Effective date: April 20, 2026
Introduction
Cadslab (“Cadslab,” “we,” “us”) provides CADS, a web application for recording investigations, root-cause analysis, and decisions during incident response and related engineering work. This Privacy Policy explains what information we collect, why we collect it, and the choices you have. By using CADS, you agree to this policy together with our Terms of Service.
Information we collect
We collect information in the following categories:
- Account and authentication data. When you sign in (for example with Google or email one-time passcodes), we receive identifiers and profile details the identity provider shares with us, such as your email address and name, as needed to create and secure your account.
- Content you provide. Information you enter into CADS — including decisions, cases, timelines, notes, links to evidence, attachments, and similar investigation material — is stored to provide the service to you and your organisation.
- Technical and usage data. We may collect device, network, and log information (such as IP address, browser type, timestamps, and error logs) to operate, secure, and improve CADS.
- Analytics. We may use cookies and similar technologies, including Google Analytics, to understand how the site and application are used in aggregate (for example page views and navigation). You can control cookies through your browser settings.
How we use information
We use the information above to:
- Provide, maintain, and improve CADS and its features;
- Authenticate users and prevent fraud or abuse;
- Communicate with you about the service (for example security notices or support);
- Comply with law and enforce our Terms of Service;
- Analyse usage in aggregate to improve product experience.
We do not sell your personal information.
How we share information
We may share information with:
- Service providers who host infrastructure, process authentication, provide analytics, or perform other functions on our behalf, subject to appropriate safeguards;
- Your organisation when CADS is used under a team or company account, according to how your administrator configures access;
- Authorities when required by law or to protect the rights, safety, or security of users, Cadslab, or others.
Retention
We retain account and service data for as long as your account is active or as needed to provide CADS, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may depend on your organisation’s settings and applicable law.
Security
We implement technical and organisational measures designed to protect information against unauthorised access, loss, or misuse. No method of transmission over the Internet is completely secure; we encourage you to use strong authentication and protect your credentials.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To exercise these rights, contact us using the details below. You may also lodge a complaint with a data protection authority in your region.
International transfers
We may process and store information in countries other than your own. Where we transfer personal data across borders, we take steps consistent with applicable law to ensure appropriate protection.
Children
CADS is not directed at children under 16, and we do not knowingly collect personal information from them. If you believe we have collected such information, please contact us so we can delete it.
Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the effective date. Continued use of CADS after changes constitutes acceptance of the updated policy where permitted by law.
Contact
For privacy questions or requests regarding this policy, contact Cadslab at privacy@cadslab.com.