Privacy policy

Last Updated: October 2025

Mesh Commons (“we,” “our,” or “us”) is a nonprofit organization registered in the State of Delaware, USA. We are committed to protecting your privacy and ensuring that your personal information is handled responsibly and transparently—whether you live in the United States, the European Union, or elsewhere.

Our Promise: We believe that technology should enhance—not exploit—human cognition.
We handle your data with the same care we bring to every system we design thoughtfully, transparently, and with your trust in mind.

Contact Us

privacy@meshcommons.org
https://meshcommons.org

This policy explains what data we collect, how we use it, and what rights you have.

  We collect only the data necessary to operate our programs and communicate effectively. This includes:

• Information you provide directly: Name, email address, organization, job title, and any optional information you include when you register for an event, join a workshop, or subscribe to updates.
• Usage data: Technical data such as your IP address, browser type, and the pages you      visit. We use cookies and analytics tools to understand how people interact with our site.
• Communications: Messages or feedback you send us through contact forms or email.

We do not collect sensitive information (such as health, financial, or biometric data) unless you explicitly choose to share it for a specific program—and only with your consent.

We collect information in three ways:

1. Directly from you — through forms, registrations, or direct communications.
2. Automatically — via cookies, analytics, and log files.
3. From trusted third-party tools — such as HubSpot (for forms and email) and Google Analytics (for site metrics).

You can adjust your browser settings to block or delete cookies if you prefer.

 We collect information to:

• Communicate with members, workshop participants, and partners.
• Share updates about events, research, and collaborations.
• Improve our website and user experience.
• Measure participation and impact across our programs.

We will never sell or rent your personal information to anyone.

Your personal information is used only for Mesh Commons purposes and processed under the following lawful bases (as defined under GDPR):

• Consent: You’ve given us permission (e.g., subscribing to our newsletter).
• Legitimate Interest: We use minimal data to operate and improve our services.
• Legal  Obligation: We may process or disclose data if required by law.

We use secure systems and access controls to protect your data from loss, misuse, or unauthorized access.

Only authorized Mesh Commons staff and select volunteers who manage communications or operations have access to personal data. We also rely on a few trusted service providers, including:

• HubSpot – for forms, newsletters, and contact management.
• Google Analytics – for anonymized website analytics.
• Web hosting partners – to operate the site securely.

These providers process data only on our behalf and under data-protection agreements.

We do not share your personal information with third parties except:

• When required by law or to comply with legal obligations.
• When collaborating with a partner organization on an event or research project and only with your consent.
• When using secure, GDPR-compliant tools that process data on our behalf.

We will never sell or trade your personal data.

We keep personal data only as long as necessary for the purpose it was collected:

• Newsletter subscribers: until you unsubscribe.
• Workshop or event participants: for the duration of the project or follow-up period.
• General contact inquiries: for up to one year after our last communication.

After this period, personal data is securely deleted or anonymized for statistical use.

You have the right to:

• Access your personal data.
• Correct inaccurate or outdated information.
• Request deletion (“right to be forgotten”).
• Withdraw consent at any time (for example, unsubscribe from emails).
• Opt out of data sharing for marketing or analytics.
• Request data portability (a copy of your information in a standard format).

To exercise any of these rights, contact us at privacy@meshcommons.org.
We will respond within 30 days.

Our services are not directed at children under 16. We do not knowingly collect information from minors. If we learn we’ve received such data, we’ll delete it promptly.

If you are located in the EU or UK, your personal information may be transferred to and processed in the United States. We ensure such transfers are protected by appropriate safeguards under GDPR, such as standard contractual clauses with our service providers.

We may update this policy occasionally to reflect new services or regulations.
The latest version will always appear on this page with a new “Last Updated” date.
If major changes occur, we’ll notify subscribers by email.