Privacy policy
Last updated September 8, 2026
What this covers
Inpulz is a collaboration platform by Studio Spesh. Companies work in it together with their team and their clients, in workspaces. Below is which personal data that involves, why, and what say you have in it.
Two roles run alongside each other, and the difference matters. For your account, your profile and your subscription we are the controller. For what you and your team put inside a workspace (messages, files, cards, planning) the owner of that workspace is the controller; we store and show it on their instructions and do not look into it ourselves.
Who we are
Studio Spesh, Canadezenlaan 27, 8923 AA Leeuwarden, the Netherlands. Chamber of Commerce 70979030, VAT NL002346673B20. Questions about your data go to hi@spesh.studio.
Which data we process
- Your account: your email address, your password (stored encrypted by our login service, we cannot read it) and a short customer number.
- Your profile: name, company, job title, country, time zone, language, first day of the week, time format, profile picture and whether you are online.
- Workspaces: the name and logo, who is a member and in which role, and the invitations sent from it: the name and email address of the invitee, plus the message the inviter writes with it.
- What you put in it: messages and comments, files and folders, cards, notes and planned posts with their media. That is the content of the workspace and it belongs to its owner, not to us.
- Usage: how far you have read a conversation, your notifications, and when you were last active. That exists so that unread actually means unread.
- Payment: which subscription is running, until when, and the customer number you have with our payment provider. Your card details never reach us; they stay with the payment provider.
- Connected social accounts: the name, username and profile picture of an account you connect, plus what you plan to publish. The keys to that connection sit with our partner, not with us.
- Technical data: error messages and security logs from the server, and figures about visits and load times from which no person can be identified.
What we use it for
What we do not do: sell your data, use your content to train language models, or track you across other websites.
- To provide the platform: logging in, showing your workspaces, delivering your messages, storing your files. Basis: the agreement you have with us.
- To keep you posted: notifications in the app, and by email as far as you have that switched on in your profile. There is a switch for it, per kind.
- To keep it secure: stopping abuse, fixing failures and improving the platform. Basis: our legitimate interest in running a working, secure service.
- To keep our books: invoices and payments. Basis: the law requires us to keep those.
The parties that help us
We do not do this alone. With each of these parties there is a data processing agreement, and they may do nothing with your data beyond what we instruct.
- Supabase: the database, the login and the file storage. Our database is located in Frankfurt, inside the EU.
- Vercel: hosting the app and measuring visits and load times. The servers that run the app are located in the United States.
- Stripe: the subscriptions and the payments.
- Resend: sending our email: invitations, notifications and the mails around your account.
- bundle.social: connecting your social accounts and publishing posts to them. They hold the keys to those connections; if you delete your account, they are removed there too.
- Featurebase: the help and chat button in the app. It receives your name and email address, so a conversation belongs to you and not to a stranger.
- OpenRouter: only when you press the AI button in the planner: then that text goes to the language model to be improved. Without that click nothing goes there.
- Giphy: only when you search for a gif: your search term then goes to them through our server. Your address and account stay here.
Data outside the EU
Our database is in the EU. A number of the parties above are based in the United States, so data travels there. That happens under the European Commission's standard contractual clauses, with the arrangements that come with them.
Cookies
Only what is needed to work: the cookie that keeps you logged in, and a cookie with your language choice. No advertising cookies, no third-party tracking cookies, and therefore no banner you have to click away.
Our visitor figures work without cookies. We deliberately keep the addresses of invitation links and confirmation links out of that measurement, because they carry a secret in the address itself.
How long we keep it
- Your account: as long as you have it. If you delete it, your profile, the workspaces nobody else is in, and your connections at our partner go with it.
- What is in a workspace: as long as the workspace exists. If the owner deletes it, the messages, files and cards go with it, including from storage.
- Invitations: valid for fourteen days; after that the link expires and a new one has to be sent.
- Invoices and payments: seven years, because that is what tax law requires.
What you can do yourself
You may see your data, have it corrected, have it deleted, take it elsewhere, and object to what we do with it.
Most of it you do yourself: you change your profile in your account settings, and you delete your account there too. For the rest one email is enough, and we answer it within a month.
If you believe we are not doing it right, you can complain to the Dutch Data Protection Authority. We would rather hear it ourselves first, so we can put it right.
How we secure it
All traffic is encrypted. The database holds rules per row: they decide that you only reach the workspaces you are a member of, even if something goes wrong somewhere in the code. Files sit in closed storage and can only be opened with a link that expires after a day. Passwords are stored encrypted, and the keys to connections sit in a vault the browser can never reach.
Changes
If something changes in how the platform handles data, this page changes with it and we put a new date on top. If it is something substantial, we let you know in the app.