--- title: "Privacy Policy — Space Avocado" description: "What data Space Avocado collects, why, who processes it (Paddle, Apple, AWS, Sentry, Microsoft Clarity, Ahrefs), how long it is kept, and how to delete your account." canonical: https://space-avocado.com/privacy updated: 2026-09-08 --- # Space Avocado Privacy Policy Last updated: September 8, 2026 This policy explains what data Space Avocado — the web application and the companion iOS app (together, the "Service"), operated by com1 coding Sdn. Bhd. ("we", "us") — collects, why, and what your choices are. The short version: we collect only what the Service needs to work, we do not sell data, and we do not show ads. ## 1. Data we collect - Account data — your name, email address and a hashed password. - Content — the posts, captions, hashtags, templates, schedules and media files you create or upload. - Billing records — your subscription status and transaction records (amount, tax, invoice number). Your payment details themselves go to Paddle, not to us (see section 7). - Push notification tokens — if you enable reminders in the iOS app, the device token needed to deliver them via Apple's push service. - Email delivery data — bounce and complaint signals from our email provider, kept on a suppression list so we stop mailing addresses that do not want or cannot receive our email. - Technical data — session cookies required to keep you signed in, and standard server logs (IP address, request time) kept for security and debugging. - Crash and error reports — when something in the Service breaks, a report of the error (what went wrong, the device or browser involved, and your IP address) is sent to Sentry, our error-tracking provider, so we can find and fix the problem (see section 8). ## 2. How we use it We use your data solely to provide the Service: storing your content, showing your schedule, delivering your media to your devices, sending the transactional email the Service requires (verification, password reset, billing notices), and operating your subscription. We do not sell or rent personal data, and we do not use your content for advertising or to train machine learning models. ## 3. Cookies and analytics The web app uses an essential session cookie to keep you signed in. We also use Microsoft Clarity for usage analytics on the website only: it records how the website is used (pages visited, clicks and scrolls, and session replays) together with device and browser information, and sets analytics cookies. Microsoft processes this data on our behalf; see the [Microsoft Privacy Statement](https://privacy.microsoft.com/privacystatement). The website also uses Ahrefs Web Analytics, a cookieless visitor-counting service that records which pages are viewed and which site referred you; see the [Ahrefs Privacy Policy](https://ahrefs.com/privacy). Neither runs inside the iOS app. We use analytics only to improve the product — never for advertising, and never on the content or media you create. ## 4. The iOS app - Your sign-in token is stored in the device keychain and used only to talk to our servers. - Media is saved to your photo library only when you start a share, using the add-only photo permission. - When you upload from your camera roll, the system photo picker runs outside the app and hands over only the items you pick — the app cannot browse your library. Full photo access is requested only if you turn on the optional "clean up after posting" setting, and even then it only touches the media the app itself saved. - Captions are copied to your clipboard only when you start a share, so you can paste them in the target app. - The app contains no advertising, no ad tracking and no usage-analytics SDK — nobody records how you use it. The only third-party SDK that sends data is Sentry crash reporting: if the app crashes or hits an error, a technical report (the error, stack trace and device model/OS version) goes to Sentry so we can fix it. Crash reports are not used for advertising or profiling. ## 5. Storage integrations If you connect a cloud storage account (for example Dropbox), we store the access token needed to read the files you select. You can disconnect the integration at any time, which deletes the token. Files in storage you connect stay in your own account. We only ever delete one when you ask us to — by deleting the media or the album it belongs to — or when a retention setting you turned on removes it. Deleting your account never touches them. ## 6. Sharing to social networks Publishing happens through the respective platform's own app on your device. We never receive your social network credentials and cannot access your social accounts. What a platform does with content you post there is governed by that platform's privacy policy. ## 7. Payments Subscriptions are sold and processed by Paddle.com, our merchant of record. When you subscribe, checkout runs on Paddle: they collect your payment details, billing address and the tax information the law requires — we never see your full card number. Paddle also emails your receipts. See the [Paddle Privacy Policy](https://www.paddle.com/legal/privacy). On our side we store only your subscription status and transaction records (see section 1). ## 8. Where data lives and who sees it Your data is stored on our hosting infrastructure and is not shared with third parties, except for the processors that run parts of the Service on our behalf: our hosting providers, Amazon Web Services (transactional email delivery, media storage), Paddle (payments), Microsoft and Ahrefs (website analytics, see section 3), Sentry — Functional Software, Inc. (crash and error reports, processed in the United States; see the [Sentry Privacy Policy](https://sentry.io/privacy/) ) and Apple (push notification delivery). Access is limited to what is needed to operate the Service. ## 9. Retention and deletion We keep your data for as long as your account exists. You can delete your account in the app's settings, or email us to request deletion. Deleting your account cancels any subscription we bill and erases your account together with your posts, media, albums, templates, schedules, devices, sign-in sessions, and customer record. It cannot be undone, and residual copies are purged from our systems within 30 days. Files in cloud storage you connected (for example your Dropbox) always stay untouched in your own account. Four things deliberately outlive the account, and none of them can be used to restore it: - A one-way fingerprint of your email address, so signing up again cannot restart a free trial you already used. It cannot be turned back into your address, though anyone already holding your address could check it against ours. - Anonymous usage statistics with no name or address in them. - Payment records, kept as long as tax law requires. - A support note recording the change — including your email address in readable form — so we can answer questions about a deleted account, such as where a subscription moved to. These are deleted after 24 months. If your address is on our do-not-email list because a message to it bounced or was reported as spam, it stays there — removing it would mean mailing you again. ## 10. Security All traffic is encrypted in transit (HTTPS). Passwords are stored hashed, API access uses scoped tokens, and access to production systems is restricted. ## 11. Changes to this policy We may update this policy from time to time. The "Last updated" date above reflects the current version; material changes will be announced in the product. ## 12. Contact Privacy questions or deletion requests: reach us through our [contact form](/support). The data controller for the Service is **com1 coding Sdn. Bhd.** (company registration number 201601035034 (1205975-H)), No. 18, Jalan Damai Perdana 2/3A, Bandar Damai Perdana, Cheras, 56000 Kuala Lumpur, Malaysia. Our data protection contact is **dpo@com1.app**. Under the Malaysian Personal Data Protection Act 2010 you may ask for access to the personal data we hold about you, ask us to correct it, limit how we process it, or withdraw a consent you gave earlier.