Whitespace Privacy Policy

Last Modified: April 24, 2026

Your privacy and your trust are of the utmost importance to us. Whitespace is focused on delivering the best possible service while keeping your information secure and handled with care. This Privacy Policy explains what we collect and how we use your personal information.

This Privacy Policy describes our policies and procedures for collecting, using, and disclosing your information. Users can access the Whitespace service (the "Whitespace Service") through our app, www.whitespace.app, and through websites such as username.whitespace.photos or your own domain. This Privacy Policy applies regardless of how you access the Service.
We process your personal data in accordance with this Privacy Policy and applicable data protection laws.

We aim to be as clear and transparent as possible. If you have any questions, you can always reach us at [email protected].

How we collect and use your information

We may collect and use the following categories of personal information when operating the Whitespace Service:

Information You Provide. When you register an account, we collect and store information such as your name, phone number, email address, and postal addresses.

Files and Content. To provide the Whitespace Service, we collect and store the files, photos, videos, or other content you upload, download, or access through the Service ("Files"). These remain your Files. We only process them as necessary to provide the Service, including storage with our infrastructure providers.

Information We Collect Automatically. When you use our website or apps, we may collect limited technical information necessary to operate and secure the Service. This may include your IP address, browser type, and basic usage data such as pages visited and interactions with the Service. We do not use cookies or similar tracking technologies for analytics or advertising purposes at this time.

Legal Basis for Processing. We process personal data only when we have a valid legal basis, including:
– to provide the Service to you (performance of a contract)
– to improve and secure the Service (legitimate interests)
– to comply with legal obligations
– where applicable, based on your consent (for example, for certain cookies or communications).

How we share your information

Your Use. We use your information to provide the Service, including creating galleries and websites, enabling communication with your clients, and facilitating payments and orders. Any information you choose to publish through your website may be publicly accessible and widely disseminated. Please carefully consider what you choose to make public.

Service Providers. We use trusted third-party providers to help us operate, store, and improve the Service (for example, hosting, infrastructure, and payment processing). These providers process personal data on our behalf and only as necessary for their services, under appropriate data protection obligations. This includes providers such as DigitalOcean (hosting and infrastructure), Heroku (application platform), and Mollie (payment processing).

We do not sell or rent your personal information or your Files for marketing or advertising purposes.

Compliance with Laws. We may disclose information where required to comply with applicable law, legal processes, or enforceable governmental requests, or to protect the rights, safety, and integrity of Whitespace, our users, or others.

Business Transfers. If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction. We will notify you where required.

Aggregated Data. We may share aggregated or anonymized data that does not identify you.

Your rights and choices

Under applicable data protection laws, you have rights regarding your personal data. These may include the right to access, correct, or delete your data, the right to restrict or object to certain processing, and the right to data portability.

You can access and update your account information at any time through the Service. To exercise any of your rights, you can contact us at [email protected].

You also have the right to lodge a complaint with your local data protection authority.

Retention. We retain your information for as long as your account is active or as needed to provide the Service. We may retain certain information for longer where necessary to comply with legal obligations, resolve disputes, or enforce agreements.

International data transfers

We are based in the Netherlands and may process and store your information on servers located in the United States, including in New York City, where our service providers maintain infrastructure.
Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with applicable data protection laws. This includes the use of Standard Contractual Clauses approved by the European Commission and, where applicable, reliance on providers certified under recognized data transfer frameworks.
You may request more information about these safeguards by contacting us.

Content you publish through the Service may be publicly accessible. Personal data included in such content will still be processed in accordance with this Privacy Policy.

Security

We take the security of your information seriously and use appropriate technical and organizational measures to protect it. However, no system can be guaranteed to be completely secure. If a security incident occurs, we will take appropriate steps in accordance with applicable laws.

Children

Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children under 16. If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps to delete it.