Last Updated: March 26, 2026
​
​

Welcome to Commonspace. This Privacy Policy explains how Commonspace Platforms, Inc., a Delaware corporation ("Commonspace," "Company," "we," "us," or "our"), collects, uses, discloses, and protects your personal information when you use our websites (including common.space and all related subdomains), our mobile applications for iOS and Android (the "Mobile App"), our APIs, and any related services (collectively, the "Services").
​
Commonspace is a community platform and social network that enables you to create a Profile, post content, follow other users, join community Spaces, and connect with others. This Privacy Policy applies to all users of our Services.
​
​ BY USING THE SERVICES, YOU CONSENT TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED IN THIS PRIVACY POLICY. IF YOU DO NOT AGREE, PLEASE DO NOT USE THE SERVICES.
​
This Privacy Policy is incorporated into and subject to our User Terms of Service.
​
​

The information we may collect in the course of you using the Services may include, but is not limited to, the following:
​
​

Account Registration:

Social Login: You may register or log in using a third-party account from Google, Facebook, Apple, or X (Twitter). When you authenticate via social login, we receive only the minimum information needed to create or verify your account — typically your email address and name. We do not import or store your profile photo, contacts, or other profile data from the social login provider. After initial authentication, you may disconnect your social login at any time. Each provider's privacy policy governs their handling of your data:

Profile Information:

Content You Create:

Space Membership Information:

Transaction Information:

Communications:

When you use our Services, including the Mobile App, we automatically collect at least the following:
​
​ Device and Browser Information:

Usage Information:

Location Information:

Mobile Advertising Identifiers and App Tracking Transparency:
​
On iOS devices, this includes your Identifier for Advertisers (IDFA). In accordance with Apple's App Tracking Transparency (ATT) framework, we will request your permission before using your IDFA for tracking purposes. You can change this preference at any time under Settings → Privacy & Security → Tracking on your iOS device.
​
On Android devices, this includes your Google Advertising ID (GAID). You can reset or opt out at any time under Settings → Google → Ads on your Android device.
​
We do not sell your mobile advertising identifier to third parties. We may share it with analytics providers solely to measure app performance and improve your experience.
​
​ Security and Fraud Prevention Data:
​
We use Google reCAPTCHA Enterprise to protect the Services from automated abuse. reCAPTCHA may collect and analyze interaction data (such as mouse movements, scrolling behavior, and typing patterns), your IP address, and browser information to determine whether you are a human user.
​
​ Two-Factor Authentication:
​
If you enable SMS-based two-factor authentication, we collect and share your phone number with Twilio, Inc. for the purpose of sending verification codes. Your phone number is used solely for authentication and is not used for marketing purposes.
​
​ Local Storage on Mobile Devices:
​
The Mobile App stores authentication tokens and user session data locally on your device using encrypted secure storage (Keychain on iOS, Keystore on Android). This data is only accessible to the Commonspace app and is used to maintain your login session. If you uninstall the Mobile App, this locally stored data is removed.
​
​

We may receive information from:

We use your information to provide, operate, maintain, and improve the Services, including in connection with customer support, security, and legal compliance.
​
​ Providing and Operating the Services:

Media Processing:
​
When you upload images or videos, we process them on our servers to optimize quality and performance. This includes resizing images and converting videos to standardized formats (MP4). Original files may contain embedded metadata such as timestamps, device information, and location data (e.g., EXIF GPS coordinates). We recommend removing sensitive metadata before uploading if you do not wish it to be stored.
​
​ Communications:

Safety and Security:

Legal and Compliance:

We do not sell your personal information.
​
​

When you join a Space, the Space Owner receives:

Space Owners must protect your data per our Space Owner Agreement. When you leave a Space, the Space Owner no longer has access to your current data. If you delete your Account, Space Owners cannot access your previous data.
​
​

Based on your settings:

We share Personal Data with the following categories of service providers in order to operate and improve the Services:
​
​ Payments and Identity Verification:
​ Stripe, Inc.: Payment processing and identity verification for Space Owners (KYC). We do not store payment card information on our systems. See https://stripe.com/privacy
​
​ Cloud Infrastructure:
​ Amazon Web Services (AWS): Cloud hosting, data storage (Amazon S3), and database infrastructure. All uploaded content and platform data is stored on AWS in the United States (us-west-1 region). See https://aws.amazon.com/privacy/
​
​ Content Accessibility: Publicly accessible content is served via direct URLs. Access-controlled content (paid downloads, Member-only media) is served via time-limited, authenticated URLs that expire automatically.
​
​ Communications:
​ SendGrid (Twilio Inc.): Transactional and marketing email delivery. See https://www.twilio.com/legal/privacy
​ Twilio, Inc.: SMS-based two-factor authentication. See https://www.twilio.com/legal/privacy
​
​ Push Notifications:
​ Expo (650 Industries, Inc.): Push notification SDK and token management. See https://expo.dev/privacy
​ Google Firebase Cloud Messaging: Android push notification delivery. See https://policies.google.com/privacy
​ Apple Push Notification Service: iOS push notification delivery. See https://www.apple.com/legal/privacy/
​
You may disable push notifications at any time in the Mobile App settings or your device settings.
​
​ Security and Fraud Prevention:
​ Google reCAPTCHA Enterprise: Bot and fraud prevention. See https://policies.google.com/privacy
​
​ Analytics:
​ Google Analytics: Usage analytics and performance improvement. You can opt out at tools.google.com/dlpage/gaoptout.
​
​ Other Google Services:
​ Google Fonts: Font files loaded from Google servers when rendering Space themes.
​ Google Maps: Location autocomplete during account setup.
​
​

