Privacy Policy

1. What Information We Collect

We collect only what is needed to run the service:

• Email address — Used to create your account, send your GST-ID, and send account and access notices. Never sold.
• GST-ID and account ID — Your GST-ID is an automatically assigned account identifier. It is not a password and not proof of ownership on its own.
• Password — Stored only as a secure hash by our authentication provider. We cannot see your password.
• Access and subscription information — Whether your account has introductory, paid or free access, and until when. If you buy a paid plan, we receive from Stripe the plan, its status and period, and a subscription reference. We never receive your full card number.
• Encrypted messages and files — Messages and files are stored on our servers only in encrypted form so they can be delivered to the recipient and synced to your devices. We cannot read them. We also store the delivery information needed to route them: sender and recipient GST-IDs, group ID, time sent, and delivered/read status.
• Contacts you add in GSTNet — The GST-IDs and nicknames you save in the app, so your contact list is available when you sign in. We do not access your phone's address book.
• Call information — To connect calls we process call set-up data (who is calling whom, and when) and keep a call history for your account. Call audio and video are encrypted and are not recorded or stored.
• Device information — Public encryption keys for each of your devices, and push-notification tokens so we can notify your device of new messages and incoming calls.
• Device check for the introductory period — When you register, the app or website sends a one-way hash of a random identifier created on your device. We use it to allow one 90-day introductory period per device. See section 7 for how long it is kept.
• IP address — Recorded when you register, for rate limiting and abuse prevention. Call relays also see IP addresses while a call is connected.

2. What We Cannot Read and Do Not Collect

We do not require or collect:

• Your real name or phone number
• Your phone's address book
• Your location
• Biometric data
• Advertising identifiers, and we do not track you across other apps or websites

Message translation:

• iPhone and iPad app: translation uses Apple's on-device Translation feature. It runs on your device after a message is decrypted. The text is not sent to Global Space Technology. Your device may download Apple language files the first time you use a language.
• Windows app: the Windows app does not translate messages. Message text never leaves your computer.

3. How We Use Information

We use this information only to:

• Create your account and send you your GST-ID
• Deliver your encrypted messages and files and connect your calls
• Manage your access (introductory, paid or free) and process renewals
• Send account notices, such as when your access is about to end
• Prevent fraud and abuse, including more than one introductory period per device
• Answer support requests you send us

We do not use your information for advertising, profiling or sale.

4. Does GSTNet Use Servers?

Using servers does not mean we can read your communications:

• Messages, files and calls are encrypted on your device before they are sent
• Global Space Technology does not hold the keys needed to decrypt them
• Our servers store messages and files only in encrypted form, together with the delivery information described in section 1

Message keys change as you exchange messages (forward secrecy), so if one key were ever exposed, other messages stay protected.

5. Service Providers and Sharing

We do not sell or rent your personal information, and we do not share it with advertisers or data brokers. We use these service providers to run GSTNet:

• Supabase — Database, sign-in, file storage and server functions. Holds the account data and encrypted messages and files described in section 1.
• Stripe — Payment processing for paid plans bought on our website. Stripe receives your payment details and email under its own privacy policy.
• Cloudflare — Relays encrypted call audio and video when devices cannot connect directly. It sees IP addresses but cannot decrypt the calls.
• Apple — Delivers push notifications for new messages and incoming calls, and provides on-device translation.
• Hostinger — Hosts our website.

We may disclose account information (such as email, GST-ID, access status and records described in section 1) when required by a valid legal order. We cannot provide the content of messages, files or calls because we cannot decrypt it.

6. Security

• Messages and files are encrypted with AES-256-GCM
• Key agreement and signatures use X25519 and Ed25519 elliptic-curve cryptography, in the iPhone, iPad and Windows apps
• Call audio and video are protected by WebRTC encryption (DTLS-SRTP)
• Data on our servers is encrypted at rest, and all connections use HTTPS/TLS
• Database access rules (Row-Level Security) limit each account to its own data

No system is perfectly secure. Use a strong, unique password and keep your registered email account secure.

6a. Account Recovery Limitations

Because Global Space Technology does not have the keys needed to decrypt your communications, we cannot recover lost message content. We also will not bypass account security just because someone claims to own a GST-ID. This protects you from account takeover, but it means you are responsible for keeping access to your registered email and password.

7. Account Deletion and Data Retention

• When you delete your account, we delete your sign-in account, your account record, your access and subscription records, and your device links.
• Encrypted messages and files you exchanged may remain on our servers in encrypted form, which we cannot read, and remain on the other person's devices. You can ask us to delete the encrypted copies on our servers by emailing us.
• Security and abuse-prevention records (such as registration attempts and IP addresses) are kept after deletion, no longer linked to your account, for as long as needed for security.
• Device check: the one-way device hash (and the internal ID of the first account created on that device) is kept after account deletion. This is on purpose: it stops the same device from receiving a new 90-day introductory period by deleting and re-creating accounts. It does not contain your email or name.
• Payment records are kept by Stripe, and by us where required for tax and accounting law.

8. Your Rights

Wherever you live, you can ask us to:

• Access — Give you a copy of the account data we hold about you
• Correct — Fix inaccurate data
• Delete — Delete your account and data (see section 7)
• Portability — Give you your data in a portable format
• Object — Object to how we process your data

People in the EU/EEA and UK have rights under the GDPR, and California residents have rights under the CCPA/CPRA. You may also complain to your local data protection authority. To use any right, contact us as shown in section 10.

9. Children's Privacy

GSTNet is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

10. Contact Us

For privacy questions or requests:

We will notify registered users of material changes to this policy by email before they take effect.