Privacy Notice

Last Updated March 3, 2023

This Privacy Notice explains how we at Good Month Labs, Inc. (“Good Month,” “we” or “us”) collect and treat Personal Data when you visit or use our services available at goodmonth.io or trycake.xyz (collectively, our “Services”) and explains your options to control your Personal Data with respect to our Services. This Privacy Notice is part of and governed by our Terms of Use. You consent to this Privacy Notice by clicking to accept where that option is made available or by simply using our Services. This Privacy Notice does not apply to any third-party platforms or services whether or not linked or accessible from our Services. If you have questions about our privacy practices or would like to make a complaint, please contact us at legal@goodmonth.io.

Privacy summary

At Good Month, we understand that your privacy is important, and we want you to have a clear understanding of how we collect and treat your information. We encourage you to read this Privacy Notice in full to understand in detail:

  • How and why we collect Personal Data depends on how you use our Services.
  • Our use of cookies to provide our Services.
  • Our security measures to keep your Personal Data safe.
  • The length of time we retain your Personal Data.
  • Whether and to whom we might disclose your Personal Data.
  • Your options to control your Personal Data and how we use it.
  • Your privacy rights under the laws that apply to you.
  • Cross-border transfers of Personal Data and our Services.
  • How to contact Good Month with questions.

Personal Data

The term “Personal Data” is defined by the laws that provide individuals with rights and options over the information that identifies, relates to, describes, is reasonably capable of being associated with them, or could reasonably be linked, directly or indirectly, with the individual or their household. Personal Data falls within certain categories, for example:

  • Identifiers (e.g., name, email, telephone number, address, username);
  • Sensitive Personal Data (e.g., government identification number; precise geolocation; racial or ethnic origin; religious beliefs; health information; contents of messages when we are not the recipient; in some cases, information about a known child);
  • Legally protected information (e.g., race, citizenship, marital status, sex);
  • Employment-related information (e.g., current or past employment);
  • Non-public educational information, including information protected under the Family Educational Rights and Privacy Act (20 U.S.C. § 1232g, 34 C.F.R. Part 99);
  • Biometrics (e.g., DNA, face/voice prints, health data) and audio, electronic, visual, thermal, or olfactory information;
  • Commercial information (e.g., products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies);
  • Internet or other similar activity (e.g., browsing history; content interactions); and
  • Inferences drawn from Personal Data to create a profile about preferences, characteristics, trends, predispositions, behavior, attitudes, intelligence, etc.

Privacy laws sometimes do not cover publicly available information, aggregated information (meaning data summaries or reports with Personal Data removed), or anonymized information that cannot be linked back to an individual.  

Collection & Use of Personal Data

Exactly how and why we collect Personal Data depends on how you use our Services. In any case, we only collect, use, retain, and disclose Personal Data as reasonably necessary and proportionate to provide you with our Services. All Personal Data that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such Personal Data. In the last 12 months, we have collected identifiers, employment-related information, commercial history, and internet activity or similar data. We only collect and use Personal Data as adequate and relevant to the specific, express purposes described in this Privacy Notice or at the time of collection. We collect this Personal Data with your consent, with a legitimate interest, or as authorized or required by law, from these sources:

Personal Data You Submit to Us: You submit your Personal Data to us with your consent when you register and use the Services or contact us or request information from us about our Services.

  • To register you must provide a Discord username, email address, online and IRL contact information, job title, Twitter handle, and you must set your password.
  • If you request information or contact us for other purposes, we will collect your name, contact information, and any Personal Data you choose to include in your message to us.
  • We use Stripe to collect, process, and store all payment data, so your payment data never touches our systems.

Your Social Media Account: Our Services allow you to register using your existing social media accounts, like Discord, Facebook, or Twitter. If you include a social media handle or login as part of your registration:

  • We will receive information from your social media profile such as your name, email address, friends list, and profile picture, and other information you allow to be public on the social media platform.
  • We will use this information relative to the Services or for other purposes with notice to you.
  • We cannot control, and are not responsible for, how the social media platform might collect, use, or disclose your Personal Data.

Your Interactions with the Services: We use cookies and related technologies to automatically collect certain data when you visit, use, or navigate the Services, some of which may qualify as Personal Data.

  • We collect data about your device like your device name, IP address, generalized (not precise) geolocation, browser and device characteristics, operating system, and language preferences.
  • We collect data from your access and interactions on the Services, like referring URLs, country, location, information about how and when you use our Services, and other technical information.
  • We use this data to maintain the security and operation of the Services and for our internal analytics and reporting purposes.

