Legal

Privacy Policy

Effective date: 2026-01-01

1. Who we are

NAVIS ("NAVIS", "we", "us") provides an orbital decision-intelligence platform for tracking satellites and generating compliance, risk, and disposal insights. For personal data we process about you, NAVIS acts as the data controller. You can reach us at info@navis.space.

2. Scope

This policy explains what personal data we collect through our website and application, why we process it, the legal bases we rely on, who we share it with, and the rights you have. It does not apply to public satellite catalog data, which is not personal data.

3. Information we collect

Account & organization data — name, email, password (stored hashed by our auth provider), organization name, role, and membership.

Fleet & configuration data — the satellites you track, private assets you upload, thresholds and preferences you set, and generated reports and audit records.

Usage & device data — pages viewed, features used, IP address, browser/device information, and diagnostic logs, used to operate and secure the service.

Payment data — subscriptions are processed by our payment provider (merchant of record). We receive plan, status, and billing metadata; we do not collect or store full card numbers.

Cookies & local storage — see Section 11.

4. Public orbital data

Orbital elements and catalog data are sourced from public providers such as CelesTrak and Space-Track and are presented as published by those sources. This information describes objects in orbit, not people, and is not personal data.

5. How and why we use your data (legal bases)

To provide the service — create your account, run the decision engine for your fleet, and deliver reports. Basis: performance of a contract.

To secure and improve the service — prevent abuse, debug, and analyze usage. Basis: our legitimate interests.

To process payments — manage subscriptions and invoices. Basis: performance of a contract.

To communicate — send service, security, and (where permitted) product messages. Basis: legitimate interests or consent.

To meet legal obligations — accounting, tax, and lawful requests. Basis: legal obligation.

We do not sell your personal data and do not use it for cross-context behavioral advertising.

6. Service providers (subprocessors)

We share personal data only as needed with vetted providers acting on our instructions under contract:

  • Supabase — database, authentication, and storage.
  • Vercel — application hosting and delivery.
  • Payment provider (merchant of record) — subscription billing and payment processing.
  • Email provider — transactional email (verification, password reset, alerts).
  • Google — optional "Sign in with Google" authentication, if you use it.
  • CelesTrak / Space-Track — public orbital data sources (no personal data shared).

We also disclose data where required by law or to protect our rights, users, or the public.

7. International transfers

Our providers may process data in countries other than yours. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.

8. Data retention

We retain account and fleet data for as long as your account is active and as needed to provide the service. After closure, we delete or anonymize personal data within a reasonable period, except where a longer retention is required for legal, tax, or dispute-resolution purposes.

9. Security

We use industry-standard safeguards including encryption in transit, access controls, tenant isolation, and least-privilege practices. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

10. Your rights

Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. If you are in California, you may request to know or delete your personal information and to opt out of "sale" or "sharing" (we do neither). To exercise any right, contact info@navis.space. You also have the right to lodge a complaint with your local data protection authority.

11. Cookies & local storage

We use only strictly necessary cookies and local storage — to keep you signed in, remember your preferences (theme, units, language), and enforce access to the application. We do not use advertising or cross-site tracking cookies.

12. Children

The service is not directed to children and is not intended for anyone under 16. We do not knowingly collect data from children.

13. Changes to this policy

We may update this policy from time to time. Material changes will be communicated through the service, and the effective date above will be updated.

14. Contact

Questions or requests: info@navis.space.