Privacy Policy | Co-Nexus

Overview

Co-Nexus ("we," "us," or "our") is a vision-stage community initiative based in Colorado. This Privacy Policy explains what information we collect through our website, how we use it, and your choices regarding that information.

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

Information We Collect

Information You Provide

Newsletter signup: Email address.
Member interest form: Name, email, location, interest type, and optional message.

Information Collected Automatically

Analytics: We use Umami, a privacy-focused, cookie-free analytics service. Umami does not collect personally identifiable information. All data is anonymized and aggregated. No cookies are placed on your device for analytics purposes.
Server logs: Our hosting provider (Cloudflare) automatically collects standard server log data, including IP addresses, browser type, pages visited, and timestamps. This data is managed by Cloudflare according to their retention policies.
Bot verification: We use Cloudflare Turnstile on our forms to prevent spam and abuse. Turnstile may collect interaction data to verify you are human. This data is processed by Cloudflare and is not stored by us.

How We Use Your Information

To send newsletter content you have subscribed to
To respond to member interest inquiries
To improve our website and services
To prevent abuse, spam, and unauthorized access
To comply with legal obligations

Data Retention

We retain your information only as long as necessary for the purposes described in this policy:

Newsletter subscriptions: Your email address is retained until you unsubscribe. After unsubscribing, your information is removed from our mailing list within 30 days.
Member interest submissions: Your information is retained for as long as necessary to process your inquiry and any resulting communication.
Analytics data: All analytics data collected via Umami is anonymized and aggregated. No personally identifiable information is retained.
Server logs: Cloudflare retains server log data according to their standard schedule (approximately 72 hours for most log types).
Bot verification: Cloudflare Turnstile data is transient and is not stored by us.

Third-Party Services

We use the following third-party services to operate our website. Each service has its own privacy policy governing how it handles your data:

Cloudflare: Website hosting, CDN, security, and bot verification. Privacy Policy
Brevo: Email delivery and newsletter management. Privacy Policy
Umami: Privacy-focused, cookie-free website analytics. Privacy Policy

Your Rights Under the Colorado Privacy Act (CPA)

If you are a Colorado resident, you have the following rights regarding your personal data:

Right to access: You may request confirmation of whether we process your personal data and obtain a copy of that data.
Right to correction: You may request that we correct inaccuracies in your personal data.
Right to deletion: You may request that we delete your personal data.
Right to data portability: You may request a copy of your personal data in a portable, readily usable format.
Right to opt out: You may opt out of the sale of your personal data or its use for targeted advertising or profiling. We do not sell personal data, engage in targeted advertising, or use profiling that produces legal or similarly significant effects.

To exercise any of these rights, please email us. We will respond to your request within 45 days. If we need additional time, we will notify you of the extension and the reason.

If we decline your request, you may appeal our decision by emailing us with the subject line "Privacy Appeal." We will respond to your appeal within 45 days. If you are not satisfied with the outcome of your appeal, you may contact the Colorado Attorney General.

Data Security

We take reasonable measures to protect your information, including:

All data transmitted to and from our website is encrypted via HTTPS (TLS 1.3)
Our website is hosted on Cloudflare's infrastructure with DDoS protection and a Web Application Firewall
We implement security headers including Content Security Policy, HSTS, and X-Frame-Options

No method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Children's Privacy

Our website and services are not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please email us and we will promptly delete that information.

International Data Transfers

Our website is hosted on Cloudflare's global content delivery network, which may process and cache data at edge locations worldwide. Our operations are based in the United States, and any personal data you provide is processed in the United States.

Do Not Track

Our website does not respond to "Do Not Track" browser signals. However, our analytics solution (Umami) is cookie-free and does not track individual users across websites, which aligns with the intent of Do Not Track.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please email us.

Co-Nexus
Colorado