Privacy Policy
Last updated: 4 November 2026
1. Who we are
Spaceworker (Elektra) (the "Service") is operated by the party identified on your invoice or contract. This policy explains what we collect when you use the Service, why, and the choices you have. It does not cover third-party sites or services we link to — their own policies apply.
2. What we collect
- Account data — email address, password hash, profile and preference settings, and your terms-of-service acceptance record.
- Content you provide — lead lists, contact details, files, pages, links, messages, scripts, campaign content and mailbox configuration you choose to upload or create.
- Device and agent data — if you enrol a device, we store its identifier, hostname, status, agent version, and the outcome of actions you run on it (commands, results, and any output you ask to capture).
- Screenshots and screen data — where you enable screen capture or monitoring for a device you own, the resulting images are stored so the feature can show you history and alerts.
- Browser profiles — where you use browser profiles or Browser Clone, we store the profile data and session state needed to resume that browser where you left it.
- Usage and log data — pages visited, actions taken, timestamps, IP address, and error diagnostics, used for security, abuse prevention and working out what is broken.
- Billing data — plan, invoices and payment records. Card and crypto payment details are handled by the payment processor; we do not store your full card number.
3. What we do NOT do
- We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
- We do not read the content of your campaigns, files or messages except where needed to operate a feature you asked for, to investigate abuse, or as required by law.
- We do not enrol your devices or install an agent on anything you have not added yourself.
4. Why we process it
- to provide the Service and the features you enable — the legal basis is performance of our contract with you;
- to secure the Service, prevent abuse and investigate incidents — legitimate interests;
- to send transactional messages (verification, security alerts, receipts);
- to comply with legal obligations, including tax and lawful requests;
- to send marketing only where you have opted in, and you can opt out at any time.
5. Recipients and sub-processors
We share data only with the service providers needed to run the Service — hosting and infrastructure, the database, transactional email delivery, error monitoring, and the payment processor. They process data on our instructions and may not use it for their own purposes. We may also disclose data where required by law, or to protect the rights, safety and property of us or others.
6. International transfers
The Service is hosted in the European Union. If data is processed outside your region, we rely on the transfer mechanism required by the law that applies to you.
7. Retention
We keep account data for as long as your account is open, and then for as long as we need it to meet legal, accounting and dispute-resolution obligations. Device data, screenshots, files and campaign content are kept until you delete them or close your account, unless a shorter period applies. Backup copies age out on their own schedule.
8. Security
Passwords are stored hashed, sessions are signed and expire, database access is restricted to the application role, and the panel and internal endpoints reject requests without valid credentials. No system is perfectly secure — if we learn of a breach affecting your personal data we will notify you and the relevant authority as the law requires.
9. Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can export or delete much of your data yourself from Settings; for anything else, ask through the support page using the email on your account. You may also complain to your local supervisory authority.
10. Cookies
We use signed, http-only cookies to keep you signed in and to remember preferences. We do not use third-party advertising cookies. Blocking cookies will stop you from signing in.
11. Changes
We may update this policy. For material changes we will give notice through the Service or by email before they take effect. The date at the top shows when this version took effect.