Brand-Provided Personal Data About Its Customers: When we help brands enter and thrive in web3, they sometimes provide us with access to, or ask us to process, Personal Data about their customers.

  • The brand determines the Personal Data it discloses to us in this manner. For example, we may collect identifiers, commercial information, and other Personal Data about brand consumers or end users.
  • If a brand stops using our Services, we will delete or return all Personal Data associated with the brand’s customers.
  • If you have any questions about Good Month’s processing of your Personal Data as a brand customer, please contact the brand.

We collect and process this Personal Data to achieve our legitimate interest of fulfilling our contractual obligations to the brand and we do not process it for any purpose other than fulfilling those obligations.

We will not collect additional categories of Personal Data or use already collected Personal Data for purposes that are materially different, unrelated, or not reasonably necessary or compatible with the original purpose without notice and consent to you as required by law. Good Month uses the Personal Data we collect to provide you with the Services you request, to troubleshoot and maintain our Services, for internal business and reporting purposes, and for the purposes stated to you at the time of collection or for any other purpose to which you consent. Additionally, we may use Personal Data to monitor your compliance with the agreements between you and us, for internal testing or product development, to personalize your experience on our Services, or to respond to a law enforcement or court-ordered obligation, or to evaluate or conduct a business transition involving our data.

Children’s Personal Data

Services are intended for use by adults, not children. No individual under the age of 18 should attempt to use the Services or provide any Personal Data to Good Month. If we learn we have collected or received Personal Data from a child under 18, we will delete that information. If you believe we might have any information from or about a child under 18, please contact legal@goodmonth.io.

Cookies

Good Month uses cookies and related technologies on the Services. Cookies are small data files stored on your device that help us track and analyze data to improve our Services and your experience. Cookies serve a variety of purposes, for example analyzing use of a website or platform, navigating between pages efficiently, remembering your preferences, and generally improving your browsing experience. Cookies are generally used for functionality, security, analytics, or advertising. Good Month uses the following cookies to provide the Services:

  • HubSpot cookies for essential functions, analytics, to enable certain features, and ads. Visit the HubSpot Knowledge Base to learn more.
  • Google Analytics to track your content interactions on our Services and allow us to improve our content and build better features that enhance your experience. Google provides more details in its Privacy & Terms center under Analytics.
  • Google Ads for advertising, including retargeting and delivering ads across platforms, as detailed under Advertising.
  • Shopify to enable your online transactions on the Cake App.
  • Twitter to track your content interactions on social media. Read more at Twitter Privacy.

Essential cookies are necessary for our Services to function. All other cookies can be blocked if you do not want them to interact with your device. To block cookies, you can adjust your browser or device settings, or you can install a third-party plugin to control cookie behavior. If you block cookies, some parts of the Services may be inaccessible or not function properly.

You may see a cookie consent notice on the Services that lists the categories of cookies we use and provides the option to accept or reject different types of cookies. When you consent to cookies on our cookie consent banner, we may set cookies in correspondence with your selections. You may adjust your cookie selections at any time, and we will display the cookie consent notice to you periodically.

Personal Data Security

Good Month has implemented and maintains reasonable security measures to secure your Personal Data from accidental loss and unauthorized access, use, alteration, and disclosure. Our security measures are appropriate to the volume, scope, and nature of the Personal Data processed and designed to meet our duty of care with respect to your Personal Data. We encrypt all data in transit and at rest and we hold our personnel and Service Providers to strict data protection standards. Please bear in mind that submission of information over the Internet is never entirely secure. You are responsible for keeping your device access and login information confidential. You are also encouraged to install anti-virus and anti-malware software on your devices and keep all software updated to avoid security risks. We cannot guarantee the security of information you submit via our Services while it is in transit over the Internet, and any such submission is at your own risk.

Retention of Personal Data

It is Good Month’s policy to only retain Personal Data as long as necessary to achieve the purpose for which it was collected. We will delete all Personal Data associated with your registration and account upon closure of your account. However, we reserve the right to retain data for longer periods as required by law or court order or if doing so is critical to our business. Good Month securely deletes data once we no longer need it.

Disclosure of Personal Data

Any of the Personal Data we collect might be subject to disclosure for a business purpose. Good Month will only disclose Personal Data to third parties with your permission, as required by law, or to the recipients listed below:

Good Month’s Service Providers: Sometimes we may need to share the Personal Data we collect with our third-party vendors, service providers, or contractors ("Service Providers") as needed to enable them to provide us with their contracted services.

