Privacy Policy

Last Updated: January 12, 2025

Look, privacy policies are usually terrible to read. We're going to try something different here: explaining what we do with your data in plain language.

Onclick is a worker-owned cooperative in Texas. That cooperative structure matters—we're accountable to our member-owners, not investors looking for growth at any cost. We're not trying to extract maximum value from your data. We're just trying to run services that work.

What we collect (and why)

Stuff you give us directly

When you sign up, we need your email address. That's how you log in and how we contact you about your account. You can optionally add a phone number and display name.

If you're using our Governance or Pages tools for your organization, you'll provide info about that organization—name, description, what industry you're in, address. Makes sense, right? Can't help you manage an organization without knowing which organization it is.

Payment stuff goes through Stripe when you subscribe to paid features. We never see your actual credit card number—just a reference ID that says "this person has a Stripe account." Stripe handles the sensitive parts.

When you email us or schedule a call, we obviously have whatever you tell us in that conversation.

Information Collected Automatically

• Usage Data: We collect information about how you interact with our Services, including pages visited, features used, and actions taken.
• Device Information: We collect information about the device and browser you use to access our Services.
• Log Data: Our servers automatically record information including your IP address, browser type, and timestamps.

Information from Third Parties

We may receive information about you from third-party authentication providers if you choose to sign in using services like Google or GitHub.

How We Use Your Information

We use your information to:

• Provide, maintain, and improve our Services
• Process transactions and send related information
• Send you technical notices, updates, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze trends, usage, and activities
• Detect, investigate, and prevent fraudulent transactions and abuse
• Comply with legal obligations

How We Share Your Information

We do not sell your personal information. We share your information only in the following circumstances:

Service Providers

We share information with third-party service providers who perform services on our behalf:

• Supabase: Authentication, database hosting, and real-time features. Supabase Privacy Policy
• Stripe: Payment processing for subscriptions. Stripe Privacy Policy
• Cloudflare: Website hosting, content delivery, and file storage. Cloudflare Privacy Policy

Within Your Organization

If you are part of an organization using our Services (such as a collective using Governance), other members of your organization may see your profile information and activity within that organization.

Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request.

Business Transfers

If Onclick is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. As a cooperative, any such transaction would require member approval per our bylaws.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you Services. We will also retain and use your information as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.

You may request deletion of your account and associated data at any time by contacting us or using the account deletion feature in your account settings.

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS) and at rest, access controls, and regular security assessments.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Your Rights and Choices

Access and Portability

You can access and download your personal information through your account settings.

Correction

You can update your account information at any time through your account settings.

Deletion

You can delete your account and request deletion of your personal information by contacting us at privacy@onclickcoop.dev.

California Residents (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act:

• Right to know what personal information we collect, use, and disclose
• Right to request deletion of your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at privacy@onclickcoop.dev.

European Users (GDPR)

If you are in the European Economic Area, you have additional rights under the General Data Protection Regulation:

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent

Our legal basis for processing personal data includes:

• Contract: Processing necessary to provide the Services you requested
• Legitimate Interests: Processing for our legitimate business interests, such as fraud prevention and service improvement
• Consent: Where you have given consent for specific processing activities

To exercise your rights, contact us at privacy@onclickcoop.dev.

Browser Storage

We use browser local storage to maintain your authentication session. This is essential for keeping you logged in and is handled automatically by our authentication provider (Supabase). We do not use cookies for tracking or advertising purposes.

The data stored includes:

• Authentication tokens: Used to keep you signed in securely
• Session preferences: Such as your selected organization or view settings

This storage is essential for the functionality of our Services. Clearing your browser's local storage will sign you out.

Children's Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete that information promptly.

If you believe we have collected information from a child under 13, please contact us at privacy@onclickcoop.dev.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that are different from the laws of your country.

When we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Onclick Cooperative Inc Email: privacy@onclickcoop.dev Website: https://onclickcoop.dev

You may also review our Bylaws to learn more about our cooperative structure and governance.