Privacy Policy
Space Technologies Pte. Ltd. (referred to as "we", "us" or "Space" in this Privacy Policy) provides the Space app for iPhone, the Space web workspace and server software (together, our "Services"), and operates the website at space.so (our "Website"). We are committed to respecting and protecting your personal data.
1. Introduction
We take our responsibilities under the Singapore Personal Data Protection Act 2012 ("PDPA") seriously. We recognise the importance of the personal data you entrust to us and believe it is our responsibility to properly manage, protect and process it.
This Privacy Policy explains how we collect, use, disclose and process personal data, so that you can make an informed decision before providing any personal data to us. If you have any questions about this policy or how we handle your personal data, please contact our Data Protection Officer ("DPO") using the details in section 13.
Our Website and Services may contain links to third-party websites. Those websites have their own privacy policies, and we are not responsible for their content or practices. Please check their policies before you submit personal data to them.
2. How Space works, and data we process for others
Space is self-hosted software. The Space app connects to a Space server run by you or your organisation (the "operator"), for example on the operator's own Mac or Linux machine. Messages, recordings, transcripts, notes, pages, files, voice profiles and call data ("Customer Data") are stored on that server, not on ours. The operator controls that Customer Data and decides who can access it.
Where the operator is you or your organisation, we do not receive Customer Data, and this Privacy Policy does not cover it. Please refer to your operator's privacy policy, or contact them, about that data.
Where we run a Space server on a customer's behalf, we act only as a data intermediary (processor) for that Customer Data, and process it only on behalf of and under the instructions of that customer. We do not train AI models on Customer Data unless the customer explicitly opts in.
3. Personal data we collect
We may collect and process personal data about you such as:
- personal data you provide to us, such as your name, email address and contact details, and any other information you choose to give us, including through your communications with us;
- records of correspondence if you contact us for any reason;
- error reports that, at your option and with your consent, are sent to us so we can learn about software errors or problems in the Services; and/or
- account and billing details if you buy a paid service from us.
If you provide us with personal data relating to a third party, you represent and warrant that the data is accurate and that you have obtained that person's consent for us to collect, use and disclose it for the relevant purposes, except where consent is not required by law.
4. The Space app and your device
The Space app processes the following on your device and sends it only to the Space server you sign in to:
- Account details: your name, username, profile photo and sign-in token. The sign-in token is stored in the iOS Keychain.
- Messages and files: messages, threads, pages, comments, images and attachments you send.
- Recordings and transcripts: audio you choose to record, and the transcripts, summaries and follow-ups made from it. Original recordings stay on your phone and are uploaded to your server.
- Voice profiles: if you choose to save your voice, short samples and a voice profile used to recognise speakers in meeting notes. You can opt out, and you can use "Forget voice" to delete your samples at any time.
- Calls: audio and video during calls, sent through the call server your operator runs. Calls are not recorded unless someone explicitly starts a recording, and all participants see a recording indicator.
The app asks for your permission before using your microphone (recording and calls), camera (calls and profile photos), photo library (sharing photos and choosing a profile photo) and local network (connecting to a Space server on your network). You can change these permissions at any time in iOS Settings.
Transcription and summaries run on your Space server. Your content is not sent to us, or to a third-party AI service, unless your operator configures one. We do not show ads, and we do not track you across other companies' apps or websites.
5. Cookies
Our Website does not currently use cookies or analytics. If this changes, we will update this policy. You can accept or decline cookies in your browser settings, though some features may not work if cookies are disabled.
6. How we use your personal data
We may use the personal data we hold for the following purposes:
- to contact you and provide information you request from us;
- to verify your identity;
- to provide, manage, operate and administer our Services, including support;
- to process payment for our Services;
- where you have consented, to send you marketing and updates about our products and services by email;
- to contact you where necessary in connection with your use of our Services or Website;
- to store, host and back up personal data, whether within or outside Singapore;
- for record-keeping;
- where you have consented, to conduct research and analysis to improve our Website and Services;
- to respond to legal process, pursue legal rights and remedies, defend litigation, and manage complaints or claims;
- to respond to requests from public and governmental or regulatory authorities, and for audit, compliance, investigation and inspection purposes;
- to comply with any applicable law, regulation, legal process or government request;
- to protect the rights, property or safety of any person, including fraud detection and prevention; and/or
- for any other purpose for which you provide personal data, or that you consent to.
You can withdraw consent to marketing emails at any time by contacting us or using the unsubscribe link in the email.
7. Disclosure of your personal data
We may disclose personal data, within or outside Singapore, for the purposes above to:
- service providers we engage, for example to host and maintain our Website, provide email, process payments, or otherwise help us provide our Services;
- our auditors and legal advisers;
- public and governmental or regulatory authorities and statutory boards;
- courts and other dispute resolution forums; and
- any other party to whom you have consented to the disclosure.
We may also disclose personal data where we are required to comply with a legal obligation or to protect the rights, property or safety of any person. We never sell or rent your personal data.
8. Transfer of your personal data outside Singapore
Personal data we collect may be transferred to, stored and processed outside Singapore for the purposes above. Where we do this, we take steps, including contractual undertakings with our service providers, to ensure it receives a standard of protection comparable to that under the PDPA.
9. Security
We maintain reasonable physical, technical and administrative safeguards to protect personal data from loss, misuse, unauthorised access, disclosure or modification. Space requires sign-in for all access, checks conversation membership before showing messages, notes or files, and stores sign-in tokens in the iOS Keychain. Space does not currently offer end-to-end encryption, so the operator of a Space server can access content stored on it. Operators should use HTTPS when making a server available over the internet.
10. Retention of your personal data
We retain personal data only for as long as needed to fulfil the purposes in this policy, or as necessary for legal or business purposes. After that, it is anonymised (where permitted by law), deleted or destroyed. Customer Data on a Space server is kept until it is deleted by the user or operator.
11. Your rights
You may withdraw your consent for us to collect, use, disclose and/or process your personal data for some or all of the purposes in this policy. You may also request to access and/or correct personal data in our possession by writing to our DPO. We may charge a reasonable fee for handling access requests, and will tell you the fee beforehand. For Customer Data on a server run by your organisation, please contact your operator.
Please keep the personal data you give us accurate, complete and up to date, and let us know promptly of any changes.
Our Services are not intended for children under 13, and we do not knowingly collect their personal data.
12. Changes to this Privacy Policy
We may amend this Privacy Policy from time to time. The updated policy will be posted on our Website with a new date. Please check this page periodically. Your continued use of our Website or Services after an update means you accept the revised policy.
13. Contact us
If you have any questions or complaints about this Privacy Policy, or about how your personal data is collected, used, disclosed or processed, please contact our Data Protection Officer:
Space Technologies Pte. Ltd., Singapore
Email: hello@space.so