Draft, under review

Privacy Notice

Last edited 2026-09-04. This is a working draft written by the operator in plain language to describe what Fishpond actually does. It is reviewed, and where needed replaced, before the first paid subscription is taken. Until then the trial is offered on these terms as written.

Two kinds of personal data

Yours, as a user of the service: your email address, your name if you gave one, a password hash, the addresses and user agents of your sessions, and what you did (the audit log). The operator is the controller of this data.

Your customers’, which you put into your CRM. You are the controller; the operator processes it on your instructions and under the data processing agreement. This notice is about the first kind; the DPA is about the second.

What is collected, and why

Data	Why	Kept
Email address, name	To identify your login and to contact you about your account	Until the account is deleted
Password	Stored only as a salted PBKDF2 hash; never readable	Until changed or the account is deleted
Session records: IP address, user agent, times	So a sign-in can be revoked, and so an unexpected one can be noticed	Sessions expire; rows are kept 90 days
The audit log: what you did and when	So an account owner can see who changed what. Append-only	For the life of the account, and after deletion
API key metadata: name, prefix, scopes, last use	To list and revoke keys. The key itself is stored only as a hash	Until revoked; revoked rows are kept
Billing identifiers: a customer id and a subscription id from the payment processor	To match a payment to an account. No card details are ever seen or stored by Fishpond	For the life of the account

What is not done

No analytics or advertising scripts on any page. No cookies other than the one session cookie, which is signed and carries only your session id.
No selling, sharing or renting of data. No use of your data, or your customers’, to train any model.
No reading of your CRM by the operator except to run the service, to fix a fault you report, or where the law requires, and then recorded.

Where it is held, and who else touches it

Everything runs on Cloudflare (Workers, D1, KV), which is the infrastructure provider. If you connect a third-party service, that service receives what you instruct Fishpond to send it and nothing else. Payments are taken by a payment processor acting as merchant of record, named on the checkout page, which receives your email address and card details directly; Fishpond receives only the identifiers above. Email sent by the service goes through the sending provider you connect. Google services are reached only if you connect a Google account, and only for the scopes you grant.

Your rights

You can see and export what is held (settings export and audit export are routes), correct it, and delete your account, which revokes every session and key inside it at once. Write to hello@mynato.app for anything a screen does not do, and for a complaint; you also have the right to complain to the supervisory authority where you live.