Privacy Policy
This Privacy Policy describes how rSpace (the "Service" or "rSpace", available at rspace.online; "we", "us", or "our") collects, uses, and protects information when you use the website at rspace.online and the rSpace platform.
1. Local-First Architecture
rSpace is designed as a local-first platform. Most of your content — documents, notes, calendars, and other data — is created and stored on your own devices and synchronized peer-to-peer using encrypted CRDT (Conflict-Free Replicated Data Type) protocols. Where the Service relays data through our servers, it is typically encrypted such that we cannot read its contents.
2. Information We Collect
- Account information. When you register, we collect a username and a passkey public key via WebAuthn / EncryptID. We do not collect or store passwords or private keys.
- Encrypted content. Documents, messages, files, and other content you create may be relayed or backed up through our servers in encrypted form.
- Operational data. Server logs, IP addresses, user-agent strings, and timestamps necessary for security, abuse prevention, and service operation.
- Optional integrations. If you connect third-party services (e.g., calendar imports, payment providers, AI providers, Google services, Microsoft services), data flows according to those services' own policies and only with your explicit authorization.
- Analytics. Aggregated, privacy-respecting usage metrics via self-hosted analytics. We do not use third-party advertising trackers.
3. How We Use Information
- To provide, maintain, and improve the Service.
- To authenticate you and protect your account.
- To detect, investigate, and prevent fraud, abuse, or violations of our Terms.
- To respond to your support requests.
- To comply with legal obligations.
4. Use of Google API Services
If you choose to connect a Google account (for example, to import a calendar or sign in with Google), rSpace's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the integration features you request, is not sold, is not used for advertising, and is not transferred to third parties except as necessary to provide and improve the Service or as required by law.
5. Data Storage and Encryption
Content you create is encrypted on your device when possible. Server-stored data is held on infrastructure under our control or trusted hosting providers. Backups, where applicable, are pinned to encrypted storage including IPFS. We retain encrypted content as long as your account is active or as needed to provide the Service.
6. Sharing of Information
We do not sell your personal information. We may share limited information with:
- Service providers acting on our behalf (hosting, email delivery, payment processors) under contractual confidentiality obligations.
- Other users you choose to collaborate with — content you share into a space is visible to members of that space.
- Authorities when required by valid legal process, to the extent we are able (most user content is end-to-end encrypted and unavailable to us in plaintext).
7. Cookies and Local Storage
We use cookies, localStorage, and IndexedDB for authentication, preferences, and offline-first functionality. The Service does not require advertising cookies.
8. Your Rights
Depending on your jurisdiction (including under GDPR, UK GDPR, and CCPA), you may have rights to access, correct, port, restrict, or delete personal information we hold about you, and to withdraw consent or object to certain processing. To exercise these rights, contact us at legal@rspace.online.
9. Children
The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children.
10. International Transfers
rSpace is operated from the European Union. By using the Service from outside the EU, you consent to processing of your data in the EU and other jurisdictions where our infrastructure operates.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be announced via the Service or by email. The "Last updated" date above reflects the most recent revision.
12. Contact
Questions or requests about privacy: legal@rspace.online