User Data Policy

The organisation that creates a Space owns the content inside it. We store and process that content to run the service for you. We do not sell it, rent it, mine it for advertising, or use it to train models for anyone else.

Each Space is a separate boundary. Membership of one Space grants no visibility into another, even inside the same organisation. Every read and write is checked against your role in that specific Space by the database itself, so a request for someone else's Space returns nothing rather than relying on the interface to hide it.

• Roles run from Owner through Admin, Manager and Contributor to Viewer, and a Space can define custom roles.
• Permissions are granular: view, create, edit, delete, download, share, reveal secrets, approve, manage members and manage settings.
• Nobody can grant a permission they do not themselves hold, so a role cannot be used to escalate access.
• Removing a member ends their access immediately, including to files and revealed secrets.

Secret values are encrypted before storage and are never returned by search, listings or the command palette. Revealing a secret requires the reveal permission and a recent re-authentication. Each reveal and each copy is recorded with the person, the field and the time, and the Space owner can read that log. Secret values are never written into activity descriptions or notifications.

Uploaded files are stored in private storage scoped to their Space. Download links are short-lived and issued only after your permission for that Space is checked. Files are not publicly addressable.

Creates, edits, deletions, approvals, invitations, reveals and renewals are written to the Space timeline. These entries are designed not to be edited or removed by members, because their value is that they can be trusted. They are deleted when the Space is deleted.

When you upload an invoice or receipt, or connect a mailbox, the document or message is sent to our AI provider to extract details such as vendor, amount and renewal date. It is processed to produce that suggestion and is not used to train third-party models. You review every suggestion before anything is added to a Space. You can leave these features switched off and add everything manually.

• Export — a Space owner can request a machine-readable export of the Space's records by writing to privacy@assetspace.offshorelabs.tech.
• Delete an item — anyone with the delete permission can remove an asset, file or credential; it is removed from the live service immediately.
• Delete an account — write to us and we will delete your profile and preferences, and hand over or delete Spaces you own as you instruct.
• Backups — deleted data persists in encrypted backups until they age out, normally within 30 days.

We use cloud hosting and database infrastructure, an email delivery provider, an AI provider for document extraction, and any messaging channel you enable. Each one processes data only to provide its service to us, under contract.

See also our Privacy Policy and Terms of Service.