Skip to content

Privacy Policy

Last updated: September 5, 2026

See what information Spleen collects, why it is used, how it is protected, and what choices you have.

Introduction

Your privacy matters.

This Privacy Policy explains what personal information Spleen collects, why we collect it, how we use it, and the choices you have regarding your information.

Spleen is designed to help people write. We collect only the information reasonably necessary to provide, secure, maintain, and improve the service.

Data controller

  • Controller: Spleen Software
  • KvK: 42153216
  • VAT ID: NL005539332B11
  • Location: Monster, The Netherlands
  • Email: info@spleen.page

Information we collect

Depending on how you use Spleen, we may process the following information.

Account information

  • Name
  • Email address
  • Authentication information
  • Account preferences
  • Profile image, if you choose to upload one

If you sign in using a third-party authentication provider such as Google or GitHub, we may receive the account information that provider shares with us for authentication purposes.

Content you create

  • Sections and documents
  • Notes and annotations
  • Other writing content

Billing and subscription information

If you use a paid plan, we may process information related to your subscription, including:

  • Subscription plan and status
  • Billing name and address
  • Country or region
  • VAT or tax identification number, where provided
  • Stripe customer, subscription, invoice, and payment-related identifiers
  • Billing notices and payment status information

Payment card details are processed by Stripe. Spleen does not store your full payment card number.

Technical information

When necessary for security, authentication, fraud prevention, reliability, or troubleshooting, we may process limited technical information such as:

  • IP address
  • Browser information
  • Operating system
  • Security and diagnostic logs

Why we process your information

We process personal data to:

  • create and manage your account;
  • authenticate your sign-in;
  • provide and maintain the service;
  • store and synchronize your data;
  • generate PDFs or exports you request;
  • manage subscriptions and billing;
  • process payments and related tax information;
  • respond to support requests;
  • prevent abuse, fraud, and duplicate or erroneous billing;
  • maintain the security and reliability of Spleen;
  • comply with legal and accounting obligations;
  • improve the stability and quality of the service.

We do not sell your personal information.

Where required under the General Data Protection Regulation (GDPR), we process personal data on one or more of the following legal bases.

  • Providing the service. Legal basis: performance of a contract.
  • Billing and subscription administration. Legal basis: performance of a contract and, where applicable, legal obligation.
  • Account and service security. Legal basis: legitimate interest.
  • Fraud and abuse prevention. Legal basis: legitimate interest.
  • Legal and tax compliance. Legal basis: legal obligation.
  • Optional features requiring consent. Legal basis: consent.

Where we rely on legitimate interests, we consider whether those interests are proportionate and compatible with your rights and expectations.

Your content

We do not claim ownership of your writing.

Your documents remain yours.

We process your content only as necessary to provide the service you use, including storage, synchronization, backups, exports, security, and technical troubleshooting.

We do not use your documents to train artificial intelligence models.

Cookies

Spleen uses a limited number of cookies and similar technologies that are necessary for the operation and security of the service, such as keeping you signed in and remembering certain interface preferences.

For detailed information about the cookies we use, their purpose, and how long they are stored, please see our Cookie Policy.

Third-party services

To operate Spleen, we use selected third-party service providers. These providers may process personal data only as necessary to perform their respective functions.

Depending on the feature you use, these may include:

  • Stripe for payment processing, subscription management, invoicing, and tax-related checkout information;
  • Google and GitHub when you choose to use those services to sign in;
  • our email service provider for transactional and support email delivery;
  • hosting, infrastructure, database, storage, and backup providers used to operate Spleen.

Some providers may process information in countries outside the European Economic Area. Where required, we use appropriate safeguards for those transfers.

Data retention

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to:

  • provide the service;
  • maintain your account and content;
  • comply with legal, tax, and accounting obligations;
  • resolve disputes;
  • prevent fraud and abuse;
  • enforce our agreements.

When you delete your account, account and writing data that is no longer required will be deleted or anonymized within a reasonable period, subject to technical backup cycles and any information we are legally required to retain.

Billing, invoice, transaction, and accounting records may be retained for longer where required by applicable tax or accounting law.

Security

We use appropriate technical and organisational measures to protect personal data.

These measures include, where appropriate:

  • encrypted HTTPS connections;
  • authentication and access controls;
  • secure password and authentication handling;
  • regular software updates;
  • security and diagnostic monitoring;
  • backups and disaster recovery procedures.

Although we work to protect your information, no method of electronic storage or transmission can be guaranteed to be completely secure.

Your rights

Depending on your location and applicable law, you may have the right to:

  • access your personal data;
  • correct inaccurate information;
  • request deletion of your personal data;
  • restrict certain processing;
  • object to certain processing;
  • receive a copy of your personal data;
  • withdraw consent where processing is based on consent.

To exercise these rights, contact info@spleen.page.

If you believe your privacy rights have been violated, you may also lodge a complaint with the competent data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

International data transfers

Where personal data is transferred outside the European Economic Area, we take steps to ensure that appropriate legal safeguards are in place as required by applicable law.

These safeguards may include an adequacy decision, Standard Contractual Clauses, or another legally recognized transfer mechanism.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

The latest version will always be published on this page. If we make significant changes, we will communicate them where appropriate.

Contact

If you have any questions about this Privacy Policy or how we process personal data, please contact us.

Email: info@spleen.page