Privacy Policy

Cadiro ("Cadiro," "we," "us," or "our") is committed to protecting your personal information. This Privacy Policy explains what information we collect when you visit cadiro.io or use our services, how we use it, and the choices you have.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

This policy applies to information collected through our website, web application, embeddable widget, and any other services we offer (collectively, the "Service").

Information you provide directly:

• Account information — name, email address, and password when you register;
• Profile information — display name and avatar you optionally provide;
• Payment information — billing details processed by our payment provider (Stripe); we do not store full card numbers;
• Content — changelog entries, project settings, and other content you create in the Service;
• Communications — messages you send us via email or support channels.

Information collected automatically:

• Usage data — pages visited, features used, and actions taken within the Service;
• Log data — IP address, browser type and version, referring URL, and timestamps. We record and store your IP address each time you authenticate to help detect fraud, abuse, and unauthorized access, and to enforce our Acceptable Use Policy;
• Device information — device type, operating system, and screen resolution;
• Cookies and tracking technologies — described further in the Cookies section below.

Information from third parties:

• If you sign in using Google OAuth, we receive your name and email address from Google;
• Our payment processor (Stripe) may share transaction status and billing address with us.

We use the information we collect to:

• Create and manage your account and authenticate you;
• Provide, operate, and improve the Service;
• Process subscription payments and manage billing;
• Send transactional emails (email confirmations, password resets, subscriber notifications);
• Send service announcements and product updates (you may opt out at any time);
• Respond to your support requests and communications;
• Monitor and analyze usage to improve performance and user experience;
• Detect, prevent, and investigate fraud, abuse, or security incidents;
• Comply with our legal obligations.

We will not sell your personal information to third parties or use it to show you third-party advertising.

We do not sell or rent your personal information. We may share your information in the following limited circumstances:

• Service providers — trusted third parties who help us operate the Service, including Supabase (database and authentication), Stripe (payments), Resend (transactional email), and Vercel (hosting). These providers are contractually obligated to use your data only to perform services for us.
• Legal requirements — if we believe disclosure is required by law, regulation, legal process, or governmental request.
• Protection of rights — to enforce our Terms of Service, protect the rights and safety of Cadiro, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
• With your consent — for any other purpose with your explicit consent.

Public changelog pages you create are visible to anyone with the link by design. Do not include sensitive personal information in publicly published entries.

We use cookies and similar technologies (such as local storage) to operate and improve the Service.

Essential cookies are required for authentication and session management. Without them, the Service cannot function.

Analytics cookies help us understand how users interact with the Service so we can improve it. This data is aggregated and not linked to individual users where possible.

You can control cookie settings through your browser preferences. Disabling essential cookies will prevent you from using the Service. Disabling analytics cookies will not affect your ability to use the Service.

We retain your personal information for as long as your account is active or as needed to provide the Service. We also retain information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it by law or for legitimate business purposes (such as fraud prevention). Content on public changelog pages associated with your account will be removed when the account is deleted.

We take reasonable technical and organizational measures to protect your personal information against unauthorized access, loss, or alteration. These measures include encryption in transit (TLS), encrypted storage of sensitive data, and access controls limiting who can access user data within our organization.

No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security. If you become aware of any security issue, please contact us immediately at support@cadiro.io.

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child under 18 has provided us with personal information, please contact us at support@cadiro.io and we will take steps to delete that information.

Depending on your location, you may have the following rights regarding your personal information:

• Access — request a copy of the personal information we hold about you;
• Correction — request that we correct inaccurate or incomplete information;
• Deletion — request that we delete your personal information, subject to certain exceptions;
• Portability — request a machine-readable export of your data;
• Objection — object to processing based on legitimate interests;
• Opt-out of marketing — unsubscribe from marketing emails at any time via the unsubscribe link in any email or by contacting us.

To exercise any of these rights, contact us at support@cadiro.io. We will respond within 30 days. We may need to verify your identity before processing your request.

California residents: Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information is collected, to delete it, and to opt out of its sale. We do not sell personal information.

Your information may be stored and processed in the United States or other countries where our service providers operate. By using the Service, you consent to the transfer of information to countries outside your country of residence, which may have different data protection rules than your country.

Where required by applicable law, we rely on appropriate safeguards for international data transfers, such as standard contractual clauses approved by the European Commission.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with an updated "Last updated" date, and may also notify you by email at least 30 days before the changes take effect.

Your continued use of the Service after any changes take effect constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Email: support@cadiro.io
• Website: cadiro.io

For security-related concerns specifically, please email support@cadiro.io.