It's not excellent. Nothing about data security, encryption at rest, and a whole load of things that would be covered by GDPR (yes the service is registered in Canada, but GDPR standards should be the benchmark now for what is considered acceptable for anything).

This is an intriguing idea as a concept but feels like it isn't a sufficient focus. The privacy page hasn't been updated in 18 months either, yet the release notes mention encryption at rest (with very little detail) being added in October 16.

Just as a data point, this is the first time I ever heard about GDPR. Not sure it's "the minimum acceptable standard for anything".

If you have users in the EU/EEA then you _will_ have to comply, or risk a fine of up to €20,000,000 or 4% of your _global_ turnover (whichever is larger).

It will be if you want to operate in Europe.

That is not a good privacy policy. Founder needs to talk to a lawyer, or the EFF.

For instance:

> Monica runs on Linode and I'm the only one, apart from Linode's employees, who has access to those servers.

This speaks to nothing about future use, which is what my question specifically asked.

Good point.

My question is about this line:

> When you close your account, we will immediately destroy all your personal information and won't keep any backup.

I'd love to hear how you're purging users from your backups, and how long you keep backups.

Not loading now.