We collect the information needed to run Cadey for you: account and billing details, the content you upload, and basic usage and device data. We use it to provide, secure and improve the product. We do not sell personal information, and we never use your content or your customers' conversations to train foundation models. You can access, export or delete your data, and we honor GDPR and U.S. state privacy rights. This summary is for convenience; the full policy controls.
1Scope and our roles
This Privacy Policy applies to personal information processed by Schwerd Capital Holdings LLC, doing business as Cadey.ai (“Cadey,” “we,” “us”) when you visit www.cadey.ai and our other marketing pages, when you use the Cadey product as a customer or authorized user, and when you otherwise interact with us. It does not apply to third-party websites or services we do not control.
Our role depends on the context:
- When we act as a controller. For our website visitors, prospects, account holders and billing contacts, we determine why and how personal information is processed, and we are the controller (or, under U.S. law, the “business”). This policy governs that processing.
- When we act as a processor. When our customers use Cadey to chat with, schedule, or support their own end users, the personal data in that customer's workspace is processed by us on the customer's behalf and under their instructions. For that data, the customer is the controller, the customer's privacy policy applies, and our processing is governed by our Data Processing Addendum. If you are an end user and have questions about how a particular business uses Cadey, please contact that business.
2Information we collect
Information you provide
- Account and profile data: name, work email, password or single-sign-on identifier, company name, role, and workspace settings.
- Billing data: billing contact, billing address, plan, and the last four digits and type of your payment card. Full card numbers are processed directly by our PCI-compliant payment processor; we do not store them.
- Content you upload: knowledge-base documents, articles, help content, and other Customer Data you add to power your agent.
- Communications: messages you send us through sales, support, the contact form, or email, including any information you choose to include.
Information we collect automatically
- Usage data: pages and features used, actions taken, dates and times, and performance and diagnostic data.
- Device and connection data: IP address, browser type, operating system, device identifiers, and referring URLs.
- Cookies and similar technologies: as described in our Cookie Policy.
End-user data we process for customers
When you use a business's Cadey-powered chat, booking, or support experience, we process, on that business's behalf, the information you provide, such as the contents of your messages, your name and contact details, meeting details, and ticket information. We act as a processor for this data and use it only to deliver the service to that business, not for our own purposes. We do not knowingly collect special categories of data through these channels and ask customers not to configure the agent to request them.
3Where we get it
We collect information directly from you; automatically from your use of the Service; from our customers when you are their end user; and from service providers such as our identity, analytics, payment and infrastructure partners. We may combine information from these sources to operate and secure the Service.
4How we use information
We use personal information to:
- provide, operate, maintain and personalize the Service and your account;
- process transactions, manage subscriptions, and send billing and account messages;
- provide customer support and respond to your requests, including through our own AI-assisted support tools;
- secure the Service, authenticate users, prevent fraud and abuse, enforce our terms, and maintain the integrity and tenant isolation of the platform;
- understand how the Service is used and improve and develop features, generally using aggregated or de-identified data;
- send administrative and, where permitted, marketing communications (you can opt out of marketing at any time); and
- comply with legal obligations and establish, exercise or defend legal claims.
5AI and your data
Cadey uses large language models and embeddings to power its agent. The agent is designed to ground its answers in the knowledge sources and tool results within your workspace. We use commercial model providers under agreements that prohibit using your content to train their models, with zero-retention configurations enabled where the provider offers them. We list these providers as subprocessors at cadey.ai/legal/subprocessors.
- We do not use your Customer Data, including your end users' conversations, to train foundation models, and our model providers are contractually prohibited from doing so.
- We do not use one customer's data to answer another customer's queries. Each workspace's AI is grounded only in that workspace's content.
- We may use aggregated and de-identified usage data, which does not identify any person or customer, to evaluate and improve quality, safety and performance.
AI output is generated by automated systems and can be inaccurate. We do not use AI output to make decisions that produce legal or similarly significant effects about you without human involvement.
