Privacy policy

1. Who we are

niceideas (niceideas.app) is operated by NiceMatrix Technologies Inc., 434223 Clear Mountain Dr E, Foothills, AB T1S 6B1, Canada ("NiceMatrix", "we", "us"). We are responsible for the personal information processed through the Service. Our Privacy Officer is accountable for our compliance with this policy and can be reached at [email protected].

This policy explains what information niceideas collects, why, how long we keep it, who we share it with and what rights you have. It applies to the niceideas web pages, public post links and application programming interfaces (the "Service"). Your NiceMatrix ID, which you use to sign in, is also covered by the NiceMatrix ID privacy policy.

2. Information we collect

Account and profile. When you sign in with NiceMatrix ID, we receive your NiceMatrix ID account identifier and username, and your name and profile picture if you have set them. We use them to create your profile: handle, display name and avatar, plus the bio you write. We do not receive your password, email address or phone number.

Content you publish. Posts (text, titles, images and audio), their earlier versions, post settings (such as whether comments are allowed), where each post came from (the web, NiceNote or another app) and when it was published or changed. Images are re-encoded when uploaded, which removes embedded metadata such as location (EXIF). Audio files are stored as uploaded, including any information embedded in them.

Interactions. Likes, comments, follows and reports. If you comment without an account, we store your comment and the optional nickname you enter.

Technical and security information. To prevent abuse, we create keyed one-way codes ("hashes") from a random browser identifier and from your IP address, and store these codes with likes, comments and reports instead of the IP address itself. Our web server keeps access logs with IP address, time, requested page and browser type. Our network provider tells us the country a request comes from; we use it only to apply the regional rules in Section 8 and do not store it with your profile or content. To deter automated spam, your browser solves a small computational check when you comment without an account; we do not use an third-party CAPTCHA.

Sign-in sessions. When you sign in on the web, we store a session record: a one-way hash of the session code, your account identifier, and when the session was created, last used and will expire.

Information from NiceMatrix ID. When you request deletion of your NiceMatrix ID, cancel that request, or the deletion is completed, NiceMatrix ID notifies niceideas so that we can act on it.

Information from apps you authorise. Apps you authorise send us the posts and media you publish through them, together with the app's identifier.

What we do not collect. We do not use advertising, analytics or social-media tracking tools, build advertising profiles or collect precise location. We do not ask for sensitive information, but your posts may reveal it if you choose to publish it.

3. How we use information and why

Decisions about content and accounts are made by people. Automatic rate limits only slow down or briefly block actions; we do not make automated decisions that have legal or similarly significant effects on you.

Under Canadian privacy law, we rely on your consent, which you give by using the Service after reading this policy, or on implied consent where appropriate. You may withdraw your consent at any time, subject to legal or contractual restrictions; this may mean that you can no longer use some or all of the Service.

4. Public information

Your profile (handle, display name, avatar, bio, join date, numbers of posts, followers, accounts followed and likes received), your posts and your comments are public. Anyone can see them, including people without an account; search engines may index them; and other platforms may show link previews of them. The nickname on a visitor's comment is public. The codes derived from IP addresses and browser identifiers are never shown.

5. Cookies

We use only cookies that the Service needs to work. We do not use advertising or analytics cookies.

If you delete these cookies, you are signed out and treated as a new visitor.

6. Sharing

We do not sell or rent personal information, and we do not share it for cross-context behavioural advertising. We share it only with:

• Service providers that process it for us under contract: Hetzner Online GmbH (servers and database, Germany) and Cloudflare, Inc. (network security, content delivery and media storage in Western Europe; its network operates worldwide).
• NiceMatrix ID, the sign-in service we operate, to sign you in and process account deletion.
• Apps you authorise, which receive only what you allow, such as the posts they published and your public profile.
• The public, as described in Section 4.
• Authorities and others for legal reasons: when the law or a valid legal process requires it, to protect the rights, safety or property of users, the public or us, or to investigate fraud or security issues.
• A successor business, if we are involved in a merger, acquisition or sale of assets, in which case this policy continues to apply to your information.

