// Legal

Privacy Policy

Last updated: July 3, 2026.

Spaceshots Technologies (OPC) Private Limited ("Spaceshots", "we", "us", or "our") operates this website at spaceshots.tech and the client portal linked from it. We respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why, how we handle it, and the rights you have. For the purposes of India's Digital Personal Data Protection Act, 2023 (the "DPDP Act"), Spaceshots is the Data Fiduciary responsible for your personal data.

Information we collect

  • Information you provide. When you submit our contact ("flight plan") form, we collect your name and email, plus any optional details you choose to share — your company, the kind of project, suitable times for a call, and your project brief.
  • Client portal accounts. If we set up a portal account for you, we store your name, email, an encrypted (hashed) password, and information relating to your projects with us.
  • Technical and usage data. Like most websites, our infrastructure automatically records limited technical information such as your IP address, browser and device type, the referring page, and the pages you visit, along with timestamps. We use this for security, troubleshooting, and understanding how the site is used.
  • Cookies and similar technologies. We use only essential cookies and similar technologies: security and anti-bot measures provided by Cloudflare (including Cloudflare Turnstile), and — for the client portal — a session cookie that keeps you signed in. We do not use advertising or third-party tracking cookies.

How and why we use your data

We use your personal data to:

  • respond to your enquiry and discuss whether and how we can work together;
  • provide and administer the client portal and deliver services you engage us for;
  • keep the website and portal secure, prevent spam and abuse, and diagnose technical issues;
  • maintain business records and comply with our legal obligations; and
  • operate and improve our website and services.

We process your data on the basis of your consent (for example, when you submit the form), to take steps at your request before entering into a contract, for our legitimate business purposes, and where otherwise permitted by applicable law.

Sharing and service providers

We do not sell your personal data, and we do not use it for advertising. We share personal data only with trusted service providers who help us run the website and communicate with you, under appropriate confidentiality and data-protection terms. These currently include:

  • Cloudflare, Inc. — website hosting and content delivery, database storage (Cloudflare D1), and bot protection (Turnstile);
  • Resend — sending transactional emails, such as our reply to your enquiry.

We may also disclose personal data where required to do so by law, or to establish, exercise, or defend our legal rights, or to protect our users or the public.

International transfers

Our service providers operate globally, so your personal data may be processed on servers located outside India. Where that happens, we take reasonable steps to ensure your data continues to be protected in line with this policy and applicable law.

How long we keep it

We keep enquiry details for as long as necessary to respond to you and for our legitimate business records. Portal and project data is kept for the duration of our engagement and a reasonable period afterwards. When personal data is no longer needed, we delete or anonymise it, unless we are required to keep it longer to comply with the law.

How we protect it

We use reasonable technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), hashing of passwords, access controls, and bot and abuse protection. No method of transmission or storage is completely secure, but we work to safeguard your data and to address any incident appropriately.

Your rights

Subject to applicable law, including the DPDP Act, you have the right to:

  • access the personal data we hold about you and information about how we process it;
  • correct, complete, or update inaccurate or incomplete data;
  • request erasure of your personal data where it is no longer needed;
  • withdraw any consent you have given (this will not affect processing already carried out); and
  • nominate another person to exercise your rights in the event of your death or incapacity.

To exercise any of these rights, email us at contact@spaceshots.tech and we will respond within a reasonable time.

Grievances

If you have any concern or complaint about how we handle your personal data, please contact us at contact@spaceshots.tech and we will work to resolve it. If you remain unsatisfied, you may raise the matter with the Data Protection Board of India.

Children

This website is intended for a general business audience and is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us their data, contact us and we will delete it.

Third-party links

Our site may link to third-party websites, for example in our case studies. We are not responsible for the content or privacy practices of those sites; please review their own policies.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "last updated" date above, and for significant changes we will take reasonable steps to let you know.

Contact

Questions about this policy or your personal data? Email contact@spaceshots.tech.