Legal
Privacy Policy
Effective date: 2026-09-11
1. Who we are
NAVIS Systems Ltd ("NAVIS", "we", "us") is a private limited company registered in England and Wales, company number 17391300, with its registered office at 66 Paul Street, London EC2A 4NA, United Kingdom. We provide an orbital decision-intelligence platform for tracking satellites and generating compliance, risk, and disposal insights.
For personal data we process about you, NAVIS is the data controller. Privacy enquiries and data-subject requests: privacy@navis.space.
2. Scope
This policy explains what personal data we collect through our website and application, why we process it, the legal bases we rely on, who we share it with, and the rights you have. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018, and with the EU GDPR where it applies to users in the EEA. This policy does not apply to public satellite catalog data, which is not personal data.
3. Information we collect
Account & organization data — name, email, password (stored hashed by our auth provider), organization name, role, and membership.
Fleet & configuration data — the satellites you track, private assets you upload, thresholds and preferences you set, and generated reports and audit records.
Usage & device data — pages viewed, features used, IP address, browser/device information, and diagnostic logs, used to operate and secure the service.
Payment data — subscriptions are processed by our payment provider (merchant of record). We receive plan, status, and billing metadata; we do not collect or store full card numbers.
Cookies & local storage — see Section 12.
4. Public orbital data
Orbital elements and catalog data are sourced from public providers such as CelesTrak and Space-Track and are presented as published by those sources. This information describes objects in orbit, not people, and is not personal data.
5. How and why we use your data (legal bases)
• To provide the service — create your account, run the decision engine for your fleet, and deliver reports. Basis: performance of a contract.
• To secure the service — prevent abuse and diagnose faults. Basis: our legitimate interests.
• Product analytics — understand which features are used so we can improve them. Basis: your consent, which you can withdraw at any time.
• To process payments — manage subscriptions and invoices. Basis: performance of a contract.
• To communicate — send service, security, and (where permitted) product messages. Basis: legitimate interests or consent.
• To meet legal obligations — accounting, tax, and lawful requests. Basis: legal obligation.
We do not sell or share your personal data and do not use it for cross-context behavioral advertising.
6. Service providers (subprocessors)
We share personal data only as needed with vetted providers acting on our instructions under contract:
- Supabase — database, authentication, and storage.
- Vercel — application hosting and delivery.
- Payment provider (merchant of record) — subscription billing and payment processing.
- Email provider — transactional email (verification, password reset, alerts).
- Google — optional "Sign in with Google" authentication, if you use it.
- ActiveCampaign — marketing and lifecycle email, and the onboarding/offboarding answers you give us.
- PostHog — product analytics (US), only if you accept analytics cookies.
- Sentry — error monitoring: technical details of crashes (error message, page, browser and device type) so we can fix faults. No cookies, and we don't send names or email addresses.
- Sanity — content management for our blog (no customer personal data).
- CelesTrak / Space-Track — public orbital data sources (no personal data shared).
We also disclose data where required by law or to protect our rights, users, or the public.
7. Marketing email & product surveys
When you create an account we add your email and name to our email platform so we can send onboarding guidance and product updates. Every marketing message carries a one-click unsubscribe, and unsubscribing never affects service, security, or billing emails.
If you join our launch waitlist, we add your email address to our email platform so we can tell you when NAVIS launches. We don't use it for anything else, and you can unsubscribe from any email.
Our optional onboarding questions (role, organization size, use case, fleet size, goals) are stored with your account record and mirrored to our email platform so we can tailor what we send you. You can skip them and still use every part of the service.
The optional exit survey shown when you delete your account is stored anonymously — without your name, email, or account ID — so we can learn why people leave. Deleting your account also deletes your contact record from our email platform.
8. International transfers
Some of our providers process data outside the UK and the EEA. Where we transfer personal data internationally we rely on appropriate safeguards — UK adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the European Commission's Standard Contractual Clauses, together with the Standard Contractual Clauses themselves for EEA transfers. A copy of the relevant safeguard is available on request.
9. Data retention
We retain account and fleet data for as long as your account is active and as needed to provide the service. After closure, we delete or anonymize personal data within a reasonable period, except where a longer retention is required for legal, tax, or dispute-resolution purposes.
10. Security
We use industry-standard safeguards including encryption in transit, access controls, tenant isolation, and least-privilege practices. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
11. Your rights
Depending on your location, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. If you are in California, you may request to know or delete your personal information and to opt out of "sale" or "sharing" (we do neither). To exercise any right, contact privacy@navis.space. We respond within one month, as required by the UK GDPR. If you are not satisfied, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to the supervisory authority where you live or work.
12. Cookies & local storage
We use strictly necessary cookies and local storage to keep you signed in, remember your preferences (theme, units, language), and remember your cookie choice. These are always on because the service cannot work without them.
With your consent we also use analytics cookies set by PostHog to measure how NAVIS is used. They are not loaded until you click "Accept" in our cookie banner, and you can change your choice at any time from "Cookie settings" in the site footer. We do not use advertising or cross-site tracking cookies.
13. Children
The service is not directed to children and is not intended for anyone under 16. We do not knowingly collect data from children.
14. Changes to this policy
We may update this policy from time to time. Material changes will be communicated through the service, and the effective date above will be updated.
15. Contact
NAVIS Systems Ltd, 66 Paul Street, London EC2A 4NA, United Kingdom.
Privacy: privacy@navis.space · General: info@navis.space