Privacy Policy

1. What Information We Collect

We collect only the minimum information required to create and maintain your account:

• Email address — Used for account creation, verification, and subscription management. Never shared or sold.
• GST-ID — Your unique 8-digit identifier. Auto-generated. Not tied to your real identity unless you choose to verify.
• Payment information — Processed entirely by Stripe. We never see, store, or have access to your credit card number, bank details, or financial information.
• Device fingerprint — An anonymous hash used only to prevent trial abuse. Cannot be used to identify you personally.
• IP address — Temporarily stored in server logs for security purposes (preventing abuse, detecting attacks). Logs are automatically deleted after 30 days.

2. What We Do NOT Collect

• ❌ Your messages, texts, or chat content
• ❌ Your voice or video calls
• ❌ Files, photos, or documents you send
• ❌ Your contact lists or address book
• ❌ Your location or GPS data
• ❌ Your real name (registration does not require it)
• ❌ Your phone number (not required)
• ❌ Biometric data
• ❌ Browsing history or behavior data
• ❌ Advertising identifiers
• ❌ Social media profiles or connections

3. How We Use Information

The limited information we collect is used exclusively for:

• Sending you your GST-ID upon registration
• Processing subscription payments through Stripe
• Sending account-related notifications (subscription renewal, trial expiration)
• Preventing fraud and abuse of the free trial system
• Responding to support requests you initiate

We do not use your information for advertising, profiling, behavioral analysis, or any purpose beyond operating the service.

4. Zero Server Architecture Explained

This means:

• No government subpoena can compel us to hand over your messages — we do not have them
• No hacker can steal your communications by attacking our servers — they do not exist
• No employee of GlobalSpaceTechnology.com can read your messages — technically impossible
• No court order can force us to decrypt your communications — we do not hold the keys

The only data that exists on our infrastructure is your account information (email, GST-ID, subscription status) — not your communications.

Encryption keys are generated fresh for each session on your device and are never transmitted to our servers. When a session ends, the keys are discarded. This is called Perfect Forward Secrecy (PFS).

5. Information Sharing

We do not sell your personal information. We do not share your personal information with advertisers, data brokers, marketing companies, or any third party for commercial purposes.

The only third parties who may receive limited information are:

• Stripe — Payment processor. Receives payment information to process subscriptions. Subject to Stripe's privacy policy and PCI-DSS compliance.
• Supabase — Database provider storing account information (email, GST-ID, subscription status only). Data is stored encrypted at rest.

We may disclose information if required by law enforcement under a valid legal order, but only account information (email, GST-ID) — never communications, which we do not possess.

6. Security

We take security seriously:

• All communications are encrypted using AES-256-GCM (military-grade)
• Key exchange uses ECDH-P-256
• Perfect Forward Secrecy (PFS) on all sessions
• Account data stored encrypted at rest
• All web connections use HTTPS/TLS 1.3
• Row-Level Security (RLS) on all database tables
• Regular security audits

Despite these measures, no security system is perfect. We encourage users to use strong unique passwords and enable additional verification.

7. Data Retention

• Account information — Retained while your account is active. Deleted within 30 days of account deletion request.
• Server logs — Automatically deleted after 30 days.
• Payment records — Retained by Stripe per their policies and legal requirements.
• Communications — Never retained. We do not have them.

To delete your account, email info@globalspacetechnology.com with subject "Account Deletion Request" and your GST-ID.

8. Your Rights

Regardless of where you live, you have the right to:

• Access — Request a copy of the account data we hold about you
• Correction — Request correction of inaccurate data
• Deletion — Request deletion of your account and all associated data
• Portability — Receive your data in a portable format
• Objection — Object to any processing of your data

EU/EEA users have additional rights under GDPR. California users have rights under CCPA. To exercise any right, contact info@globalspacetechnology.com.

9. Children's Privacy

GSTNet is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us immediately and we will delete it.

10. Contact Us

For all privacy-related questions, requests, or concerns:

This privacy policy was last updated June 1, 2026. We will notify registered users of material changes via email. Continued use of the service after changes constitutes acceptance of the updated policy.