PRIVACY POLICY

Effective 16 August 2026 · Version 1.0

1. Who we are

This site is operated by Lady Rocket in coordination with the Copernic companies (together, "Lady Rocket", "we", "us"). Copernic Space provides the real-world space asset, mission and marketplace infrastructure referenced across this site. The Lady Rocket Foundation carries the philanthropic mission. All site content is owned by Lady Rocket and the Copernic companies. Privacy questions may be sent through the Private Office.

2. Information we collect

Account information. When you create an account we store your email address, authentication identifiers, display name if provided, and the role assigned to your account. If you sign in with Google, we receive your email address, name and profile image from Google — never your Google password.

Newsletter information. When you subscribe to the Space Intelligence briefing we store your email address, your consent timestamp, your stated preferences and your subscription status.

Private Office inquiries. We store the name, contact details, interest areas and any message you submit, solely so that we can respond.

Digital Legacy Vault submissions. We store the files you upload, their title and category, your rights attestation, and the review status and history of each submission. Vault files are held in private storage and are not publicly accessible.

Voice concierge. If you use the concierge, we store the questions you ask, the pages you visited during that session, and — only if you choose to record one — your voice message and its transcription, so an administrator can respond in context.

Operational records. We keep audit logs of administrative actions and credit-ledger adjustments, and basic technical records such as timestamps needed to operate and secure the service.

3. Why we use it

To operate your account and the Vault; to answer your inquiries; to deliver the briefing you asked for; to review submissions; to maintain security, prevent abuse and meet legal obligations; and to improve the site. We do not sell personal information, and we do not use your information for third-party advertising.

4. Legal bases

Where the GDPR or UK GDPR applies, we rely on: your consent (newsletter, voice recordings), performance of a contract (account, Vault, inquiries), our legitimate interests (security, service integrity, audit records), and legal obligation where applicable. You may withdraw consent at any time; withdrawal does not affect processing already carried out.

5. Service providers

We share information only with providers that operate the service on our behalf, under contract: our cloud database, authentication and storage provider; our email delivery provider for briefings and notifications; our voice and language model providers for the concierge; and Google, if you choose Google sign-in. Providers may process data outside your country; where required we rely on standard contractual clauses or equivalent safeguards.

6. Retention

Account, Vault and inquiry records are kept for as long as your account is active and for a reasonable period afterward to meet legal, audit and dispute-resolution needs. Newsletter records are kept until you unsubscribe, plus a suppression record so we do not email you again. Concierge and voice records are kept while the matter is open and then archived or deleted.

7. Your rights

Subject to your jurisdiction, you may request access to, correction of, a copy of, or deletion of your personal information; object to or restrict certain processing; and unsubscribe from any email at any time. Requests are handled through the Private Office and are answered within 30 days. If you are in the EEA or UK you may also complain to your supervisory authority; if you are a California resident you have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined by the CPRA.

8. Cookies and local storage

We use strictly necessary storage: a session token that keeps you signed in, and a local preference for your light or dark theme. We do not run third-party advertising or cross-site tracking cookies. Embedded video is served through YouTube's no-cookie domain.

9. Security

Data is protected with encrypted transport, row-level access rules that scope records to their owner, private storage buckets for Vault and voice files, and role-based administrative access with audit logging. No system is perfectly secure, and we cannot guarantee absolute security.

10. Children

The site is intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided information, contact us and we will delete it.

11. Changes

We will update this policy as the service evolves and will revise the effective date above. Material changes will be announced on this page. See also our Terms of Service and disclaimers.