Privacy Policy

Effective date: 8 September, 2024

Introduction

Welcome to Ergonomicky, a service provided by NOVICO LLC. This Privacy Policy explains how we collect, use, and protect your personal information when you use our service.

What do we collect

Account data

For each user account, we store the following data:

• Full name

• Email address

• Profile image (avatar)

This data is either entered by you in the user interface of the service, or in the case when you sign in with Google, it is made available to us by Google.

We use the email address to authenticate users, to send transactional emails, and if you have explicitly opted in, promotional emails such as updates on new features.

We use the full name and profile image to identify your account to yourself and other users in the user interface of the service and in transactional emails.

You can update your account data or delete your account by visiting the Account Settings page. If you delete your account, the account data is immediately made inaccessible, but may for some time remain in our database backups. Since we do not keep database backups older than 30 days, the account data will be completely deleted within 30 days.

We store account data in databases hosted for us by Neon. You may find their privacy policy here.

Spreadsheets and teams

Our service lets users create and edit spreadsheets, and (depending on the plan) create and edit "teams" that represent a group of users in the context of access controls. For each spreadsheet, we store its current state as displayed in the user interface, as well as the history of edits. For each team, we store the team name entered by the user and data on access permissions of users and other teams.

As long as you have the relevant access permissions (for example, you are the user who created the spreadsheet and you haven't transferred it to anybody else), you can delete a spreadsheet or a team in the user interface of the service. As with account deletion, the data will be immediately made inaccessible and will be fully gone from our servers when our database backups expire, which is within 30 days.

Like account data, we store spreadsheet and team data in databases hosted for us by Neon. You may find their privacy policy here.

Payment data

We collect the data necessary to process your payments, such as credit card numbers. We do not process or store any payment data on our own infrastructure, instead all payment data is processed and stored by Stripe. You may find their privacy policy here.

Diagnostic data

We use Sentry to collect error reports and other usage data for the purposes of diagnosing bugs and performance issues. This data may include your IP address, parameters of your browser, operating system and device. It is stored for up to 30 days on Sentry's servers located in the European Union. You may find Sentry's privacy policy here.

Cookies

Cookies are files with a small amount of data which may contain unique identifiers and are stored on your device.

We only use cookies for the purposes of authentication and only for users who have signed in to the service, for as long as they are signed in.

We do not use any third-party cookies.

We do not respond to Do-Not-Track browser signals.

Transfer of Data

We do not sell or rent your personal data to any third parties for any purpose.

We do not collect any personal data about you from any third parties.

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.

Security

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cyber-criminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our services is at your own risk.

Minors

We do not knowingly collect or solicit data from, or market to, children under 18 years of age. If you become aware that such a child has provided us with personal data, please contact us using the contact details provided in the "Contact us" section below. If we become aware that we have collected personal data from a child under 18 years of age, we will deactivate the account and take reasonable measures to promptly delete such data from our records.

Withdrawing your consent

If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can do this by contacting us using the contact details provided in the "Contact us" section below.

Links to other sites

Our service may contain links to other sites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

Your rights

Depending on your country of residence, or your state of residence in the USA, you may have the right to:

• Know whether or not we are processing your personal data
• Receive details about the personal information we maintain about you and how we have processed it
• Request access and obtain a copy of your personal information
• Request rectification or erasure
• Restrict the processing of your personal information
• Data portability
• Not be subject to automated decision-making
• Object to the processing of your personal information
• Non-discrimination for exercising your rights
• Opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California’s privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects ("profiling")
• Obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including California's and Delaware's privacy law)
• Obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including Oregon’s privacy law)
• Limit use and disclosure of sensitive personal data (as permitted by applicable law, including California’s privacy law)
• Opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including Florida’s privacy law)
• Request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year (California Civil Code Section 1798.83, also known as the "Shine The Light" law)

You can exercise these rights by contacting us using the contact details provided in the "Contact us" section below. We will consider and act upon any request in accordance with applicable data protection laws.

Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.

If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide written and signed permission from you to submit such a request on your behalf.

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by contacting us using the contact details provided in the "Contact us" section below. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decision. If your appeal is denied, you may submit a complaint to your state attorney general.

If you are located in the EEA and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority.

Similarly, if you are located in the UK, you may contact the UK data protection authority.

Similarly, if you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Similarly, if you are located in Australia, you may contact the Office of the Australian Information Commissioner.

Similarly, if you are located in New Zealand, you may contact the Office of the Privacy Commissioner.

Similarly, if you are located in South Africa, you may contact the Information Regulator.

Changes to this policy

We may update this privacy policy from time to time. The updated version will be published here with a new "Effective" date. If we make material changes to this privacy policy, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification.

Contact us

You may contact our Data Protection Officer (DPO) by email at privacy@ergonomicky.com or by post at:

NOVICO LLC
Data Protection Officer
1967 Wehrle Drive, Suite 1-086
Buffalo, NY 14221
USA