Legal

Privacy Policy

Last updated: 24 September 2026

Plain and simple: Can0nical exists so you own your work history. That means we collect as little as possible, we never put your personal data on a public blockchain, and you can walk away with your record, or erase it, whenever you want.

1. Who we are

Can0nical is operated by OmniGrowth Connect LLC, a New Mexico limited liability company. When this policy says “we,” “us,” or “Can0nical,” that’s who you’re dealing with. Questions? Reach us at outreach@omnigrowthconnect.com.

2. What we collect

If you join the waitlist

Just your email address, plus the specific opt-ins you check (launch updates, blog & insights, product announcements, promotions). Nothing more. We use it only for what you asked for.

If you become a paid member

  • Work logs: the milestones and deliverables you choose to record.
  • Verification data: confirmations from the clients you invite to validate your work, and the timestamps around them.
  • Account & billing basics: your name, your email address and OAuth provider identity (Google) used only for passwordless sign-in, and your payment status. We never collect or store a password, and payment details are handled directly by our payment provider, not stored by us.

3. Blockchain anchoring: hashes only

We never write your personal data, work descriptions, or client details onto a blockchain. When a verified record is anchored, only a one-way cryptographic hash, a fingerprint that can’t be reversed into your data, is committed to the blockchain network. The hash proves a record existed and hasn’t been altered. It reveals nothing about you.

4. Your GDPR rights, including erasure

Wherever you live, we honor the core rights the GDPR guarantees: access, correction, portability, and erasure. If you ask us to delete your data, we remove it from our systems.

Because a blockchain can’t be edited, we can’t “delete” an on-chain hash. Instead, erasure renders the anchored record inert: we destroy the underlying data and the keys that connect any hash back to you, so the remaining fingerprint is permanently orphaned and meaningless. In practice, your record ceases to exist as anything readable.

5. Third-party services

We rely on a small set of trusted providers, each handling one job:

  • Database & authentication: a managed cloud platform that securely stores your data and signs you in.
  • Blockchain anchoring: a public blockchain network where anonymized hashes (never your personal data) are recorded.
  • Payment processing: a PCI-compliant payment provider that handles your payment details directly; we never see or store them.
  • Identity verification: an optional government-ID and selfie check, used only for higher trust levels.
  • Bot protection: a check that runs only when you submit certain forms, to keep automated abuse out.
  • Site measurement, only with your permission (see section 6): Cloudflare Web Analytics, Google Analytics and DataFast.
  • Our own records: when you join a list, sign up or buy, we note it in our own email and spreadsheet tools so we can follow up. This is the same information you gave us, nothing more.

Some of these providers operate outside your home country, so using Can0nical may involve transferring data internationally; each is bound by its own data-protection commitments and appropriate safeguards, and we share only the minimum each needs to function.

6. Cookies and browser storage

Your browser keeps what the site needs to work: your sign-in, your light or dark setting, and your privacy choice itself. These cannot be switched off, because the site does not work without them. Our fonts are served from our own domain, so loading a page tells no one else that you visited.

Two things are optional. Visitors in the EU, EEA and UK are asked first, and neither happens unless they agree.

  • Measuring how the site is used. We count visits, the pages people read and where they arrived from (for example a search engine, a newsletter link or an AI assistant), so we can see which pages help and which sources lead to sign-ups and purchases. We use Cloudflare Web Analytics, which sets no cookies; Google Analytics, which sets _ga cookies; and DataFast, which sets datafast_ cookies and, when you buy, links the purchase to the visit that led to it. We never send them your name, your email or anything you type, and none of them runs on the pages opened from a private link, such as a validation link or a shared document. We also keep the first source of your visit in your browser, so a sign-up days later is still credited to it. Withdrawing this permission removes those cookies and that record.
  • Referral credit. If you arrive through a member’s referral link, we can remember their code in your browser until you sign up, so they are credited for introducing you.

We keep a record of each choice, with the last part of your IP address removed, so we can show it was given. We run no advertising trackers, and we don’t sell your data. You can change your choice at any time from Privacy settings at the foot of our public pages.

7. How long we keep things

DataRetention
Waitlist emailUntil you unsubscribe or ask us to remove it
Free-tier logs & verifications90 days, then automatically purged
Measurement data held by the providers aboveGoogle Analytics: 14 months. Cloudflare and DataFast: their standard retention
Your privacy choiceKept as proof of the choice; you are asked again after 12 months
Paid-tier verified recordPermanent. It’s yours to keep (until you erase it)

8. Changes to this policy

If we make a meaningful change, we’ll tell you by email (if you’re on our list) and update the date at the top. Continuing to use Can0nical after a change means you accept the updated policy.

This policy will be reviewed by legal counsel before full platform launch.