Privacy
Cadence creates recurring Notion tasks as database rows. This page states what we store, how long we keep it, and what we never read.
What is stored
- Your account email and Notion workspace connection metadata (workspace id/name, bot id, status).
- Notion access tokens in Vault only — never in app logs, never in browser storage as long-lived secrets.
- Rules you configure (recurrence, target database id, property names, title prefix) and materialised row metadata: occurrence date, Notion page id,
cadence_ref, properties hash, state. - Run history summaries (status, plain-language outcomes, page ids in errors). Retention by plan: Free 7 days, Solo 30 days, Team 90 days.
- Customer / subscription ids on the workspace when you upgrade (Solo $9/mo or Team $19/mo). No usage meter.
What is never read
Notion page bodies — Cadence never reads page content blocks. Verification uses Cadence-owned properties only.
- Unrelated databases, comments, or files outside the databases you point a rule at.
- We do not widen Notion OAuth scopes beyond what the connection flow already requests.
How long
Active account data remains while your account is open. Run history is shown only within your plan window. Materialised row metadata stays so we can respect user edits and avoid duplicate creates.
Account close — hard delete
When you close your account from Connection, Cadence hard-deletes your data within 30 days — including Vault tokens, rules, materialised rows, jobs, runs, and billing linkage on your workspaces. Deletion usually runs immediately on request.
Confirm is the only path that writes to Notion. · Home · Connection