Cadix workspace, including user profiles, documents, comments, workflow activity, audit logs, and account settings.

Legal and safety reasons

We may disclose information if we believe it is reasonably necessary to comply with law, legal process, or government requests; protect the rights, property, or safety of Cadix, our customers, users, or others; prevent fraud or abuse; or enforce our agreements.

Business transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be disclosed or transferred as part of that transaction.

With consent or direction

We may disclose information with your consent or at your direction.

We do not sell personal information for money. We also do not share personal information for cross-context behavioral advertising unless we state otherwise and provide legally required choices.

6. Data retention

We retain personal information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and support legitimate business operations.

Customer content is retained according to the customer's account settings, agreement, deletion instructions, or applicable retention configuration. After account termination, customer content may be deleted or retained for a limited period as described in the customer agreement or backup retention schedule.

7. Security

We use administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, encryption in transit, monitoring, logging, least privilege access practices, and secure infrastructure controls.

No method of transmission or storage is completely secure. If you believe your account or information has been compromised, contact us at support@cadix.app.

8. International transfers

Cadix may process and store information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards for international transfers, such as standard contractual clauses or other lawful transfer mechanisms.

9. Your privacy choices and rights

Depending on where you live, you may have rights to:

  • Request access to personal information.
  • Request correction of inaccurate personal information.
  • Request deletion of personal information.
  • Request restriction or objection to processing.
  • Request portability of personal information.
  • Withdraw consent where processing is based on consent.
  • Opt out of certain sharing, targeted advertising, or sales, if applicable.
  • Appeal a privacy request decision, where required by law.

To make a request, contact us at support@cadix.app. We may need to verify your identity before responding. If your information is controlled by a Cadix customer, we may direct your request to that customer.

10. California privacy notice

This section applies to California residents where the California Consumer Privacy Act, as amended, applies.

Categories collected

In the past 12 months, we may have collected the following categories of personal information:

  • Identifiers, such as name, email address, IP address, account ID, and device identifiers.
  • Commercial information, such as subscription, billing, and transaction records.
  • Internet or network activity, such as log data, feature usage, session data, diagnostic data, and website analytics data from cadix.app.
  • Professional or employment-related information, such as company name, job title, account role, and work contact information.
  • Customer content, which may include information submitted by customers and users.
  • Inferences, such as product usage patterns used to improve and secure the Service.

Sources

We collect information from you, your organization, your use of the Service, devices and browsers, service providers, website analytics tools used on cadix.app, and integrations or third-party services you connect to Cadix.

Purposes

We use these categories for the purposes described in Section 3.

Disclosure

We may disclose these categories to service providers, customer administrators, legal or safety recipients, business transfer recipients, and parties you direct us to disclose information to.

Sale or sharing

We do not sell personal information for money. We do not share personal information for cross-context behavioral advertising unless we state otherwise and provide a legally required opt-out.

Sensitive personal information

Cadix is not designed to collect sensitive personal information unless a customer or user chooses to include it in customer content. We do not use sensitive personal information to infer characteristics about a person.

California rights

California residents may have the right to know, access, correct, delete, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising privacy rights.

To exercise these rights, contact support@cadix.app or use [privacy request form URL]. Authorized agents may submit requests as permitted by law.

11. Marketing communications

You may opt out of marketing emails by using the unsubscribe link in the email or contacting us. We may still send non-marketing messages, such as account, security, support, and transactional notices.

12. Children's privacy

Cadix is intended for business and organizational use. It is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps.

13. Third-party links and integrations

The Service may include links or integrations with third-party services. Their privacy practices are governed by their own policies, not this Privacy Policy.

14. Changes to this policy

We may update this Privacy Policy from time to time. If changes are material, we will provide notice by updating the effective date, posting notice in the Service, sending email, or using another reasonable method.

15. Contact us

Cadix Digital Solutions, LLC
Email: support@cadix.app
Security contact: support@cadix.app