Privacy policy
Last updated 11 October 2026
This policy explains what personal data Cadra collects, why, who we share it with and the choices you have. It applies to cadrasocial.com and the Cadra app at app.cadrasocial.com (together, "Cadra").
Who we are
Cadra is run by [legal name of business], [registered address], [company number, if a limited company] ("we", "us"). We are the controller of the personal data described here. Contact us about privacy at hello@cadrasocial.com.
What we collect
Your account
- Name, email address, company name and your password (stored as a one-way hash, never in plain text).
- If you sign in with Google, your name, email address and profile picture from Google.
- Your team members' names, email addresses and roles, if you invite them.
Billing
- Your plan, billing history and billing address. Card details are handled by Stripe. We never see or store your full card number.
Social accounts you connect
- The access tokens the platform gives us when you connect an account, your account name, ID and profile picture, and the pages or profiles you choose to manage.
- Engagement figures the platform provides for your account and posts (for example followers, reach and likes), so we can show you analytics.
What you create
- Posts, drafts, schedules, images and videos you upload, signatures, comments on previews, and settings.
- If someone comments on a shared preview without an account, the name they enter and their comment.
Technical data
- IP address, browser and device details, and logs of activity, used to keep Cadra secure and working.
- Cookies that are strictly necessary: a sign-in cookie and a language preference. We don't use advertising or tracking cookies.
How we use it
| Purpose | Lawful basis (UK GDPR) |
|---|---|
| Providing Cadra: your account, scheduling and publishing posts, analytics, team features | Contract |
| Billing and accounting records | Contract and legal obligation |
| Service emails: account activation, password resets, failed-post alerts, invites | Contract |
| Security, fraud prevention and fixing problems | Legitimate interests |
| Product news and offers by email | Consent (unsubscribe any time) |
We don't sell your personal data, and we don't use your content or social account data for advertising.
Data from social platforms
We only access the social accounts you choose to connect, only with the permissions you approve, and only to do what you ask: publish and schedule posts, show your accounts and posts in Cadra, and show your analytics. You can disconnect an account in Cadra at any time, which deletes its access tokens from Cadra.
Google and YouTube
Cadra uses YouTube API Services. By connecting a YouTube account you also agree to the YouTube Terms of Service, and Google's handling of your data is covered by the Google Privacy Policy. You can remove Cadra's access to your Google account at any time from your Google security settings.
Cadra's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Meta (Facebook, Instagram, Threads)
To delete the data we hold from your Meta accounts, disconnect them in Cadra or delete your Cadra account. You can also email hello@cadrasocial.com with the subject "Data deletion" and we will delete it within 30 days and confirm by email. You can also remove Cadra from your Facebook settings under Apps and websites.
AI features
When you use Cadra's AI writing assistant, image or video tools, the text, prompts and media you send are processed by our AI provider to produce the result. Our provider doesn't use this data to train its models. Don't include sensitive personal data in prompts.
If you connect your own AI app to Cadra (for example on the Connect plan), that app is run by its own provider under its own terms. Cadra only receives the requests your AI sends to it, such as posts to schedule.
Who we share it with
We use these service providers to run Cadra. They only process your data on our instructions.
| Provider | What for | Where |
|---|---|---|
| Contabo | Hosting the app and database | Germany (EU) |
| Cloudflare | Encrypted backups | [bucket region] |
| Resend | Sending service emails | United States |
| Stripe | Payments and invoices | Ireland and United States |
| OpenAI | AI writing, image and video features | United States |
We also share data with the social platforms you connect, because publishing to them is the service you asked for. We may disclose data if the law requires it.
Where data goes outside the UK, we rely on UK adequacy regulations or the UK International Data Transfer Agreement and Addendum to protect it.
How long we keep it
- Account data, connected accounts and content: while your account is open. When you delete your account we delete this within 30 days.
- Backups: kept for 14 days, then deleted automatically.
- Billing records: 6 years, as UK law requires.
- Security logs: up to 90 days.
Your rights
You can ask to see, correct, delete or get a copy of your personal data, and object to or restrict how we use it. Email hello@cadrasocial.com and we'll respond within one month. If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office at ico.org.uk.
Security
Connections to Cadra are encrypted, passwords are hashed, and access to our servers is restricted. No system is perfectly secure, so we'll tell you without undue delay if a breach affects your data.
Children
Cadra is a business tool for people aged 18 and over. We don't knowingly collect data from children.
Changes
We'll post any changes here and update the date at the top. If a change is significant, we'll email account owners before it takes effect.