GDPR Compliance

Last Updated: 7th August, 2026

Introduction

At Feedspace, we are committed to protecting your personal data and privacy. This GDPR policy explains how we collect, process, and protect your personal data in compliance with the General Data Protection Regulation (GDPR).

Data Controller

Feedspace is the data controller responsible for processing your personal data. If you have any questions regarding your personal data or this policy, please contact us at support@feedspace.io

Data We Collect

We collect and process the following personal data:

  • Visit our website at Contact information (name, email address)
  • Account information (username, password)
  • Payment information (when you purchase our services)
  • Review data that you collect
  • Usage data and analytics
  • Communication data from support inquiries

Legal Basis for Processing

We process your personal data on the following legal grounds:

  • To fulfill our contractual obligations to you when you use our services
  • With your consent, which you can withdraw at any time
  • For our legitimate business interests (such as improving our services)
  • To comply with legal obligations

Your Rights Under GDPR

As a user residing in the European Economic Area (EEA), you have the following rights:

  • Right to access your personal data
  • Right to rectify inaccurate or incomplete data
  • Right to erasure ("right to be forgotten")
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right not to be subject to automated decision-making

Data Retention

We retain your personal data only for as long as necessary to provide you with our services and as required by law. When your data is no longer needed, we will securely delete or anonymize it.

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

Sub-processors We Use

To provide our services, we share limited personal data with the following third-party sub-processors. Each is bound by a data processing agreement or equivalent safeguards where personal data is involved.

Vendor Purpose Location Privacy Link
Amazon Web Services (AWS) Cloud infrastructure: media storage, email delivery, media processing, and transcription United States Privacy Policy
Vercel Hosting and CDN for the web app and embed widget United States Privacy Policy
Cloudflare CDN delivery and edge cache management United States Privacy Policy
Stripe Payment and subscription billing, and customer import United States Privacy Policy
ReviewOS.io AI processing: translations, review-to-image generation, AI form engine, and review import from external platforms United States Privacy Policy
Groq AI-native form speech-to-text transcription for video reviews United States Privacy Policy
Gemini AI processing: translation, sentiment scoring of review content, and image processing United States Privacy Policy
PostHog Product analytics, session replay, and error tracking United States Privacy Policy
Google Sign-in (OAuth), reCAPTCHA, Fonts, and Maps/Places United States Privacy Policy
AnyChat Live chat support widget Germany Privacy Policy
Cal.com Demo and meeting scheduling United States Privacy Policy
Tolt Affiliate and referral tracking United States Privacy Policy
ipapi.co IP-based geolocation (language/country detection) United States Privacy Policy
Shopify Store/product import and embedded app United States Privacy Policy
Webflow Widget installation on customer websites United States Privacy Policy
Slack Review notifications to customer workspaces United States Privacy Policy
MCP connector targets (ChatGPT, Claude, Perplexity, Lovable, Bolt, v0) Customer-directed export of their Feedspace data to an LLM they connect Varies by provider See provider's policy
Embedded media platforms (YouTube, Wistia, TikTok, SoundCloud, Instagram, Vimeo) Playback of reviews hosted on those platforms Varies by platform See platform's policy
Basecamp Internal operations notifications United States Privacy Policy
GitHub QA automation triggers United States Privacy Policy

This list may change as we add or replace vendors to improve our services. We will update this page whenever it does.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the EEA. In such cases, we ensure that appropriate safeguards are in place to protect your data, such as Standard Contractual Clauses approved by the European Commission.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. You can manage your cookie preferences through your browser settings.

Changes to This Policy

We may update this GDPR policy from time to time. Any changes will be posted on this page, and if significant changes are made, we will notify you by email or through our platform.

Contact Us

If you have any questions or concerns about this GDPR policy or our data practices, please contact us at support@feedspace.io