Privacy policy

1. Controller

The controller of your personal data is SPACE Solutions s. r. o., Lermontovova 911/3, 811 05 Bratislava, Slovensko, IČO 55 333 834, DIČ 2121953042, IČ DPH SK2121953042, zapísaná v OR Mestského súdu Bratislava III, oddiel Sro, vložka č. 168206/B, e-mail director@spacesolutions.sk. Send any privacy questions to the same address.

2. What data we process

• Order: e-mail, the chosen subdomain, plan, name, billing address and country, VAT ID if you enter one; the time and version of your consent to start the service right after payment.
• Payment: processed by Stripe. We only see the payment status, amount, tax and the last four digits of the card; the full card number never reaches us.
• Technical data: IP address, browser and request times in the hosting provider's server logs.
• Communication: the content of e-mails you send us.

This site uses no analytics or advertising cookies. Stripe's checkout page uses its own cookies needed for payment and fraud prevention.

3. Purposes and legal bases

• Concluding and performing the contract, providing the service and support: Art. 6(1)(b) GDPR.
• Accounting and tax obligations, including OSS VAT records: Art. 6(1)(c) GDPR.
• Site security, fraud prevention and defending legal claims: legitimate interest, Art. 6(1)(f) GDPR.

4. Who we share data with

• Stripe (payments, tax calculation, payment receipts).
• Hetzner Online GmbH, Germany (hosting of this site and of the hosted service, server logs).
• The providers of the hosted service listed in section 7.

Stripe may transfer data to the US. Transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We don't sell your data or use it for advertising.

5. How long we keep data

We keep order data for as long as tax law requires (10 years from the end of the year of the transaction under the OSS scheme). Server logs are deleted automatically according to the hosting settings, usually within days. We keep e-mail correspondence for as long as needed to handle your request.

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on legitimate interest. Just write to director@spacesolutions.sk. You may also lodge a complaint with the data protection authority in your country.

7. Hosted ORBIT

For the hosted service we process account and order data (e-mail, subdomain, plan, subscription status, billing details) and the content the customer stores or connects in their instance (mail, calendar, documents, assistant memory). We are the controller of account and payment data. For the content in the instance we are a processor, handling it only to provide the service on the customer's instructions.

• The instance runs in an isolated environment on our server at the hosting provider Hetzner Online GmbH.
• Daily off-site backups are stored with a storage provider; they are encrypted and the storage provider cannot see their contents.
• E-mails (access, subscription management) are sent through an e-mail service provider.
• We keep the content in the instance during the subscription and for 30 more days afterwards (export on request). Then we delete it together with the instance and all its backups.
• The customer's AI provider (Anthropic or OpenAI) processes prompts under the contract the customer has directly with it; we do not enter into that contract on the customer's behalf.

8. Changes

When this policy changes, we update the effective date. See also the terms.