cpaas.co is an independent community site. This page says, in plain words, what is kept about you, why, and how to take it with you or delete it. It is not legal advice; if something here is unclear, write to us through the contact page.
Reading without an account
- No account is needed to read, use Match, browse the Ecosystem or compare. Your Match answers (your brief), your compare list and your milestones stay in your own browser (local storage) and are not sent to us.
- Language and theme choices are kept in a cookie or in your browser so the site remembers them.
- Abuse controls. To stop floods of sign-ups, messages and contributions, the server counts recent requests per network address in memory for a short while. The address is hashed first and is never written to storage.
- Analytics. If the site's operator switches on an analytics or tag tool in the site settings, it receives the pages you visit and standard browser information under that tool's own terms.
Contributing without an account
Edits, corrections and evidence can still be sent without an account. We keep what you write, the optional name and email you give (used only to follow up, never shown) and, if you claim one, a pseudonymous handle. Its private key stays in your browser; we keep only a hash of it.
Your account
- What we keep: your email address; your password, only as a one-way hash (never readable); your display name and public handle; your account status and, if an account is rejected or blocked, the reason; the profile answers you choose to give (role, company size, regions, languages, channels, use cases, industries, company, title, country, bio, website); your preferences (language, theme, email notifications, newsletter); when you accepted the terms and the privacy notice; your points, badges and the history of how you earned them; your sign-in sessions (a hashed token, when it was created and last used, and the browser's user-agent text); the date of your last visit; and failed sign-in counts, used to lock an account for a while after repeated wrong passwords.
- Why: to run your account, to tailor Match, the Ecosystem and Learn to your answers without asking again, to credit your contributions, and to keep the community safe.
- Who sees it: the site's moderators can see your account to approve it, to answer you and to keep the rules. Other members see only your public profile, and only if you turn it on: name, handle, badges, trust level, points and the profile answers you chose to share. Your email address is never shown to other members.
- Approval: new accounts may wait for a moderator. They see the name, handle, email and answers you gave when you signed up.
Emails (confirming your address, resetting your password, replies to your messages, the notifications you allow, and the newsletter if you subscribe) are sent through Resend, an email delivery service, with the operator's own account; Resend processes your address and the message to deliver it. Emails about the account itself (confirming your address, your password, the approval decision) are sent whatever your notification setting. Every newsletter email has a one-click unsubscribe link. If email is not set up on the site, nothing is sent and everything still works on the site itself.
Messages and the chat widget
When you write through the contact form or the chat widget, we keep the conversation: your messages and our replies with their times, the name and email you give, and a random key kept in your browser so you can reopen the conversation. Moderators read these to answer you, and the transcript is kept so the conversation can continue. Ask us to delete a conversation, or delete your account to anonymise your messages.
The help board
Requests, offers and help reviews you post are shown to members under the board's rules. A conversation between a member who asked for help and a member who offered it is private to the two of you; moderators read it only if one of you reports a problem. Any fee is agreed between the two of you, off the site: cpaas.co never handles payments or payment details.
Your choices
- Download your data: Settings → Your data → Download my data gives you a JSON file of everything held about your account.
- Delete your account: Settings → Delete account erases the account, its sessions, notifications, subscriptions and helper profile. Messages and contributions you made stay where they help others, shown as "Former member".
- Correct it: edit your profile at any time; a new email address is confirmed before it replaces the old one.
- Newsletter: unsubscribe in one click from any newsletter email, or in Settings.
- Questions and requests: the contact page.
How long things are kept
Sign-in sessions end after 30 days without use. Email links expire: 48 hours to confirm an address, 24 hours to confirm a new one, one hour to reset a password. Accounts are kept until you delete them or ask us to. Backups made by the operator may hold copies until they are replaced.