Privacy Policy

AssetSpace is operated by Offshore Labs LLC ("AssetSpace", "we", "us"). We are the controller of the account information described below. For the content you store inside a Space, the organisation that created the Space is the controller and we act as a processor on its instructions.

Questions about this policy: privacy@assetspace.offshorelabs.tech.

• Account information — your email address, display name, optional job title and avatar, and your password in hashed form. If you sign in with Google, we receive your email address, name and profile picture from Google instead of a password.
• Content you add — assets, files, notes, purchases, subscriptions, redemption codes and credentials that you or your collaborators store in a Space.
• Collaboration records — Space membership, roles and permissions, invitations, approvals, access requests and the activity timeline of actions taken in a Space.
• Notification settings — the channels you enable and the addresses or identifiers you supply for them.
• Technical data — log data needed to run and secure the service, such as request timestamps, error reports and coarse device information.

We do not sell personal information and we do not use your Space content to build advertising profiles.

• To provide the service: authenticate you, show your Spaces, enforce permissions and deliver notifications you asked for.
• To keep the service secure: detect abuse, investigate incidents and maintain the audit trail that Space owners rely on.
• To support you: respond when you contact us about a problem with your account.
• To meet legal obligations, such as responding to a lawful request or keeping records we are required to keep.

Where the GDPR applies, our legal bases are performance of a contract with you, our legitimate interest in operating a secure service, your consent where we ask for it, and compliance with legal obligations.

• Other members of your Spaces see your display name, avatar and job title, and the actions you take inside that Space. Your email address is not shown to other members.
• Space owners and admins can see membership, roles and the Space activity timeline.
• Service providers that host and run AssetSpace on our behalf — cloud hosting and database, email delivery, and any messaging channel you switch on. They may only process data to provide those services to us.
• Authorities, where we are legally required to disclose information.

Access to every record is enforced at the database level, not only in the interface, so a person can read only what their role in that Space allows. Stored credential values are encrypted, and each reveal or copy is written to an access log visible to the Space owner. Transport is encrypted with TLS.

No system is perfectly secure. Use a strong, unique password, and remove members promptly when they no longer need access.

Account information is kept while your account exists. Space content is kept until it is deleted by someone with permission, or until the Space is deleted. Activity records are retained for the life of the Space because they exist to answer "who did what". Backups are rotated on a rolling schedule and deleted content disappears from them as they age out.

Depending on where you live, you may ask us to access, correct, export or delete your personal information, to restrict or object to processing, or to withdraw consent. You can edit your profile and notification settings in the app at any time. For anything else, write to privacy@assetspace.offshorelabs.tech and we will respond within 30 days. You also have the right to complain to your local data protection authority.

If your request concerns content inside a Space you do not own, we will refer it to the Space owner, who controls that content.

Our providers may process data in countries other than yours, including the United States and the European Union. Where required, transfers rely on standard contractual clauses. AssetSpace is a business tool and is not directed to children under 16; we do not knowingly collect their information.

If we make a material change to this policy we will update the date above and notify account holders by email or in the app before the change takes effect.