This Privacy Policy explains how SaaS Life OÜ (registry code 16345451, registered at Sepapaja tn 6, 15551 Tallinn, Estonia) (“Cadence”, “we”, “us”) handles personal data in connection with the Cadence website and service. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and Estonian law.

Our two roles

Cadence handles personal data in two distinct capacities, and this matters for your rights:

As a controller for data we decide the purposes of: website visitors, people who submit the demo form, and our business and marketing contacts. This policy governs that data.
As a processor for the data inside the product on behalf of our business customers, including the coaching conversations and the scenarios derived from call recordings and deal data a customer connects. That data is handled under our agreement with the customer and our Data Processing Agreement. For questions about data held inside a customer’s workspace, the customer (your employer) is the controller and your first point of contact.

Personal data we collect (as controller)

Demo and contact requests: name, work email, company, team size, the tools you use, and anything you write in the message field.
Business communications: correspondence and contact details when you email us or engage with sales.
Website usage: limited, privacy-friendly analytics about how the site is used (for example pages viewed and aggregate events). We aim to avoid data that identifies you individually for this purpose.

How we use it and our legal bases

Respond to demo and sales enquiries and provide information you request. Legal basis: steps taken at your request prior to a contract, and our legitimate interest in pursuing business.
Operate, secure, and improve the website. Legal basis: legitimate interest in running a functional, secure site.
Send business communications relevant to your enquiry. Legal basis: legitimate interest or your consent where required.
Comply with legal obligations (for example accounting and tax). Legal basis: compliance with a legal obligation.

We do not sell personal data, and we do not use customer content to train third-party foundation models.

How long we keep it

We keep controller data only as long as needed for the purpose it was collected, then delete or anonymise it. Demo and enquiry data is kept for the duration of the sales relationship and a reasonable period afterwards; records required for legal or accounting reasons are kept for the statutory retention periods. For in-product data, retention is controlled by the customer under their agreement and the DPA.

Sharing and subprocessors

We share personal data only with service providers that help us run the website and service, under appropriate contracts. These fall into categories such as cloud hosting, an LLM provider, communication platforms (Slack, Microsoft Teams), call-recording integrations, and privacy-friendly analytics. See our subprocessor list for the current categories; a detailed, named list is available to customers. We may also disclose data where required by law.

Data location and international transfers

Where the product is delivered to a business customer, we offer a choice of hosting regions from major cloud providers, so customers can keep in-product data in a region that suits their requirements. Some of our service providers may process data outside the European Economic Area. Where that happens, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

How we protect data

We apply technical and organisational measures appropriate to the risk, including encryption in transit (TLS) and at rest, role-based access controls, and the principle of least privilege. No system is perfectly secure, but we work to protect personal data against unauthorised access, loss, or misuse. Further detail is on our Security page.

Cookies and analytics

We use privacy-friendly analytics and keep cookies to a minimum. We do not use cookies to build advertising profiles. Where consent is required for any non-essential cookies, we will ask for it.

Your rights

Subject to applicable law, you have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on it. To exercise these rights for data we hold as controller, contact us at [email protected]. If your request concerns data inside a customer’s Cadence workspace, we will refer you to that customer as the controller, or assist them in responding.

You also have the right to lodge a complaint with a supervisory authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), and you may also contact the authority in your country of residence.

Changes to this policy

We may update this policy from time to time. We will revise the “last updated” date above and, for material changes, take reasonable steps to notify affected individuals.

Contact

For privacy questions or to exercise your rights, contact [email protected], or write to SaaS Life OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia.