Privacy Policy · Would be nice

This policy explains how Mikoriza Network Ltd (company number 17203147, 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom) handles personal data when you use Would be nice at wouldbenice.co. We are the controller of the data described here. You can reach us at contact@mikoriza.network.

What we collect and why#

Public pages never show your email address. You share it with a board's owner only if you choose to.

What	Why we use it	Our basis (UK GDPR)
Your email address	To create your account and send sign-in links, and the emails described below	Contract
Your username and avatar choice	To show who posted an idea, vote or comment without showing your email	Contract
What you post: ideas, comments, votes, and board settings if you own a board, including the account's logo and cover image if you upload them	To run the boards you take part in	Contract
Your choice to share your email with a board	To let that board's owner see your address, only if you consent	Consent
Your level on a board (trusted, normal or blocked), moderator roles and moderation records	To let owners and moderators keep a board safe	Legitimate interests
Which ideas you follow, and your notifications (what happened, on which idea, and whether you read it)	To show a bell with what changed since you last looked	Contract
Whether and when you asked for decision emails, and which decisions we emailed you about	To email you once when an idea you follow is done or declined, only if you ask for it	Consent
The host name of a custom domain a Pro owner adds, the DNS records we look up for it and when we last checked them	To serve a board on the owner's own address and to stop serving it if the records go away	Contract
Plan, billing status and payment identifiers from Stripe (never your full card number)	To provide paid plans and keep billing records	Contract and legal obligation
Technical data: a session cookie, rate-limit counters held in memory, short-lived server logs, error reports, and the bot check on the sign-in form	To keep you signed in, keep the service secure and stop abuse	Legitimate interests

The emails we send are sign-in links, decisions about ideas you suggested, decisions about ideas you follow if you asked for them, invitations to moderate a board, billing notices and important changes to your account or these documents. We do not send marketing email.

We do not use automated decision-making that has legal or similarly significant effects on you.

Who can see what#

Everyone who can open a board sees ideas, comments, vote counts and statuses, with the author's username and avatar. Public pages do not list who voted. If an account is set to signed-in only or private, fewer people can open its boards. Board pages ask search engines not to index them, so ideas and comments do not show up in search results.
The owner of a board can see the email address of people who chose to share it with that board, in the moderation view and in exports. Moderators see usernames and avatars only.
Board owners are separate controllers of the data they receive from a board, such as an exported list of shared email addresses. Their use of it is their responsibility, and our terms limit what they may do with it.
Revoking a share stops future access. It cannot recall a file an owner has already downloaded.

Cookies and similar storage#

One first-party cookie keeps you signed in. It is limited to the site you signed in on, is not readable by scripts, and is sent only over secure connections. It is strictly necessary, so it does not need your consent.
Your choice of light or dark theme is saved in your browser's local storage on your device.
When you dismiss a board's announcement, that is saved in your browser's local storage too, so it stays dismissed until the board posts a new one.
We use no analytics, advertising or tracking cookies. When you pay, the pages of Stripe and Link may set cookies that they describe in their own policies.

Who else handles your data#

We do not sell your data and we do not show ads.

We use a small number of service providers, who act on our instructions:

Stripe processes payments for paid plans and handles card details directly.
Resend delivers our emails, so it sees the address and content of each message.
Cloudflare (R2) stores the fixed set of avatar images, which hold no personal data, and the logos and cover images that account owners upload. We save an uploaded image again before storing it, without its metadata (such as the place a photo was taken), so it holds only what the picture shows. R2 also keeps our daily database backups, which are encrypted before they leave our server; Cloudflare cannot read them.
Cloudflare (Turnstile) checks that the sign-in form on wouldbenice.co and its subdomains is used by a person and not a bot. The check runs in your browser, so Cloudflare sees your IP address and technical details of your browser and device. It does not receive your email address.
Sentry (Functional Software, Inc.) receives a report when the service hits an error, so we can fix it. A report holds the error, the page address (with any sign-in or invitation link removed), the browser type and internal identifiers. It holds no email address, IP address, cookie or anything you typed. Sentry keeps these reports in the EU (Germany) for up to 90 days.
Better Stack checks from outside that the service is up and runs our status page at status.wouldbenice.co. The status badge in the footer of our marketing pages loads from that page, so Better Stack sees your IP address and technical details of your browser when the badge loads. The badge sets no cookies.
Our hosting provider runs the application and the database.
Public DNS resolvers (Cloudflare and Google) answer our lookups of the DNS records of a custom domain, so they see its host name. Certificate authorities (such as Let's Encrypt and ZeroSSL) issue its certificate, and the host name then appears in public certificate transparency logs. None of this involves the people who visit the board.

