Privacy Policy

Introduction

SpaceNexus ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

Information We Collect

Personal Data

We may collect personally identifiable information that you voluntarily provide to us when you:

• Register for an account
• Subscribe to our newsletter
• Fill out a contact form
• Submit feature requests or feedback
• Participate in surveys or promotions

This information may include your name, email address, company name, job title, and other contact or identifying information you choose to provide.

Automatically Collected Data

When you access our platform, we automatically collect certain information, including:

• Device information (browser type, operating system, device type)
• Log data (IP address, access times, pages viewed, referring URL)
• Usage patterns and feature interactions
• If you turn on browser push notifications, the push subscription your browser gives us (an address at your browser's push service and its keys), used only to deliver the notifications you chose

Mobile Apps

We have not published a native iOS or Android app. The site can be installed to your home screen as a web app, which collects nothing beyond what this policy already describes. If we publish a native app, we will update this policy before the app collects anything.

Community Data

When you use our community features, we collect:

• Forum posts, threads, and replies you create
• Messages you post in a launch live chat, with the display name shown beside them
• Companies and other subjects you choose to follow
• Content reports you submit
• Your moderation history (warnings, mutes, bans)

How We Use Your Information

We use the information we collect for various purposes, including:

• Providing, operating, and maintaining our services
• Improving, personalizing, and expanding our platform
• Understanding and analyzing how you use our services
• Developing new products, services, features, and functionality
• Communicating with you about updates, security alerts, and support
• Sending you marketing and promotional communications (with your consent)
• Processing transactions and managing your account
• Detecting, preventing, and addressing technical issues and fraud
• Complying with legal obligations
• Moderating community content for compliance with our Community Guidelines
• Processing content reports and enforcing platform rules

Information Sharing and Disclosure

We may share your information in the following situations:

Service Providers

We share information with service providers who perform services on our behalf. Today they are:

• Railway: hosts the site and its database
• Stripe: processes payments and subscriptions
• Resend: delivers our emails (account, alert and newsletter email)
• Google Analytics: measures site usage, including the approximate country and region Google works out from your IP address, only after you accept analytics cookies
• Google AdSense: may serve ads to free-plan visitors, only after you accept advertising cookies
• Anthropic (an AI model provider): receives the name, email address, subject and text of messages sent through our contact form so a reply can be drafted; a person reads every draft, and nothing is sent to you automatically
• Google Workspace and Gmail: host our own mailboxes, so email you send us, and the notices of contact-form messages we send ourselves, are stored there
• YouTube: launch video players load from YouTube's privacy-enhanced domain (youtube-nocookie.com), which receives your IP address and browser details when a player loads
• Your browser's or phone's push service (for example Google, Apple or Mozilla): delivers the push notifications you turn on

Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., a court or government agency).

With Your Consent

We may share your information for other purposes with your explicit consent.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our platform and store certain information. Cookies are files with a small amount of data that may include an anonymous unique identifier.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

For more detailed information about the cookies we use, please see our Cookie Policy.

Data Security

We take technical measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. They include:

• Data sent between your browser and SpaceNexus travels over HTTPS, and browsers are told to use HTTPS only (HSTS)
• Your data is stored in a database with our hosting provider, Railway
• Passwords are stored only as bcrypt hashes, never in readable form
• Card details go straight to Stripe; we never see or store your card number
• Sign-in attempts are rate limited, and administrative tools require an administrator account

Our Security page describes these measures in more detail, including what we do not have yet.

However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to processing of your personal information
• Restriction: Request restriction of processing your data
• Withdrawal: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the information provided below. You can also export all of your data at any time from your Account Settings page.

Global Privacy Control (GPC)

We respect the Global Privacy Control (GPC) signal. When we detect a GPC signal from your browser, we treat it as a valid opt-out request for the sale or sharing of your personal information, consistent with applicable state privacy laws including the CCPA, VCDPA, CPA, and CTDPA.

You can learn more about GPC at globalprivacycontrol.org.

Account Deletion

You can permanently delete your account and all associated data at any time through the Account Settings page. Account deletion is immediate and irreversible. All your personal data, preferences, saved searches, watchlists, API keys, and other account-related information will be permanently removed from our systems.

Data Retention

We retain different types of data for different periods, depending on the purpose for which it was collected and our legal obligations:

• Account data: Retained until you delete your account
• Forum posts and threads: Retained until deleted by you or removed by a moderator
• Content reports and moderation records: Kept for safety and legal purposes. We do not yet delete them automatically on a fixed schedule; ask us and we will review a deletion request
• Server logs: Kept by our hosting provider for its standard log-retention period
• Newsletter subscription data: Until you unsubscribe
• SpaceNexus Research saved work (saved screens and their alert settings, portfolios, seat assignments and briefing-call registrations): kept when a Research plan is cancelled or expires, so everything is there if you restore the plan. While the plan is off, screen alerts are not sent and seats cannot be used. Deleted when you delete your account.

When we no longer need your information, we will securely delete or anonymize it.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

Children's Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us and we will take steps to delete such information.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: