Draft for legal review. Not in force yet.
Privacy Policy
Last updated: 5 November 2026. Draft for legal review. Placeholders are in [square brackets].
The short version
- Your footage stays on your computer. Cadeloop edits, transcribes, cleans up sound and exports on your own computer. We never see your footage unless you choose Cloud Boost, and then we delete it within 24 hours of the job.
- AI features send only what they need (usually the text of your transcript) to the AI company that does the work: ours, or the one whose key you added. Nothing is sent if you leave AI off.
- Voice prints are off unless you turn them on. If you do (and the people speaking agree), they are made and kept only on your computer, to tell the speakers in your episode apart.
- An account is optional. You can edit without one. If you sign up, we keep your email, your plan and how many credits you used. Payments are handled by Stripe; we never see your card number.
- We do not sell your data, show ads, or use your content to train AI models. The app has no tracking. The website uses cookie-free analytics, and our server counts a few account milestones (such as signing up or paying) under a code name, never with your email or your content.
- Ask us and we delete it. Email hello@cadeloop.com and we delete your account data within 30 days.
1. Who is responsible
GQ Internet Venture LLC, 3400 Cottage Way, Ste G2 #16227, Sacramento, CA 95825, United States ("we", "us") is responsible for the personal data described here (the "controller" under EU and UK law). Contact: hello@cadeloop.com.
This policy covers the Cadeloop desktop app (Windows and Mac), the Cadeloop website, and the Cadeloop account service (sign-in, plans, payments, built-in AI and Cloud Boost).
2. What stays on your computer
These are created and kept on your own computer. We do not receive them:
- Your footage, microphone recordings, B-roll, music files and finished exports.
- Transcripts. Speech is turned into text on your computer.
- Your projects, edits, brand settings and styles.
- Voice prints (off by default). If you turn on "Tell speakers apart by voice" and confirm that the people speaking agree, the app makes a short numerical summary of each voice in an episode, on your computer (an open-source model called WeSpeaker). If you confirm who the host is, the app keeps the host's voice print in a file on your computer, so it can recognise the host in your next episode. Voice prints are never uploaded. You can turn the feature off at any time and delete them by removing the episode, or the saved host voice in Settings [to build: a "Forget saved voices" button].
- The API keys you add for your own AI or stock-footage accounts. They are stored in a settings file on your computer and are sent only to the company each key belongs to.
- Crash reports and logs. They stay on your computer (Help → Show Crash Reports). We see them only if you send them to us.
3. What leaves your computer, and when
Only when you use a feature that needs it:
| When you… | What is sent | To whom |
|---|---|---|
| Use an AI feature with Cadeloop AI (your plan's credits) | The text the feature needs, usually the transcript with speaker names and times. For B-roll descriptions, a few still frames from your B-roll clips. | Us, then Anthropic (Claude), which writes the answer. We pass the request through and keep only how much was used (see section 4), not the text or the answer. |
| Use an AI feature with your own key | The same text, sent straight from your computer. | The company you picked in Settings: Anthropic, OpenAI, Google (Gemini), DeepSeek, Alibaba Cloud (Qwen), OpenRouter, or an address you entered. Their privacy policy and your agreement with them apply. If you choose a local AI (Ollama), nothing leaves your computer. Note: DeepSeek and Qwen may process data in China. |
| Dub an episode | The episode's audio mix. | ElevenLabs, straight from your computer with your own ElevenLabs key; ElevenLabs bills you. It never goes through us. The app asks you to confirm that the people speaking agreed to be dubbed. |
| Make AI music | Your description of the music (artist and song names are removed). | ElevenLabs, with your own key only. |
| Look for stock B-roll | Search words (taken from your transcript, or improved by AI if it is on). | Pexels or Pixabay, with your own free key. The clips you pick are downloaded to your computer. |
| Use Cloud Boost or upload to the web version (any plan with credits) | The footage or audio needed for the step you sent (transcription, studio sound or export), and the results. | Our cloud: files are stored with Cloudflare (R2) and processed on rented computers at Modal, in the United States. Deleted 24 hours after the job finishes; anything left behind is removed automatically after 7 days. We do not look at it or keep copies. |
| Sign in, buy a plan, open the app | See section 4. | Us, Stripe, Resend (our email provider). |
| Check for updates | Your app version and normal connection data (IP address). | GitHub, where updates are published. |
| Open the app's screens | A request for a font file (normal connection data). | Google Fonts [to change: bundle the font in the app so nothing is sent]. |
4. What we collect, and why
| What | Why | Legal basis (EU/UK) |
|---|---|---|
| Account: email address, name (if Google or Apple shares it), the Google or Apple account ID if you sign in that way, sign-in tokens (stored scrambled), when the account was made | To give you an account and sign you in on the app and the website | Contract |
| Plan and credits: your plan, renewal date, credit balance, what each payment bought | To run your plan, monthly allowance and refunds | Contract |
| Usage records: for each AI, dubbing or Cloud Boost job: the time, the feature, the AI model, the amount of text (tokens) or minutes, its cost and the credits charged. Not the text, audio or results themselves | To charge credits correctly, show you your usage, enforce spending limits and prevent abuse | Contract, legitimate interest |
| Payments: handled by Stripe. We receive a customer ID, the plan, the amount, the payment and refund status, and the country for tax. Never your full card number | To take payments, issue refunds, keep tax and accounting records | Contract, legal obligation |
| Sign-in emails: your email address and the sign-in link | To send you a link to sign in (no password) | Contract |
| Server logs: IP address, time, the page or API address requested, errors | To keep the service running and secure | Legitimate interest |
| Product milestones (server side only): when an account signs up, first uses Cadeloop AI, first works on its own recording, and pays, renews, cancels or is refunded, with the plan, the amount and how many days after sign-up. Sent to PostHog under a code made from your account number (never your email, name, IP address, file names, transcripts or other content). Nothing is counted inside the app | To learn where people get stuck on the way to a paid plan, and to improve it | Legitimate interest |
| Account emails: a welcome email, a tips email and, if you have not tried Cadeloop AI or a plan yet, one email about the plans, in your first week after you sign in. Every one has an unsubscribe link; sign-in links and receipts still arrive | To help you get started | Legitimate interest (you can opt out at any time) |
| Website forms (waitlist, contact): email, optional name, type of show, platform, language, your survey answers and message. Stored in our database at Cloudflare. To stop spam, your internet (IP) address is kept only in scrambled form (salted hash), for 10 minutes | To reply, to learn what shows need, and to send launch news if you ticked the box | Consent, legitimate interest |
| Website analytics: page views, referring site, country, browser and device type, counted by Cloudflare Web Analytics without cookies and without building a profile of you | To see which pages help people | Legitimate interest |
The app itself has no analytics and no tracking. The milestones above are counted by our server from things it already handles (sign-in, AI requests, payments).