7. International transfers

NiceMatrix is based in Canada. Our servers and media storage are in Europe (Germany and Western Europe), and our network provider processes requests in the country nearest to you. Your information may therefore be processed in Germany, other European countries, Canada and other countries where our providers operate, whose laws may differ from those of your country.

Transfers from the European Economic Area, the United Kingdom and Switzerland to Canada rely on the adequacy decisions for Canada. Other transfers rely on the Standard Contractual Clauses included in our providers' data processing terms, or on other safeguards recognised by law.

8. Mainland China

For connections from mainland China, only individual shared post pages and the likes and comments on them are available. If you view, like or comment on such a page from mainland China, the information described in Section 2 is processed and stored outside mainland China, mainly in Germany. By interacting with the page, you agree to this transfer. You can exercise your rights under the Personal Information Protection Law of the People's Republic of China by writing to [email protected].

9. How long we keep information

We may keep information longer when the law requires it, or to establish, exercise or defend legal claims.

10. Deleting your account

niceideas accounts are deleted by deleting your NiceMatrix ID:

1. When you request deletion, your niceideas profile and posts go offline immediately.
2. If you cancel during the NiceMatrix ID cooling-off period (currently 15 days), everything returns at the same links.
3. When the cooling-off period ends, we permanently delete your profile, posts, earlier versions, media, comments, likes and follows, without any further retention period, apart from the backup cycle of up to 14 days.

You can also delete individual posts at any time, or write to us to delete anything else.

11. Your rights

Depending on where you live, including under Canada's PIPEDA, Alberta's Personal Information Protection Act, Quebec's privacy law, the EU and UK General Data Protection Regulation, the California Consumer Privacy Act and China's Personal Information Protection Law, you may have the right to:

• access the personal information we hold about you and receive a copy in a portable, machine-readable format;
• correct inaccurate information;
• delete your information;
• object to or restrict certain processing, including processing based on legitimate interest;
• withdraw your consent;
• complain to a data protection authority, such as the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner of Alberta, your local authority in the European Union, or the UK Information Commissioner's Office.

You can edit your profile in Settings and delete posts on niceideas or in the app you published them from, or by writing to us. For any other request, write to [email protected]. We may ask you to confirm that the account is yours, for example by signing in. We reply within 30 days, or within the period the law requires, and we do not charge for requests unless they are clearly unfounded or excessive. You may use an authorised agent where the law permits. We will not treat you differently for exercising your rights.

12. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. Users must meet the age requirements in Section 2 of the Terms of Use. If you believe that a child has given us personal information without the required consent, write to [email protected] and we will delete it.

13. Security

We protect information with encryption in transit (HTTPS), one-way hashes instead of raw session codes, IP addresses and browser identifiers, signed messages between our services, access limited to authorised staff, a strict content security policy without third-party scripts, and daily backups kept for a limited time. No system is perfectly secure. If a security breach creates a real risk of significant harm, we will notify you and the authorities as the law requires.

14. Notice for California residents

In the past 12 months we collected identifiers (account identifier, handle, hashed IP addresses and browser identifiers), internet activity (logs and interactions) and the content you publish, from the sources and for the purposes described in Sections 2 and 3. We disclosed this information for business purposes only to the service providers listed in Section 6. We do not sell or share personal information for cross-context behavioural advertising, and we do not use sensitive personal information to infer characteristics about you. Retention is described in Section 9.

15. Changes to this policy

We may update this policy to reflect changes to the Service or to the law. We will publish the new version with its effective date and, for material changes, give reasonable notice before they take effect, for example on the Service.

16. Contact

NiceMatrix Technologies Inc. — Privacy Officer
434223 Clear Mountain Dr E, Foothills, AB T1S 6B1, Canada
Email: [email protected]