  • Our Service Providers include website hosting, data analytics, data storage, user registration and authentication, payment processors, and order fulfillment services, among others.
  • We prohibit our Service Providers from selling or disclosing the Personal Data we provide.
  • We require all service providers to maintain confidentiality standards and appropriate technical and organizational measures to ensure the security of your Personal Data.

Marketing Providers: Good Month sometimes shares Personal Data with third parties for cross-contextual behavioral advertising purposes like ad networks, affiliate marketing, and retargeting. To opt-out of this type of sharing, you can opt-out of sharing for marketing purposes on your account privacy preferences or adjust your device settings or install a browser plug-in to block marketing cookies or alert you before a cookie is placed on your browser.

Our Affiliates: We may share your information with our affiliates, in which case we will require those affiliates to honor this Privacy Notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.

Business transitions: For example, if we go through a merger, acquisition, or sale of a portion of our assets.

Legal purposes: such as complying with a legal requirement or a court order, for law enforcement purposes, if we believe it is appropriate in order to take action regarding illegal activities or prevent fraud or harm to any person, or to exercise or defend our legal claims.

Aggregated and Deidentified Information: We reserve the right to disclose aggregated, anonymized, or deidentified information about any individuals with nonaffiliated entities for marketing, advertising, research, or other purposes, without restriction.

YOUR PRIVACY CONTROLS

Good Month builds in controls that enable you to control how we collect and use your Personal Data:

Your Account: You can access, correct, update, or delete certain Personal Data associated with your account on our Services.

Good Month Emails: We may send you informational or support emails related to your account. Depending on your communication preferences, we may also send you marketing emails. If you do not wish to receive emails from us, you can unsubscribe or change your preferences via the links provided in the emails or send a request to legal@goodmonth.io. Note that if you opt-out of marketing communications, we may still send you non-promotional communications, such as those about your account or our ongoing business relations.

Your Device Settings: You can control the data we collect through cookies and related technologies by adjusting your device settings or changing your cookie preferences using our cookie consent feature.

Texting. If you provide us with your wireless phone number, you consent to Good Month sending you informational or service text messages. However, we will only send you marketing text messages if you opt-in to receive these notifications from us. For all text messages, the number of texts you receive will depend on the Services you use and the information you request from us. You can unsubscribe from our text messages by replying STOP or UNSUBSCRIBE to any of these text messages. Messaging and data charges may apply to any text message you receive or send. Please contact your wireless carrier if you have questions about messaging or data charges.

Do Not Track: Do Not Track signals are signals sent through a browser informing us that you do not want to be tracked. Currently, our systems do not recognize browser “do-not-track” requests.

Opt-Out of Interest Based Ads: You may limit our use of information collected from or about your mobile device for purposes of serving online behavioral advertising to you by going to your device settings and selecting “Limit Ad Tracking” (for iOS devices) or “Opt-Out of Interest-Based Ads” (for Android devices).

Block Location Tracking: You can stop all collection of information by an app by uninstalling it. You can also reset your device Ad Id at any time through your device settings, which is designed to allow you to limit the use of information collected about you. You can stop all collection of precise location data through an app by uninstalling the app or withdrawing your consent through your device settings.

YOUR PRIVACY RIGHTS

Depending on where you live or are located, you may have certain rights over your Personal Data that we collect and retain. To exercise your privacy rights, express concerns, revoke your consent, lodge a complaint, or request information, please submit a privacy request or contact legal@goodmonth.io. Good Month will respond as required by applicable law.

Good month can only assist with or fulfill a Privacy Request when we have sufficient information to verify that the requester is the person or an authorized representative of the person about whom we have collected Personal Data, and to properly understand, evaluate, and respond to the request. We do not charge a fee to process or respond to a verifiable request unless we have legal grounds to do so. If we determine that the request warrants a fee, we will tell you why we made that decision and provide you with a cost estimate before completing your request. We endeavor to respond to privacy requests in accordance with the requirements of the law applicable to your jurisdiction. If we do not fulfill your request within the legally required timeline, you can appeal our response by contacting legal@goodmonth.io.  

U.S. Consumer Privacy Rights: In the United States, consumer privacy is governed by federal privacy laws covering specific industries or data uses and state privacy laws providing with general consumer privacy rights. This section provides informational notices for state privacy laws applicable to residents of California, Colorado, Connecticut, Nevada, Utah, Virginia, and other states that require companies to inform consumers about their privacy rights and provide a method to exercise those rights. Residents of states offering privacy protections (each a “Consumer”) that apply to Good Month can exercise their privacy rights as applicable to our Services by submitting a Privacy Request.

