@Betree @liaizon @OpenSourceCollective was it by email, mastodon, or github issue, i searched and cannot find it. but i remember it was: we are US based and we dont need to store data in Europe. I since few years later, you can understand now in 2026 why this is an important detail. GDPR does not mandate storing europeans' data in Europe,but it would help if you would do that. it would improve trust and safety. i will certainly not use your service until the data is stored in Europe. Good work!

@Betree @liaizon @OpenSourceCollective Thank you Benjamin for your detailed answers. And sorry if I spread inaccurate information about your software. I am glad to read you do encrypt some sensitive data. maybe this is a new feature that didn't exist last time I looked. In general, I think what you do is very useful, and your large userbase attests to that. Glad also you are improving decentralization and self hosting. i cant find the answer I got back then from someone of your team about GDPR.

@liaizon @OpenSourceCollective another I never liked about open collective is that they store all their data on AWS in the US, unencrypted. that means all the fiscal data, invoices, payment details, of all their users, including all collectives using their online platform. as open collective is difficult to self host, everybody uses their website. when i asked for more details, they said they are a US based organisation, that they won't care, and that GDPR does not apply to them. i stop using it