5. Cookies
The account website sets two cookies, both needed for it to work: a sign-in cookie (kept for 30 days, or until you sign out) and, if you chose a plan on the website before signing in, a cookie that remembers that plan for one hour. The marketing website sets no cookies. We use no advertising or tracking cookies, so there is no cookie banner.
6. Who we share data with
We share data only with companies that help us run Cadeloop, under contracts that require them to protect it and use it only for us ("processors" or "sub-processors"):
- Stripe: payments, invoices, tax, refunds.
- Anthropic: the AI behind Cadeloop AI. Under Anthropic's commercial terms, API data is not used to train its models; Anthropic may keep it for a limited time for safety checks [check current retention period].
- PostHog: the product milestones above (server side only, pseudonymous, no content).
- Cloudflare: website hosting, cookie-free website analytics, the waitlist and contact form database (Cloudflare D1, run by our own code), and Cloud Boost file storage.
- Modal: the computers that process Cloud Boost jobs.
- Railway: hosting of the account service and its database.
- Resend: sign-in emails, account emails and waitlist emails.
- Google and Apple: only if you choose to sign in with them.
ElevenLabs (with your own key), stock sites (Pexels, Pixabay), the AI companies you pick with your own key, and GitHub (updates) receive data directly from your computer under their own policies; we do not control them. We share data with authorities only when the law requires it. If the company is sold or merged, data may move to the new owner under this policy.
7. International transfers
Our service providers mostly process data in the United States. Where data leaves the EU, UK or Switzerland, we rely on the EU–US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses (and the UK addendum).
8. How long we keep it
- Account, plan and credit data: while your account is open. When you delete your account, within 30 days (backups roll over within a further 30 days).
- Usage records: up to 24 months, then deleted or reduced to totals that cannot identify you.
- Payment and refund records: as long as tax and accounting law requires (often 7–10 years). Stripe keeps its own records under its policy.
- Cloud Boost files: 24 hours after the job; never more than 7 days.
- Footage uploaded to the web version on the Free plan: 7 days, then deleted.
- AI requests and answers: not kept by us. The AI provider may keep them briefly under its own policy.
- Server logs: 30 days. Product milestones: up to 24 months. Website form messages: until you unsubscribe, or 2 years after we last heard from you.
9. Your rights
Deletion on request: email hello@cadeloop.com from your account address and we delete your account, its usage records and its product milestones within 30 days (payment records are kept only as long as tax law requires).
You can also ask us to show you, correct or export your data, to stop or limit using it, and you can withdraw consent at any time. Email hello@cadeloop.com from your account address; we answer within 30 days. You can also complain to your data protection authority.
California: you have the right to know, delete and correct your personal information, and we will not treat you differently for using these rights. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you.
Voice prints: the feature is off by default and the app asks you to confirm that the people speaking agree before turning it on. Because voice prints are made and kept only on your computer, we never collect or hold them [lawyer to confirm wording for Illinois (BIPA), Texas, Washington and other biometric laws].
Mainland China: [PIPL notice to be confirmed by counsel before marketing in mainland China.]
10. The waitlist
If you join the Cadeloop waitlist on our website, we keep your email address and the optional answers you give (name, type of show, platform, language), in our database at Cloudflare. We use them only to:
- tell you when Cadeloop launches,
- send occasional product updates (a few times a year at most), and
- learn what kinds of shows people want to edit.
Waitlist emails are sent through Resend. Every email has an unsubscribe link that works with one click; you can also reply or write to hello@cadeloop.com. We never sell or share the list, and we do not add it to advertising tools. Deletion on request: email hello@cadeloop.com and we delete your waitlist entry within 30 days. If you never sign up, we delete it 2 years after you joined.
11. Children
Cadeloop is not for children under 16. We do not knowingly collect their data; if you think a child has given us data, email us and we will delete it.
12. Security
Data is encrypted in transit (HTTPS). Sign-in tokens are stored scrambled (hashed), so a leaked database would not reveal sign-ins. Only the people who run the service can reach the database. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
13. Changes
We will post changes on this page with a new date, and tell you by email or in the app before significant changes apply.
14. Contact
GQ Internet Venture LLC, 3400 Cottage Way, Ste G2 #16227, Sacramento, CA 95825, United States. Email: hello@cadeloop.com. [EU/UK representative, if required: name and address.]