  • No Sale of Personal Data. Some states entitle consumers to opt-out of the sale of their Personal Data. Good Month does not and will not sell your Personal Data to third parties. If this changes in the future, we will update this Privacy Notice and provide you with a method to opt-out.
  • Opt-Out of Profiling. A core component of our Services is leveraging the email addresses we receive against unknown blockchain wallets to supplement and update behavioral data associated with those identifiers. This process may qualify as “profiling” under some privacy laws, and you may be entitled to opt out of this processing. Contact legal@goodmonth.io for support.
  • Limited Use and Disclosure of Sensitive Personal Data. Good Month does not seek to collect sensitive Personal Data about any individual, and in no case do we disclose any sensitive Personal Data for the purpose of inferring characteristics about you. If this ever changes in the future, we will update this Privacy Notice and provide you with methods to limit use and disclosure of sensitive Personal Data.
  • Opt-Out of Sharing. Some states entitle consumers to opt-out of their Personal Data being shared for cross-contextual behavioral advertising. Good Month sometimes shares Personal Data with third parties for advertising purposes for which privacy laws may entitled Consumers to opt-out. You can opt-out of this type of Personal Data sharing by updating your account privacy preferences or adjusting your device settings or installing a browser plug-in to block marketing cookies or alert you before a cookie is placed on your browser.
  • Right to Correct. You have the right to request that we correct inaccurate Personal Data about you on our systems. If you become aware that the Personal Data that we hold about you is incorrect, or if your information changes, please inform us and we will update our records.
  • Right to Erasure. Some states entitle Consumers to request that businesses delete their Personal Data from a business’s information systems. Good Month may permanently delete, deidentify, or aggregate the Personal Data in response to a request for deletion.
  • Right to Access. You may have the right to request confirmation that we have collected Personal Data about you and that we provide you with access to that Personal Data. If you submit an access request, we will provide you with copies of the requested pieces of Personal Data in a portable and readily usable format. Please note that we may be prohibited by law from disclosing certain pieces of Personal Data, and we may be limited in the number or frequency of requests we must fulfill.  
  • Right to Disclosure. You may request that we disclose information to you about our collection and use of your Personal Data, such as: (a) the categories of Personal Data we have collected about you; (b) the categories of sources for the Personal Data we have collected about you; (c) our business purpose for collecting, using, processing, sharing or selling that Personal Data, as applicable; (d) the categories of third parties with whom we share that Personal Data; and (e) if we sold or shared your Personal Data under the CCPA, two separate lists stating: (i) sales or sharing, identifying the Personal Data categories that each category of recipient purchased; and (ii) disclosures for a business purpose, identifying the Personal Data categories that each category of recipient obtained. Certain laws may limit the number or frequency of requests we must fulfill.    
  • Right to Nondiscrimination. We will not discriminate against you for exercising your privacy rights. For example, unless permitted by law we will not: (a) deny you goods or services; (b) charge you different prices or rates for goods or services; (c) provide you a different level or quality of goods or services; (d) retaliate against you as an employee, applicant for employment, or independent contractor for exercising your privacy rights; or (e) suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services, because you exercised a right under applicable privacy laws.
  • Right to Disclosure of Marketing Information. California’s Shine the Light Act (Civil Code sections 1798.83-1798.84) entitles California residents to request certain disclosures regarding Personal Data sharing with affiliates and/or third parties for marketing purposes.

Canadian Privacy Rights: This section provides the disclosures and notices required under Canada’s Personal Data Protection and Electronic Documents Act (“PIPEDA”) and solely to residents of Canada where PIPEDA applies (“Canadian Consumers”). PIPEDA gives Canadian Consumers specific rights regarding Personal Data offering details on an identifiable person without the inclusion of name, title, telephone number, and business address of an employee of a business or organization. The rights afforded under PIPEDA are described below.

