How we look after your systems and your data.
Where your data lives, who can reach it, how it is protected and how you take it with you. Written down, so you can check it.
Registered ICO ZC258403 UK Information Commissioner’s Office ↗
Framework UK GDPR and the EU GDPR where it applies
Hosting European Union Servers in Germany, databases in Frankfurt
Company Firespace Ltd England and Wales · No. 15545803 ↗In detail
What we do, area by area
Where data lives Our infrastructure is hosted in the European Union: servers in Germany (Hetzner), databases in Frankfurt (Neon) and object storage in the EU (Cloudflare R2). Where a provider processes limited data outside the UK or EU, such as email delivery, we rely on the UK International Data Transfer Agreement or the EU Standard Contractual Clauses.
Encryption Encryption in transit (TLS) and at rest. Sensitive documents in the platform vault are encrypted with keys held separately from the data. Backups are stored encrypted.
Access control Access per workspace and role, the least privilege each person needs, and secrets kept in a vault, outside the codebase. Deployments and access are monitored.
Backups Encrypted backups kept off-site, with restore tests on a schedule so we know they work, not just that they exist.
Your role and ours When you manage your own contacts, conversations or records on the platform, you are the controller of those data and Firespace Ltd is the processor. We process them only under your instructions and our agreement with you.
Who we share it with We do not sell personal data. Providers that host or operate the platform for us: Hetzner, Neon, Cloudflare, Resend and Zoho, and Meta for WhatsApp Business messaging. Stripe for card payments. Professional advisers and authorities only where required.
Ownership and export Work built specifically for you becomes yours once paid in full. Your data can always be exported. Deleting an account removes the person’s details from every service of the platform.
Incidents When something fails we fix it, tell you what happened and change what let it happen. If a breach affects you, we inform you and the authorities as the law requires.
Your rights
Access, correct, delete or export
Under the UK GDPR you can ask us to access, correct, delete or export your personal data, to restrict or object to its processing, and to withdraw consent. Write to support@firespace.co; we answer within one month. You can also complain to the ICO.
A question about security?
Write to support@firespace.co or book a call with the team. We answer within one working day.