Privacy

01Who we are

Common Measure, Inc. ("Common Measure", "we", "us") is a C corporation incorporated in Delaware, United States. Our registered office is 8 The Green, Ste A, Dover, DE 19901, United States. We are the controller of the personal information described in this policy.

02What this policy covers

This policy covers this website and any personal information you send us by email. Products we release carry their own notices. Where a product notice conflicts with this policy, the product notice governs for that product.

03Information we collect

• Information you give us. Your name, email address, employer, and anything else you choose to include when you write to us.
• Technical information. This site is a set of static files. Our hosting provider processes the IP address, user agent, and request metadata of each visit in order to serve the page and protect the service from abuse.

We do not run advertising or third-party analytics on this site, and the site itself sets no cookies.

04How we use information

• To reply to you and continue a conversation you started.
• To evaluate business, hiring, and partnership inquiries.
• To operate, secure, and debug this website.
• To meet legal, accounting, and tax obligations.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

05Models and training data

We do not use messages you send us to train, fine-tune, or evaluate machine learning models.

Where a Common Measure product processes your data with a model, the terms for that product state what is sent to which provider, how long it is retained, and whether it is used for training. If we change that arrangement, the change applies going forward and not to data already collected under the previous terms.

06Legal bases for processing

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

• Legitimate interests, in responding to inquiries and keeping this site secure.
• Steps taken at your request before entering into a contract.
• Your consent, where we have asked for it. You can withdraw consent at any time.
• Compliance with a legal obligation.

07How we share information

We disclose personal information to these categories of recipient:

• Infrastructure and hosting providers that run this site and our internal systems.
• Email and productivity providers that store our correspondence.
• Professional advisers, including legal, accounting, and audit.
• A counterparty in a merger, financing, or sale of assets, subject to this policy continuing to apply.
• Government bodies and law enforcement, where we are legally required to disclose.

Service providers are bound by contract to process personal information only on our instructions and to keep it confidential.

08Where we process information

We are based in the United States, and the personal information described in this policy is processed there. Our infrastructure and email providers operate globally, so information may be stored or handled in other countries where those providers run their services.

09How long we keep information

We keep email correspondence for as long as the purpose it was sent for requires, and delete it once that purpose ends. Correspondence that becomes part of a contract, a legal or tax record, or an ongoing relationship is kept for as long as that record or relationship lasts. Request logs held by our hosting provider follow the retention schedule set by that provider.

10Security

We serve this site over TLS, restrict access to correspondence on a least-privilege basis, and require multi-factor authentication on the accounts that hold it. No system is perfectly secure. If you believe you have found a vulnerability, write to us and we will respond.

11Your rights

Subject to local law, you can ask us to give you a copy of your personal information, correct it, delete it, port it, restrict how we use it, or object to a particular use.

If you are a California resident, you also have the right to know what we collect and disclose, the right to delete and correct, the right to opt out of sale or sharing (we do neither), the right to limit the use of sensitive personal information (we do not collect it for that purpose), and the right not to be discriminated against for exercising any of these. You may use an authorized agent.

To exercise a right, email us. We answer California requests within 45 days and European and UK requests within one month, and we will tell you if we need the extension the law allows. If you are in the European Economic Area or the United Kingdom you may also complain to your supervisory authority.

12Cookies and browser storage

This site sets no cookies and uses no browser storage for tracking. Our hosting provider may set a strictly necessary cookie for security and bot management on some requests. If we add analytics later, we will update this policy and, where the law requires it, ask for your consent first.

13Children

This site and our products are not directed to children under 13, or under 16 in the European Economic Area, and we do not knowingly collect their personal information. If you believe a child has sent us information, write to us and we will delete it.

14Changes to this policy

We post changes on this page and update the effective date above. If a change materially affects how we handle information we already hold, we will give notice by email where we have an address for you.

15Contact us

Questions about this policy, or a request about your information: