Privacy Policy
Last updated: March 2026
Data controller
We-Amp B.V.
KvK (Chamber of Commerce): 57898138
Castricum, The Netherlands
Email: privacy@we-amp.com
What we collect
Websites (we-amp.com, modpagespeed.com, iispeed.com, ngxpagespeed.com)
Our websites are static and do not use cookies, analytics trackers, or third-party scripts. Web server access logs (IP address, URL, user agent, timestamp) are retained for up to 30 days for operational purposes and then deleted.
License service (api.modpagespeed.com)
When you activate a license, we process: your license key, the product and version identifier, and a server identifier derived from your hostname. We do not collect personal data, traffic data, or the content of your websites. License tokens are Ed25519-signed and cached locally on your server.
Purchases (via FastSpring)
Payment processing is handled by FastSpring (Bright Market LLC), our Merchant of Record. FastSpring collects the personal and payment data necessary to process your order (name, email, billing address, payment details). We receive your name, email address, and order details — but not your full payment information.
FastSpring acts as an independent data controller for payment processing. See FastSpring's privacy policy for details on their data handling.
Email communication
When you contact us via email, we process your email address and message content to respond to your inquiry. We do not add you to marketing lists without explicit consent.
Legal basis for processing
We process personal data on the following legal bases under the GDPR:
- Contract performance (Art. 6(1)(b)) — to fulfill your license purchase and provide support
- Legitimate interest (Art. 6(1)(f)) — server access logs for security and operational monitoring
- Legal obligation (Art. 6(1)(c)) — financial records as required by Dutch tax law
Data sharing
We share personal data only with:
- FastSpring — payment processing (Merchant of Record)
- Google Cloud Platform — infrastructure hosting (data processing agreement in place)
We do not sell personal data. We do not use personal data for advertising or profiling.
International data transfers
Our infrastructure is hosted on Google Cloud Platform in the United States (us-central1). Payment processing is handled by FastSpring (Bright Market LLC), also based in the United States. This means your personal data may be transferred to and processed in the United States.
These transfers are safeguarded under GDPR by:
- Google Cloud Platform — Data Processing Agreement with Standard Contractual Clauses (SCCs)
- FastSpring — acts as independent data controller with its own GDPR commitments and SCCs
Data retention
- Server access logs: 30 days
- License activation records: duration of the license plus 1 year
- Purchase records: 7 years (Dutch fiscal retention requirement)
- Support correspondence: 2 years after last contact
Your rights
Under the GDPR, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate data
- Erasure — request deletion of your data (subject to legal retention requirements)
- Restriction — limit processing of your data
- Data portability — receive your data in a structured format
- Object — object to processing based on legitimate interest
To exercise any of these rights, email privacy@we-amp.com. We will respond within 30 days.
Supervisory authority
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Changes to this policy
We may update this privacy policy to reflect changes in our practices or legal requirements. Material changes will be noted with an updated "Last updated" date at the top of this page.