When you buy a paid plan, Link (Sold through Link, LLC), Stripe's reseller, sells it to you as merchant of record. Link and Stripe collect your payment and billing details for that sale and handle them under their own privacy policies. We receive your plan, its billing status and payment identifiers, never your full card number.

We do not sell your data or share it with advertisers. We may disclose data if the law requires it, or to protect people from serious harm.

Some of these providers process data outside the United Kingdom and the European Economic Area. Where they do, we rely on safeguards the law accepts, such as an adequacy decision, the UK International Data Transfer Addendum or standard contractual clauses.

How long we keep it#

While your account exists we keep your account details, your content and your shares. A suspended account keeps them too, with the date and our reason for the suspension, until the suspension is lifted or the account is deleted. The same goes for a person we suspend, except their votes, which are removed when we suspend them and do not come back.
When you delete a comment (possible for a few minutes after writing it, until someone replies) its text is erased at once; the comment no longer shows and is not exported. When you withdraw an idea it leaves the board for good, but we keep it, with its private review thread, in your submissions.
When you delete your account we remove your sign-in and sessions, your email shares, your participant levels and moderator roles, all of your votes (the counts are recalculated), your ideas that were never published together with the private feedback on them, and invitations sent to your address. Your username and email address become free to use again.
What stays, without your name: ideas and comments you published remain on their boards and read "Deleted account". Moderation records stay with the actor removed, and the status and merge history of ideas stays.
When a board or an account that owns boards is deleted, everything on it is removed at once: ideas, votes, comments, reviews, moderator seats, invitations and shares, and for an account its logo and cover image. A replaced or removed logo or cover image is deleted too. People who took part lose their contributions to that board. The board's address stays reserved for 90 days so that old links do not lead to someone else's page.
Notifications are deleted 30 days after you read them and in any case after 60 days.
Sign-in links and sessions are short-lived and expire. We do not store IP addresses in our database. IP addresses are used for rate limits, held in memory only, and our hosting infrastructure may keep short-lived access logs that include them. Our own server logs hold no IP or email addresses; they stay on our server and are overwritten as new lines come in, usually within days to a few weeks.
Backups are encrypted and kept for 14 days. Data you delete leaves the backups within 14 days.
Billing records are kept for as long as the law requires.

Your choices and rights#

Under data protection law you can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable format. Where we rely on consent, you can withdraw it at any time.

Delete your account from your settings (how).
Turn decision emails on or off in your settings, or with the unsubscribe link in any of them.
See and revoke your email shares on the sharing page of each account (/me/sharing) or under "Me" in the dashboard.
Board owners can export their board's data as CSV from the board's settings.
For anything else, or if you need help, email contact@mikoriza.network from the address on your account. We reply within one month.

If you are unhappy with how we handle your data, please tell us first. You can also complain to the UK Information Commissioner's Office (ico.org.uk), or to the data protection authority where you live.

Children#

Would be nice is for people aged 16 and over. We do not knowingly collect data from anyone younger. If you think a child has an account, email us and we will delete it.

Security#

Sign-in links are single-use and stored hashed, connections are encrypted, access to production systems is limited, and backups are encrypted. No system is perfectly secure, but we take care to protect your data and will tell you and the regulator if a breach puts you at risk.

Changes to this policy#

When we change this policy we will post the new version here with its date. For material changes we will email you or show a notice in the service before they take effect.

Contact us#

Mikoriza Network Ltd, company number 17203147 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom contact@mikoriza.network