Space Owners may enable optional third-party integrations ("Plugins") within their Spaces. Your data is only shared with a Plugin service after you opt in. Currently known or planned Plugins include:

The list of available Plugins is maintained at https://common.space/legal/plugins.
​
​

We may disclose information to comply with law, respond to government requests, protect our rights, or prevent harm.
​
​

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. If you are located in the EEA, UK, or Switzerland, we will ensure any such transfer complies with applicable data protection law.
​
​

We keep your information only for as long as needed:
​
​ Account information: deleted or anonymized within 90 days of account closure
​ Transaction records: kept for 7 years as required by tax and financial regulations
​ Content: kept until you delete it or close your account, then removed within 90 days
​ Usage and log data: kept for up to 12 months, then aggregated or anonymized
​
When you delete your account, we begin the deletion process promptly. Some information may be retained longer where required by law or needed to resolve an active dispute.
​
For questions about your data, contact us at [email protected].
​
​

You can update your personal information at any time through your Commonspace account settings. Depending on your location, you may have certain rights regarding your personal information, including:

To exercise these rights, contact us at [email protected]. We will respond within 30 days of receipt.
​
​

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional terms apply under GDPR and applicable local law.
​
​

Submit a written request to [email protected]. We will respond within 30 days.
​
​

You have the right to lodge a complaint with your local data protection supervisory authority. EEA supervisory authorities are listed at https://edpb.europa.eu. UK users may contact the ICO at ico.org.uk.
​
​

When we transfer your personal data outside the EEA or UK, we do so on the basis of Standard Contractual Clauses or another valid transfer mechanism under Article 46 GDPR. Contact [email protected] for more information.
​
​

If you are a California resident, you have specific rights under the CCPA and CPRA. Categories of personal information we collect include: Identifiers, Personal information under Cal. Civ. Code § 1798.80, Commercial information, Internet or network activity information, General geolocation information, and Inferences.
​
Your California Privacy Rights:

To exercise any of these rights, contact us at [email protected].
​
​

If you are located in Japan, the following additional terms apply under the Act on the Protection of Personal Information (APPI).
​
​ Business Operator: Commonspace Platforms, Inc. Contact [email protected] for personal information inquiries.
​
​ Purpose of Use: We use your personal information for the purposes set forth in Section 3 of this Privacy Policy. We will not use your personal information beyond the scope necessary without your prior consent.
​
​ Provision to Third Parties: We may provide your personal information to third parties as described in Section 4. By using the Services, you consent to such provision.
​
​ Cross-Border Transfer: Your personal information is transferred to and processed in the United States. By using the Services, you consent to this cross-border transfer.
​
​ Your Rights Under APPI: You have the right to request notification, disclosure, correction, suspension of use, and suspension of third-party provision of your personal information. Contact [email protected] to exercise these rights.
​
​ Complaints: You may contact the Personal Information Protection Commission (PPC) of Japan at https://www.ppc.go.jp/en/.
​
​

We use cookies and similar technologies to operate and improve the Services.
​
​ Essential cookies — Strictly necessary for authentication, session management, and security. Cannot be disabled without impairing the Services.
​
​ Functional cookies — Remember your preferences and settings for a more personalized experience.
​
​ Analytics cookies — Help us understand how users interact with the Services. We use Google Analytics.
​
​ Your Cookie Choices: You can manage or delete cookies through your browser settings. EEA, UK, and Swiss users: we will obtain your consent before placing non-essential cookies, in accordance with the ePrivacy Directive.
​
​ Do Not Track: We currently do not respond to DNT signals, as no uniform standard has been adopted.
​
​

The Services are intended for users who are at least 18 years of age (in the United States) or the age of majority in their jurisdiction. We do not knowingly collect personal information from anyone who does not meet these age requirements. If you believe someone below the applicable age has provided personal information to us, please contact us at [email protected].
​
​

We implement reasonable administrative, technical, and physical safeguards including:

We do not store sensitive payment information on our systems. While we work to protect your information, no method of transmission over the internet is completely secure.
​
​ Data Breach Notification: In the event of a security breach, we will notify you without undue delay and in accordance with applicable law, including notifying relevant supervisory authorities within 72 hours where required under GDPR Article 33.
​
​ Automated Decision-Making: We do not use automated decision-making that produces legal or similarly significant effects on you. Our content Feed is chronological and not driven by algorithmic profiling.
​
​

Commonspace is operated from the United States and currently supports users in the United States and Japan. If you access the Services from outside the United States, your personal information may be transferred to, stored in, and processed in the United States.
​
​

Our Services may include links to third-party websites or services. We do not control these third parties, and this Privacy Policy does not apply to their practices.
​
​

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last Updated" date. If we make material changes, we may also provide additional notice by email or through the Services.
​
​

Commonspace Platforms, Inc.
Privacy Inquiries: [email protected]
General Legal: [email protected]
Security Issues: [email protected]
Website: https://common.space
Help Center: https://help.common.space
Address: 6121 Sunset Blvd, Los Angeles, CA 90028, United States
​
​

BY USING THE SERVICES, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY.