Privacy Policy

This Privacy Policy explains how SpaceArpa ("SpaceArpa", "we", "us", or "our"), operated under the Spacearpa brand, collects, uses, discloses, and safeguards your information when you use our website at spacearpa.com, the application at app.spacearpa.com, and any related services (collectively, the "Service").

By using the Service you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Information we collect

Account information

When you create an account, we collect your name, email address, hashed password, and optional details you choose to provide such as company name, phone number, WhatsApp number, country, default currency, and area unit preferences.

Property and inventory data

We store the listings, images, descriptions, internal notes, and other property data you upload so that we can provide matching and shortlist functionality. Internal/private notes are never shown on public buyer-facing pages.

Usage and activity data

We log AI matches, shortlist views, link opens, and clicks on buyer-facing call-to-action buttons (WhatsApp, call, email) so that you can see buyer activity on your shortlist links.

Billing information

Payments are processed by Stripe. We do not store full payment card details on our servers. We retain customer and subscription identifiers and invoice metadata returned by Stripe.

Technical data

We collect IP address, browser type, device information, timestamps, and basic analytics required to operate, secure, and improve the Service.

2. How we use your information

• To provide, maintain, and improve the Service.
• To authenticate users and secure accounts (including OTP email verification).
• To generate AI matches between buyer requirements and your inventory.
• To create buyer-facing shortlist pages and track engagement for you.
• To process payments, manage subscriptions, and apply plan limits.
• To communicate service announcements, security alerts, and support replies.
• To detect, prevent, and address fraud, abuse, and technical issues.
• To comply with applicable laws and respond to lawful requests.

3. AI processing

Buyer requirements and property metadata may be sent to third-party AI providers (such as OpenRouter and embedding model providers) solely to compute matches and rankings. We do not sell your data and we do not use buyer-facing public pages to train external models.

4. Sharing of information

We share information only as needed to run the Service:

• Service providers — hosting (e.g. Vercel), database, email delivery, image storage and CDN (Cloudinary, R2), payments (Stripe), AI inference providers.
• Buyer-facing shortlist pages — public property details that you explicitly add to a shortlist link. Internal notes are not shared.
• Legal — when required by law, regulation, or valid legal process.
• Business transfers — in connection with a merger, acquisition, or sale of assets, with continued protection of your information.

We do not sell your personal information.

5. Data retention

We retain your account and inventory data for as long as your account is active. If you downgrade your plan, your data is not deleted automatically; excess active listings can be archived and restored later. You may request deletion of your account and associated data at any time.

6. Security

We use industry-standard safeguards including password hashing (bcrypt), HTTPS in transit, access controls, and audit logging. No method of transmission or storage is 100% secure, but we work to protect your information from unauthorized access, alteration, or disclosure.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, restrict, or delete your personal information, and to object to certain processing. To exercise these rights, contact us at the email below. We will respond within a reasonable time and as required by law.

8. Cookies

We use strictly necessary cookies for authentication and session management. We may use limited analytics cookies to understand product usage. You can control cookies via your browser settings.

9. International users

The Service is operated globally. By using the Service you consent to the transfer and processing of your information in countries where our service providers operate.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated through the Service or via email. Continued use of the Service after changes become effective constitutes acceptance of the updated Policy.

12. Contact

For privacy questions or requests, contact us at hello@spacearpa.com.