Your work is public. Your data is not a free-for-all.

Charles Patterson, trading as on.design, is the controller of personal information processed through this service. Contact us at hello@on.design. For safety or abuse reports, email abuse@on.design.

• Account information: email address, authentication identifiers, invite and membership status, and notification preferences.
• Profile and team information: name, handle, biography, location, avatar, banner, availability, links, skills, team membership and other details you choose to publish.
• Content and activity: posts, uploaded media, comments, likes, follows, collections, reports, invitations, job listings and private messages. Public profile and community content can be seen and shared by other people.
• Payments: plan, subscription, customer and transaction status received from Stripe. Stripe handles full card and bank details; we do not store them on on.design servers.
• Support and safety: feedback, correspondence, reports, moderation decisions and information needed to investigate abuse or keep the service secure.
• Technical information: IP address, device and browser information, request logs and security events. If you allow optional analytics, we also collect page views, product interactions and masked session recordings.

• To provide the service and take payment — performing our contract with you, including authentication, profiles, publishing, messaging, subscriptions and job listings.
• To protect the community and operate reliably — our legitimate interests in preventing fraud and abuse, enforcing our terms, debugging problems and maintaining security.
• To meet legal duties — including tax, accounting, consumer protection, law-enforcement and data-protection obligations.
• To measure and improve the product — only with your consent where we use optional analytics or session replay. You can withdraw that consent at any time.

We use essential storage for authentication, security, theme choices, onboarding progress and other features you request. These are needed for the service to work. Our consent cookie, ond_analytics_consent, remembers your analytics choice for up to one year.

PostHog product analytics, masked session replay and Vercel Web Analytics do not start unless you choose “Allow analytics”. Rejecting them does not limit the core service. Sensitive input fields and page text are masked in replay. Replay is disabled entirely on sign-in, onboarding, private messages, settings, draft/editing, client portal and administration surfaces.

We use carefully selected providers to run on.design:

• Supabase for authentication, databases and account infrastructure.
• Vercel for hosting, delivery, security and optional web analytics.
• Cloudflare R2 for uploaded images and other media.
• Stripe for checkout, subscriptions, billing and fraud prevention.
• Resend for transactional email.
• Sentry for error monitoring and service reliability.
• PostHog for optional product analytics and masked session replay.

We may also disclose information when required by law, to protect people or the service, or as part of a genuine business sale or reorganisation. We do not sell personal information.

Some providers may process information outside the UK. Where UK data-protection law requires it, we rely on adequacy regulations or approved contractual safeguards and associated risk assessments. You can ask us for more information about the safeguard used for a transfer.

We keep account data and content while your account is active and for as long as needed to provide the service. Deleted material may remain temporarily in backups, logs or moderation records. We keep security records for as long as reasonably needed to investigate abuse, and payment and accounting records for the periods required by law. We then delete or anonymise information unless a dispute, legal claim or safeguarding need requires longer retention.

Depending on the circumstances, UK data-protection law may give you rights to access, correct, erase, restrict or receive your personal information, and to object to certain uses. Where we rely on consent, you can withdraw it at any time without affecting earlier processing.

Email hello@on.design to make a request. We may need to verify your identity. You can also complain to the UK Information Commissioner’s Office at ico.org.uk.

We may update this notice as the product or law changes. We will change the effective date and give prominent notice where a change materially affects your rights or how we use information.