Privacy Policy
Effective date: January 1, 2026
At NestEcho Workshop (“we”, “us”, “our”), we value privacy and transparency. This policy explains what we collect, why, and how you can exercise control. Our operating domain is echonest.bond.
Information we collect
- Account data: name, email, password hash.
- Transaction data: purchased courses, totals, and timestamps.
- Support messages: content of your inquiries and our responses.
- Usage data: pages visited, device type, and approximate location derived from IP for security.
- Cookies: essential cookies to maintain sessions and remember preferences (such as theme and cookie consent).
How we use information
- Deliver and improve courses and features like Fallows and the coverage estimator.
- Process payments and provide access to purchased content.
- Respond to support requests and notify you about substantive product updates.
- Detect, prevent, and investigate security incidents and abuse.
Legal bases
We process data to fulfill a contract (course access), with your consent (optional communications), and for legitimate interests (security, service improvement). Where required, we rely on your explicit consent.
Data retention
We retain account and transaction records for as long as your account is active and as required by law. Support messages may be retained to improve our service.
Sharing
We do not sell your personal information. We share data with trusted processors (e.g., payment providers) under strict contracts. We may disclose information to comply with legal obligations or to protect our rights.
Cookies
We use essential cookies and similar technologies to remember your preferences (theme, cookie choice) and keep you signed in. You can manage cookies in your browser. See the cookie banner in the footer for choices.
Data security
We implement encryption in transit, role-based access, and regular security reviews. No method is 100% secure; we work continuously to protect your data.
Your rights
- Access, correct, or delete your personal data.
- Object to or restrict certain processing.
- Withdraw consent where processing relies on consent.
- Data portability, where applicable.
Children’s privacy
Our courses are intended for adults and teens with guardian permission. We do not knowingly collect data from children under 13.
International transfers
Your data may be processed in countries other than yours. We use appropriate safeguards for international transfers.
Contact
Questions about this policy? Email [email protected] or call +1 (415) 780-9023.
Updates
We may update this policy to reflect changes to our practices. Material changes will be communicated via email or prominent notice on this site.