Privacy Policy
Last updated: 24 April 2026
1. What data we collect
We only collect what we need to provide and deliver our service. Specifically:
When you book a discovery call
- Your name, email address, and any information you choose to provide in the booking form (collected via Calendly)
- Your timezone and meeting preferences
- The IP address and basic device information of your visit (collected automatically by our hosting provider, Railway)
When you become a client
- Your business and content preferences, captured during the onboarding session
- Your social media account credentials (only the access required to post on your behalf)
- Communication history with you via WhatsApp, email, or other channels
- Billing details (processed by our payment provider; we do not store full card numbers)
What we do not collect
- We do not use third-party advertising trackers or behavioural cookies on this site
- We do not sell, rent, or trade your personal data with anyone
- We do not store your social media passwords; we use platform-issued access tokens that you can revoke at any time
2. Why we collect it
We collect personal data only for the following purposes (PDPA Section 13):
- To respond to your enquiries and schedule discovery calls
- To provide the Cadence Ninja service to clients (drafting and posting content on your behalf)
- To send transactional communication related to your account (billing, content approvals, service updates)
- To comply with our legal obligations under Singapore law (including tax records, AML/CFT requirements where applicable)
We do not use your data for marketing automation or send unsolicited promotional emails. You will only hear from us about your account or in direct reply to your enquiry.
3. Who we share it with
We share your personal data only with the following categories of service providers, and only to the extent necessary to deliver our service:
- Calendly — for booking discovery calls (your booking form data)
- Railway — our hosting provider for this website (IP address, basic request logs)
- Cloudflare — for DNS and email forwarding (your inbound email if you write to hello@cadenceninja.com)
- Anthropic, OpenAI — AI providers used to draft content for clients (only the content brief and your style examples, never your account credentials or personal identifiers)
- Our virtual assistant team — contracted under written confidentiality agreements, restricted to the data needed to deliver content for your account
- Stripe or our payment processor — for billing (only billing details, processed under their own privacy policy)
We do not transfer your data outside Singapore except as required to use the above services. Each provider operates under their own privacy and security commitments. We do not share your data for any other purpose without your explicit consent.
4. How long we keep it
- Discovery call enquiries: retained for 12 months after our last interaction, then deleted
- Active client data: retained for the duration of your engagement
- Former client data: retained for 5 years after engagement ends, in line with Singapore tax and accounting record-keeping obligations
- Server logs (IP addresses, etc.): rotated within 30 days
5. Your rights under PDPA
Under the PDPA, you have the right to:
- Access your personal data — ask us what we hold about you
- Correct inaccurate personal data
- Withdraw consent for the processing of your data (note: this may end our ability to provide the service to you)
- Request deletion of your personal data, subject to our legal record-keeping obligations
To exercise any of these rights, email hello@cadenceninja.com. We will respond within 30 days as required by the PDPA.
6. How we protect it
We implement reasonable security measures appropriate to the type of data we hold:
- All website traffic is encrypted via HTTPS
- Client account credentials are stored in a password manager with 2FA enforcement
- Access to client data is limited to the assigned VA and the founder
- VAs operate under written confidentiality agreements
- We review our security practices annually
No security system is perfect. If we ever suffer a data breach affecting your personal data, we will notify you and the Personal Data Protection Commission of Singapore in accordance with Section 26D of the PDPA, within the timelines specified by law.
7. Cookies and tracking
This website uses no third-party cookies or tracking pixels. We do not run analytics scripts, advertising trackers, or social media embeds that profile your behaviour.
Your browser may store basic technical data (e.g., session state) required for the page to function. We do not use cookies for advertising or behavioural tracking.
8. Children's privacy
Our service is intended for business decision-makers (founders and operators). We do not knowingly collect personal data from anyone under 18.
9. Changes to this policy
If we make material changes to this policy, we will update the "Last updated" date above and, where appropriate, notify active clients by email. Continued use of the service after a change constitutes acceptance of the updated policy.
10. Contact us
For any privacy-related questions or to exercise your PDPA rights:
- Email: hello@cadenceninja.com
- Operator: Azentiq Nexus Pte Ltd, Singapore
- Data Protection Officer: Anson Zeall (hello@cadenceninja.com)
If you are not satisfied with our response to a privacy concern, you may also contact the Personal Data Protection Commission of Singapore.