Privacy Policy

Last updated: 21 October 2026

Who is responsible for your data?

Cadalio is operated by NERKCON LLC, a Montana limited liability company and the controller responsible for your personal data. Its mailing address is 127 N Higgins Ave Ste 307D #57, Missoula, MT 59802, USA. Montana entity ID: C1415899. Privacy inquiries: [email protected].

What we collect

We store your name, email address, account sign-in information, workspace memberships, account preferences, uploaded media, draft and scheduled content, publishing records, and analytics returned by the platforms you connect. We keep the authorization information needed to provide the social connections you choose, within the permissions you grant. Google sign-in also supplies your Google account identifier, verified email and profile name. We record the version and time of your Terms acknowledgement. Operational logs may include network addresses and security events.

If you enable two-factor sign-in, we keep the information needed to verify access and support your selected recovery options. Changes to account protection generate a notice to your verified email address.

Why we process it

Where the GDPR or UK GDPR applies, account administration and requested scheduling and publishing are necessary to perform our contract with you. Security, abuse prevention and support rely on our legitimate interests, balanced against your rights. Required billing and tax records are processed to meet legal obligations. Optional marketing or tracking would require a separate choice where applicable; accepting the Terms is not consent to those activities. We do not sell personal information or share it for cross-context behavioral advertising.

Account details are required to provide the service; you choose which social accounts and content to supply. When a business customer instructs us to process personal data in its workspace content, that customer determines the purposes of that processing. Contact us about a data processing agreement before uploading content that requires one.

Connected platforms

Our integrations use official Meta, TikTok, Google, LinkedIn and Pinterest APIs. You choose which accounts to connect and which content to publish. Provider access is limited by the permissions you grant. You can disconnect accounts in Social Accounts or revoke access directly with the provider. Platform privacy policies also apply to data you publish there.

Use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You may revoke Google access from your Google Account permissions. This service uses YouTube API Services; see Google’s Privacy Policy.

Service providers and transfers

Google Cloud hosts the application in Madrid, Spain. Uploaded media is stored privately in Google Drive; encrypted recovery copies also use Google Drive. Files are not publicly shared. Signed, temporary links provide access when needed to deliver your selected posts. Brevo processes email addresses and message content to deliver account confirmation and service emails. Google, Meta, TikTok, LinkedIn and Pinterest process data when you choose to connect their services. Paddle processes checkout, payment, tax, and subscription data. We share your account email, name, and selected plan when you start checkout; payment details are entered directly with Paddle. See its Privacy Policy. These providers and the US-based operator may process data outside your country, including outside the EEA and UK. International transfers require the applicable legal mechanism, such as an adequacy decision or appropriate contractual safeguards. Contact the privacy address for information about processing locations and applicable safeguards.

Retention and deletion

We retain your content while your account is active or as needed to deliver scheduled posts. You can remove unused media and disconnect social accounts. Account deletion removes owned workspaces, posts, media, and information used for social connections. Published posts remain on the social platforms unless you remove them there. Security, billing, and audit records may be retained when required by law or to prevent abuse. Recovery copies remain restricted and expire under our retention schedule. When recovering the service, we apply completed deletion requests before making restored data available.

Provider analytics are refreshed from the source and subject to periodic cleanup. We promptly remove access information when authorization ends and retain only the operational information needed to provide the service.

Privacy and service records

We keep restricted operational records for account security, support, publishing and billing outcomes, service-provider processing, privacy requests, and completed deletions. We use them to investigate problems, maintain the service, and respect your choices during recovery. They are available only to authorized people and are not used for advertising.

Daily encrypted backups are normally retained for 30 days. Removed media recovery copies expire within 30 days of their last inclusion in a backup. Minimal deletion records are kept while retained backups could contain the deleted data; they prevent deleted information from becoming available again after a restore. Contact [email protected] for information about your data, processing locations, and providers.

Your rights and choices

You can access your profile, export your data, update notification preferences, and request deletion from Settings. Depending on applicable law, you may also request correction, restriction, objection, or portability, and lodge a complaint with your data protection authority. Contact the privacy address above for assistance.

EEA and UK users may object to processing based on legitimate interests and withdraw any optional consent without affecting earlier lawful processing. US state privacy rights, where applicable, include access, correction, deletion and an appeal of a denied request. You may use an authorized agent; we may proportionately verify identity or authority. We do not discriminate for exercising privacy rights. Global Privacy Control does not change our practice of neither selling nor sharing personal information for behavioral advertising. Send requests or appeals to [email protected].

The service is intended for adults aged 18 or older. We do not knowingly offer accounts to children. Contact us if a child has provided personal information so we can investigate and remove it.

Cookies and local preferences

Sign-in uses an essential HTTP-only session cookie, lasting up to 14 days for customer accounts and up to 4 days for platform administrators. Google and social-account connections use short-lived security cookies, lasting up to 10 minutes, to bind authorization to your browser. Your selected theme is stored locally until you clear it. This preference is stored when you choose it. With your permission, Google Analytics measures visits, approximate countries, traffic sources and selected actions such as draft saves, scheduling requests and template downloads. It also measures loading speed, responsiveness and layout stability on public pages. Template captions and worksheet entries stay on your device and are not sent to analytics. Its tag loads only after you allow analytics. We do not send names, email addresses, post text, media, passwords, authorization tokens or internal record identifiers to Google Analytics. Page addresses omit query strings and private record identifiers. Google Analytics is separate from the social analytics provided by your connected channels.

Your analytics choice and analytics cookies expire after 180 days. Advertising storage and personalization are disabled. You can reject analytics and continue using Cadalio, or change your choice below or in Settings. Rejecting analytics stops measurement and removes its cookies. Read how Google uses information from sites that use its services.

Billing loads Paddle when you open Billing; the payment provider may use storage needed for checkout and fraud prevention. You can clear local preferences through your browser settings, and sign out to remove the session cookie.

Two-factor sign-in uses an essential, HTTP-only challenge cookie that expires after 10 minutes. It cannot access your workspace and is removed when verification succeeds or you sign out.

Data protection

We protect account and workspace data with encryption, access controls and recovery procedures. Workspace access is limited to authorized members, and connected accounts use the permissions you choose. Contact [email protected] if you need help with your account or data.

Changes and contact

We may update this policy to reflect service or legal changes. Material changes will be communicated through the service or by email where appropriate. Contact [email protected] with questions.