  • Right to know why we collect, use, and distribute the Personal Data we process. We have set the required notices in this Privacy Notice. We may provide you with additional notices about other ways we process your Personal Data, such as by sending you a notice via email or by other means of communication.
  • Right to expect us to collect, use, or disclose Personal Data responsibly and not for any other purpose other than which you consented. We set your expectations in this Privacy Notice and collect express or implied consent at various stages of collection or processing. If we collect or use your Personal Data based on your consent, we will also notify you of any changes and will request your further consent as needed. You may withdraw your consent at any time with reasonable notice by contacting us at legal@goodmonth.io.  
  • Right to accuracy of your Personal Data. We take steps to reasonably ensure that your Personal Data we are using is accurate. If you become aware that the Personal Data that we hold about you is incorrect, or if your information changes, please inform us and we will update our records.
  • Right to access your Personal Data. Upon written request and identity authentication, we will provide you with your Personal Data under our control, information about the ways in which that information is being used and a description of the individuals and organizations to whom that information has been disclosed. We will make the information available within 30 days or provide written notice where additional time is required to fulfil the request. We may not be able to provide access to some or all of the Personal Data you request if limited by law or potential infringement of another’s privacy rights. If we must refuse an access request, we will notify you in writing, document the reasons for refusal, and outline further steps that are available to you.

EU and UK Privacy Rights: This section provides the disclosures and notices required under the European Union’s General Data Protection Regulations (“GDPR”) and its counterpart in the United Kingdom as a courtesy to residents of the European Economic Area and United Kingdom (“Data Subjects”). Good Month collects and processes Personal Data of Data Subjects who work the brands we support as a controller. If a brand instructs us to process Personal Data of its Data Subject customers, we do so as a processor. If you are Data Subject, you have the following rights regarding your Personal Data:

  • Right to know how we process your Personal Data. We have set the required notices in this Privacy Notice. We may provide you with additional notices about other ways we process your Personal Data, such as by sending you a notice via email or by other means of communication.
  • Right to access your Personal Data. You may exercise your right to access by logging into your account to view or export your Personal Data. Alternatively, if you submit a Consumer Privacy Request we will provide you with a copy of your Personal Data, along with details about the types of Personal Data we process, why we process it, and any third parties we work with to collect Personal Data on our behalf. We may have one or more legally valid reasons to refuse your request in whole or in part, for example to protect the rights of other individuals.
  • Right to restrict processing of your Personal Data. You can request that we restrict the processing of your Personal Data if: (a) the data is inaccurate; (b) the processing is unlawful; (c) we no longer need the Personal Data; or (d) you exercise your right to object.
  • Right to rectify your Personal Data. If you become aware that the Personal Data that we hold about you is incorrect, or if your situation changes (e.g., you change address), you may edit the Personal Data in your profile or saved to your account, or you can inform us, and we will update our records for accuracy.
  • Right to data portability. In some circumstances, we are required to provide your Personal Data to another organization at your request and in a structured, commonly used machine-readable format. Please submit a Consumer Privacy Request if you require assistance.
  • Right to erasure (a.k.a. the “right to be forgotten”). You may exercise your right to deletion by submitting a Consumer Privacy Request to delete your Personal Data, we will confirm the Personal Data to be deleted prior to its deletion, and we will notify you when your request is complete. This right is not absolute, and we may be entitled to retain and process your Personal Data despite your request. If you make this request, we balance certain legal, contractual, and business interests against your right to request the deletion of your Personal Data.
  • Right to object to certain processing of your Personal Data. Upon your request, and in certain circumstances and where we are required to do so by law, we will limit our processing of your Personal Data as you request.
  • Right to not be subject to Automated Decision-Making. Good Month does not use automated decision-making. If we engage in this activity in the future, you will have the right to object to a decision we make wholly by a computer or algorithm without human input and to receive information about this type of processing.

Cross-Border Data Transfers

Good Month is a United States company using technical infrastructure in the United States and other countries. If you access the Services from outside the United States, please be aware that your Personal Data may be transferred to, processed, stored, and used in the United States or other jurisdictions. By allowing us to collect Personal Data about you, you consent to the transfer and processing of your Personal Data as described in this section.

When your information is moved from your home country to another country, the laws and rules that protect your Personal Data in the country to which your information is transferred may be different from those of the country where you live. For example, if your information is in the United States, it may be accessed by government authorities under United States law. You are solely responsible for determining whether your use of the Services complies with applicable laws.

We are committed to transferring Personal Data using a lawful data transfer mechanism. When we transmit data from the EU to the United States or other jurisdictions, we do so pursuant to standard contract clauses approved by the European Commission or another lawful transfer mechanism, and we employ those security measures required by the country in question to secure the data. However, we do not warrant that our Services are appropriate or authorized for use in any other jurisdictions.

Updates

Good Month may update this Privacy Notice from time to time by posting the updated version on this page. We will also collect your consent to these changes to the extent required by applicable law. The “last updated” date indicates the date this Privacy Notice was most recently updated. Your continued use of the Services following an update is your acceptance of those changes.