Effective: May 1, 2026
This Privacy Policy explains how Lifestyle One, LLC ("Cadmus," "we," "us") collects, uses, and shares information when you visit cadmus.digital, sign up for an account, or use the Cadmus platform (the "Service"). By using the Service, you agree to this Policy.
1. Information We Collect
Account information. When you create an account we collect your name, email address, and password (stored hashed). If you sign in through a third-party identity provider, we receive the basic profile information that provider shares with us.
Site content. Cadmus is a website builder. The pages, posts, products, media, design briefs, brand information, and other content you create or upload through the Service are stored on our infrastructure so we can host and serve your site.
Billing information. Subscription billing is handled by Stripe. We receive limited information back from Stripe (such as your customer ID, the last four digits of your card, billing address, and subscription status). We do not store full payment card numbers on our servers.
Communications with AI features. When you use AI-assisted features (content generation, design generation, SEO suggestions, image generation, alt-text, etc.), the prompts you submit and the content you provide as context are sent to the AI providers listed in Section 6 so they can return a response.
Usage and device data. When you visit cadmus.digital or use the admin dashboard, we and our infrastructure providers automatically collect information such as IP address, browser type, operating system, pages viewed, referring URLs, and timestamps. We use this for security, debugging, and product analytics.
Cookies and similar technologies. We use first-party cookies for authentication and session management. We do not use third-party advertising cookies.
Support communications. If you email us or otherwise contact support, we retain your message and our reply.
2. How We Use Information
We use the information we collect to:
- Provide, operate, and maintain the Service, including hosting your sites and serving them to visitors.
- Process subscriptions, trials, payments, and refunds.
- Generate, edit, and optimize content on your behalf when you use AI-assisted features.
- Send transactional messages (account verification, billing receipts, security alerts, important product notices).
- Monitor and improve performance, diagnose errors, and protect against fraud and abuse.
- Comply with legal obligations and enforce our Terms of Service.
We do not sell your personal information, and we do not share it with advertisers.
3. Your Content and AI Training
You retain ownership of the content you create on Cadmus. We do not use your content, prompts, or generated outputs to train our own machine-learning models, and we do not allow our AI subprocessors to use your content to train their models where their terms permit us to opt out. Each AI provider listed in Section 6 has its own privacy policy and data-handling practices, which you can review on their websites.
4. How We Share Information
We share information only as described below.
Subprocessors. We share the minimum information needed with the third-party service providers listed in Section 6, who process it on our behalf to deliver the Service.
Public site visitors. Anything you publish to your public Cadmus-hosted site is, by definition, public. Visitors to your site may have their IP addresses, request information, and any data they submit through forms processed by our infrastructure and your configured integrations.
Legal and safety. We may disclose information if we believe in good faith that doing so is necessary to comply with applicable law or legal process, to enforce our agreements, or to protect the rights, property, or safety of Cadmus, our users, or the public.
Business transfers. If Cadmus is involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction, subject to standard confidentiality protections.
5. Data Storage and Security
The Service is hosted on Google Cloud Platform in the United States. We use industry-standard security practices including encryption in transit (TLS), encryption at rest for databases and object storage, scoped access controls, and isolated per-site data access. No system is perfectly secure; we cannot guarantee absolute security and you use the Service at your own risk.
6. Subprocessors
We rely on the following third-party providers to deliver the Service. Each acts as a subprocessor and processes only the data needed for its function.
| Provider | Purpose | Categories of Data |
|---|---|---|
| Google Cloud Platform (Cloud Run, Cloud SQL, Cloud Storage) | Application hosting, database, file storage | All service data |
| Cloudflare | DNS, custom-domain TLS, CDN, cache | Domain configuration, request metadata |
| Stripe | Payment processing and subscription billing | Billing contact info, payment status |
| Anthropic (Claude) | AI text generation, analysis | Prompts and context you submit to AI features |
| Google (Gemini, Stitch) | AI text generation, image analysis, image generation, design generation | Prompts, design briefs, images you submit to AI features |
| Mailgun | Transactional email delivery | Email address, message content |
| Sentry | Error and performance monitoring | Stack traces, request metadata, user/site identifiers |
We may update this list as our infrastructure evolves; the current list will always be available on this page.
7. Data Retention
We retain account information and site content for as long as your account is active. If you cancel your subscription or close your account, we retain your data for a reasonable wind-down period (typically 30 days) so you can export or restore it, after which we delete it from active systems. Backups containing residual data are rotated out within a further 90 days. Logs and usage data are retained for up to 12 months. We may retain information longer where required by law (for example, tax records).
8. Your Rights
Depending on where you live, you may have rights to access, correct, delete, or export the personal information we hold about you, to object to or restrict certain processing, and to withdraw consent. You may exercise these rights by emailing the address in Section 12. We will respond within the timeframe required by applicable law.
If you are in California, you have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to deletion, and the right not to be discriminated against for exercising these rights. We do not sell personal information.
If you are in the European Economic Area, the United Kingdom, or Switzerland, our legal bases for processing are: performance of a contract (to provide the Service), legitimate interests (to secure and improve the Service), consent (where required), and legal obligation.
9. Children
Cadmus is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.
10. International Users
The Service is operated from the United States. If you access it from outside the US, you understand that your information will be transferred to and processed in the US, where data-protection laws may differ from those in your country.
11. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will notify you by email or through an in-app notice before the changes take effect. The "Effective" date at the top reflects the most recent revision.
12. Contact
Lifestyle One, LLC
Nevada, USA
Email: privacy@cadmus.digital