Privacy Policy

Last updated: Nov 13, 2024

This policy applies to all products built and maintained by The Commons Good Inc. including NonVoid (together referred to in this document as “NonVoid”). This policy applies to our handling of information about site visitors, prospective customers, customers and their authorized users (in relation to their procurement of the services and management of their relationship with us). We refer collectively to these categories of individuals as “you” throughout this policy.

What We Collect and Why

Identity and Access

When you browse NonVoid and our artist profiles anonymously, we do not store personally identifying information in cookies or in the browser. However, upon creating and/or logging into a NonVoid user account we make use of cookies and other tracking to help us identify you, and to improve the product.

When you sign up for a NonVoid product, we ask for identifying information such as your name, email address, and maybe an operating company name. This is so you can personalize your new account, and we can send you product updates and other essential information. We may also send you optional surveys from time to time to help us understand how you use our products and to make improvements. With your consent, we will send you our newsletter and other updates.

We do not sell your personal information to third parties, and we won’t use your name or company in marketing statements without your permission.

Billing Information

If you sign up for a paid NonVoid product, you will be asked to provide your payment information and billing address. Credit card information is submitted directly to our payment processor (Stripe) and doesn’t hit our servers. We store a record of the payment transaction, including the last 4 digits of the credit card number, for purposes of account history, invoicing, and billing support. We store your billing address so we can charge you for service, calculate any sales tax due, send you invoices, and detect fraudulent transactions. Occasionally, we use aggregated billing information for marketing purposes.

Product Interactions

We store the content you upload or receive in your NonVoid product accounts on our servers. This ensures you can use our products as intended, such as creating flash art or receiving calendar bookings. We keep this content as long as your account remains active. If you wish to delete your account, please contact us via our support email.

Geolocation Data

For most of our products, we log the full IP address used to sign up for an account and retain it for future spam mitigation. We also log all account access by full IP address for security and fraud prevention purposes and keep this login data as long as your account is active.

Website Interactions

We collect information about your browsing activities for analytics and statistical purposes, such as conversion rate testing and experimenting with new product designs. This includes details such as your browser and operating system versions, your IP address, web pages visited, and the duration of your visits. If you have an account and are signed in, these web analytics data are tied to your IP address and user account until your account is no longer active.

Anti-Bot Assessments

We use CAPTCHA across our applications to prevent brute force logins and as a means of spam protection. We have a legitimate interest in protecting our apps and the broader internet community from credential stuffing attacks and spam. When you log into your NonVoid accounts and when you fill in certain forms, the CAPTCHA service evaluates various information (e.g., IP address, session duration, mouse movements) to detect automated activity. The CAPTCHA service provides us with spam score results; we do not access the evaluated information.

Advertising and Cookies

NonVoid occasionally runs ads on various third-party platforms such as Google. Users who click on one of our ads will be directed to our marketing site. Where permissible by law, we may load an ad-company script on their browsers that sets a third-party cookie and sends information to the ad network to evaluate the effectiveness of our ads. We may also use persistent first-party cookies and some third-party cookies to store certain preferences, facilitate the use of our applications, and support analytics.

A cookie is a piece of text stored by your browser that helps remember login information and site preferences. It might also collect information such as your browser type, operating system, web pages visited, duration of visits, content viewed, and other click-stream data. You can adjust cookie retention settings and accept or block individual cookies in your browser settings. However, our apps may not function properly if you disable cookies.

Voluntary Correspondence

When you contact NonVoid for support or inquiries, we keep that correspondence, including your email address, to reference past communications if you reach out again. We also store information you may volunteer, such as written responses to surveys. If you agree to a customer interview, we may ask for your permission to record the conversation for future reference or use, and will do so only with your express consent.

Mobile App Permissions

We may offer optional desktop and mobile apps for some of our products. Our apps may request your consent before accessing contacts, calendar, camera, and other privacy-sensitive features of your device. Consent is always optional, though some features may be unavailable or not function properly.