6Legal bases for processing (EEA/UK)
Where the GDPR or UK GDPR applies and we act as a controller, we rely on the following legal bases:
- Contract: to provide the Service and account you have requested and to perform our agreement with you.
- Legitimate interests: to secure, support, analyze and improve the Service, to prevent fraud and abuse, and for direct marketing to business contacts, balanced against your rights.
- Consent: for non-essential cookies and certain marketing, where required; you may withdraw consent at any time.
- Legal obligation: to comply with applicable laws, including tax, accounting and lawful requests.
8We do not sell your data
We do not sell personal information for money, and we do not “sell” or “share” it for cross-context behavioral advertising as those terms are defined under U.S. state privacy laws. We do not use or disclose sensitive personal information for purposes other than those permitted under those laws.
10International data transfers
We are based in the United States and operate primarily on U.S. infrastructure. If you access the Service from outside the United States, your information will be transferred to and processed in the United States and other countries that may have different data-protection laws than your own. Where we transfer personal data from the EEA, the United Kingdom or Switzerland, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with additional measures where needed. You may request a copy of the relevant safeguard by emailing privacy@cadey.ai.
11Data retention
We keep personal information for as long as needed to provide the Service, maintain your account, comply with our legal obligations, resolve disputes and enforce our agreements. When you cancel or your account is terminated, we make Customer Data available for export for 90 days and then delete it, except for copies retained in routine backups, which are deleted on our standard backup cycle, and information we are required or permitted by law to retain. You may request earlier deletion at any time, subject to our legal obligations.
12How we protect information
We maintain administrative, technical and physical safeguards designed to protect personal information, including encryption in transit (TLS 1.2 or higher) and at rest (AES-256), tenant-level isolation enforced at the database, role-based access controls, secrets stored in a managed vault, logging and monitoring, and vendor risk management. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If we become aware of a personal-data breach affecting you, we will notify you and the relevant authorities as required by law. You can report a security concern to security@cadey.ai.
13Your privacy rights (EEA/UK and global)
Depending on where you live, you may have the right to access, correct, update, port, or delete your personal information; to restrict or object to certain processing; and to withdraw consent where processing is based on consent. Where the GDPR or UK GDPR applies, you also have the right to lodge a complaint with your local supervisory authority, although we encourage you to contact us first so we can help.
To exercise your rights, email privacy@cadey.ai. We will verify your request and respond within the time required by applicable law. If your request concerns data we process on behalf of one of our customers (as a processor), we will refer you to that customer or act on their instructions. We will not discriminate against you for exercising your rights. If you would like to designate an authorized agent to make a request, we may require proof of authorization and verification of your identity.
14U.S. state privacy rights
If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have the right to: (a) know and access the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of recipients; (b) correct inaccurate personal information; (c) delete personal information; and (d) opt out of the sale or sharing of personal information and of certain profiling. As stated above, we do not sell or share personal information for cross-context behavioral advertising.
In the prior 12 months, we have collected the categories of personal information described in “Information we collect,” for the purposes described in “How we use information,” and disclosed certain categories to the service providers described in “How we share information” for business purposes. To exercise your rights, email privacy@cadey.ai or use our contact form. You may use an authorized agent, and you may appeal a decision by replying to our response. We will not discriminate against you for exercising these rights.
15Children
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact privacy@cadey.ai and we will delete it.
16Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will revise the “Last updated” date and, where appropriate, provide additional notice by email or in-product. Your continued use of the Service after the changes take effect means you accept the updated policy.
17How to contact us
For privacy questions or to exercise your rights, contact:
Schwerd Capital Holdings LLC, doing business as Cadey.ai
State of Florida, United States
Privacy: privacy@cadey.ai
Security: security@cadey.ai · Contact form
If you are in the EEA or the UK and would like us to nominate a local representative for GDPR purposes for your engagement, contact us and we will make appropriate arrangements.
Reach our privacy team at privacy@cadey.ai, or contact us here. We respond to every message from a real person.
Schwerd Capital Holdings LLC, doing business as Cadey.ai · organized in the State of Florida, United States.