When We Access or Disclose Your Information

To Provide Services

We use some third-party subprocessors to help run our applications and provide services to you. We establish GDPR-compliant data processing agreements with each subprocessor, extending GDPR safeguards everywhere personal data is processed. We may disclose your information to an integrated third-party service to provide the functionality or improve our service. Here are a list of our subprocessors:

  • Vercel: Cloud services provider
  • Cloudflare: Cloud services provider
  • Google Cloud: Cloud services provider
  • Resend: Email communication provider
  • Help Scout: Help desk software
  • Posthog: Analytics provider

For example, if you connect your Google Calendar account to your NonVoid account to view your calendar availability and schedule bookings through our service, those calendar events will be stored by both NonVoid and Google. Your Google user data will only be used to provide the functionality of our service, or to improve our service.

We may access your content for limited purposes if, for example, an error occurs that stops an automated process from working and requires manual intervention to fix. These are rare cases, and when they happen, we look for root cause solutions as much as possible to avoid them recurring. We may also access your content to help you with a support case.

For Legal Reasons

Our policy is to not respond to government requests for user data unless compelled by legal process. If Canadian law enforcement authorities have the necessary warrant, subpoena, or court order, we must comply. We will only respond to requests from non-Canadian government authorities if compelled by the Canadian government through a mutual legal assistance treaty or agreement. We aim to notify affected users before disclosing data unless legally prohibited.

To Exclude You from Ads

Where permissible by law, we may use your cookie information, or disclose a one-way hash of your email address to ad companies to exclude you from seeing our ads.

To Investigate Restricted Uses

Accessing a customer’s account when investigating potential abuse is a measure of last resort. If we discover you are using our products for restricted purposes, we will take necessary action, including notifying appropriate authorities.

Aggregated and De-identified Data

We may aggregate and/or de-identify information collected through our services and use this data for any purpose, including marketing and analytics.

Your Rights Regarding Your Information

We strive to apply the same data rights to all customers, regardless of their location. These rights include:

  • Right to Know: You have the right to know what personal information is collected, used, shared, or sold. We outline both the categories and specific bits of data we collect, as well as how they are used, in this privacy policy.
  • Right of Access: You have the right to access the personal information we gather about you and obtain information about its sharing, storage, security, and processing.
  • Right to Correction: You have the right to request correction of your personal information.
  • Right to Erasure: You have the right to request that your personal information be erased from our possession and, by extension, from all of our service providers. Some data deletion requests may prevent you from using our services because our applications may then no longer work.
  • Right to Complain: You have the right to make a complaint regarding our handling of your personal information with the appropriate supervisory authority.
  • Right to Restrict Processing: You have the right to request restriction of how and why your personal information is used or processed.
  • Right to Object: You have the right, in certain situations, to object to how or why your personal information is processed.
  • Right to Portability: You have the right to receive the personal information we have about you and transmit it to another party.
  • Right to Not Be Subject to Automated Decision-Making: You have the right to object to and prevent any decision that could have a legal or similarly significant effect on you from being made solely based on automated processes.
  • Right to Non-Discrimination: We do not and will not charge you a different amount to use our products or offer you different discounts because you have exercised your data privacy rights.

Many of these rights can be exercised by signing in and updating your account information. Certain information may be exempt from such requests under applicable law. If we are unable to verify your identity, we may be unable to respond to your requests. If you have questions about exercising these rights or need assistance, please contact us at our provided contact information.

How We Protect Your Data

All data is encrypted via SSL/TLS when transmitted from our servers to your browser. Most data are not encrypted while they live in our database (since they need to be ready to send to you when you need them).

Deleting Content in Your Accounts

You can delete content directly within your NonVoid product accounts. We generally delete the information within 60 days of your request, but some information may remain in encrypted backups. We may also delete any information within 60 days of account cancellation.

Data Retention Periods

We only retain the personal data collected from you for as long as your account is active or for a limited period of time as needed to fulfill the purposes for which we initially collected it, unless otherwise required by law.

Location of Our Site and Data

Our products and other web properties are operated in Canada. Please be aware that any information you provide to us will be transferred to and stored in Canada or the United States. By using our sites and products and providing us with your information, you consent to this transfer and storage of your information in Canada or the United States.

Policy Changes

We may update this privacy policy from time to time to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new policy on our site. You are advised to review this policy periodically for any changes.

Contact Information

If you have any questions about this privacy policy or our treatment of the information you provide us, please contact us by email at: help@nonvoid.com