Privacy Policy

Last updated: October 5, 2026

This Privacy Policy explains how Manyu Space Systems Pvt. Ltd. (the "Company", "we", "us"), a private limited company incorporated in India, collects and uses personal data when you use Paraxis Console (the "Service"). The Service is currently in an invite-only private beta.

1. Data we collect

  • Account data: your name, email address, and optional avatar image.
  • Organization data: your membership and role within organizations on the Service.
  • Project and mission data: the engineering content you and your organization create in the Service (requirements, analyses, simulation configurations, documents, and similar).
  • Operational logs: IP addresses, timestamps, and records of actions taken in the Service, kept for security and audit purposes.
  • Cookies: session cookies used for authentication (via the better-auth library), a locale cookie (NEXT_LOCALE), a theme preference, and your cookie choice. We use no advertising or marketing cookies and no tracking pixels.
  • Product analytics (only if you opt in): if you accept analytics in the cookie banner, we record which pages you open and when, with your browser type, device type and approximate location (city and country, derived from your IP address by PostHog; the IP address itself is not stored). Events carry your internal user and organization identifiers only — never your name, email, organization name, mission content or page titles — and organization names and record identifiers are removed from page addresses before they leave your browser. We do not record your screen or what you type.

2. How we use data

We use the data above to operate and provide the Service, authenticate you, enforce access controls, secure and audit the Service, respond to support requests, and send transactional email only — invitations, email verification, password resets, and security notices. We do not send marketing email.

3. AI features

The Service includes optional AI features (a copilot assistant and document or report generation). When — and only when — you invoke an AI feature, relevant project content is sent to the configured model provider: OpenAI and/or Anthropic, depending on deployment configuration. We do not use your content to train models, and we do not authorize the providers to train on it; both providers' API terms default to no training on API inputs. Providers may retain API inputs briefly (approximately 30 days) for abuse monitoring. See AI Features and Customer Data Use for details.

4. Where your data is stored

The console and its database (Cloud Run and Cloud SQL Postgres) are hosted on Google Cloud Platform in the asia-south1 region (Mumbai, India). Script and flight runs, and some analyses, execute on Google Cloud Platform in the us-central1 region (United States); a run's inputs and results are stored there. A standby copy of the console in us-central1 is kept for rollback and does not serve the Service. User avatars and organization logos are stored in S3-compatible object storage; no other customer data is stored there. Simulation engines (orbit, power, thermal, ADCS, radiation, and similar) are first-party services operated by the Company on Google Cloud Platform — they are not third-party subprocessors. Real-time collaboration runs through a Company-operated sync server.

5. Subprocessors

The following third parties may process customer data on our behalf:

  • Google Cloud Platform — hosting and storage in India (asia-south1); run and analysis compute, and run inputs and results, in the United States (us-central1).
  • PostHog — product analytics, European Union (PostHog EU Cloud), only if you accept analytics cookies.
  • OpenAI — AI model provider, only when you invoke an AI feature.
  • Anthropic — AI model provider, only when you invoke an AI feature.
  • Resend — delivery of invitations, verification, password-reset, and security emails.

We do not sell personal data and do not share it with advertisers.

6. Cookies

The Service always sets these cookies: session cookies for authentication (better-auth), the NEXT_LOCALE cookie storing your language preference, a theme preference, and px_consent, which stores your cookie choice. If — and only if — you accept analytics, PostHog stores an anonymous identifier in a first-party cookie and browser storage so that page views from the same browser can be counted together. No cookie is used for advertising. You can withdraw analytics consent at any time under Settings → Privacy and data. See the Cookie Notice.

7. Data retention and deletion

You can delete your account from Settings → Danger Zone. Deleting your account also permanently deletes any organization in which you are the only member, together with all of its project data. Organizations that have other members are not deleted; if you are their only owner, you must transfer ownership or delete them before deleting your account. Organization owners can delete an organization at any time, which cascades deletion of its project data. When you delete data, active copies are removed promptly. Residual copies may persist in encrypted backups until those backups expire within the backup retention window, after which they are gone.

Operational logs are retained for security and audit purposes for as long as reasonably necessary for those purposes.

8. Your rights

You may request access to, correction of, or deletion of your personal data by emailing privacy@paraxis.space. As an Indian operator, we handle personal data in accordance with India's Digital Personal Data Protection Act (DPDP Act). We also serve users in other jurisdictions and will honor applicable data-rights requests from them; however, we do not currently claim compliance certifications and have not appointed representatives in other jurisdictions.

9. Security

We protect data with TLS in transit, encryption at rest via Google Cloud defaults, invite-only access with administrator approval, and organization-scoped access controls, among other measures. See our Security Overview for an honest account of what we do and do not have in place.

10. Children

The Service is professional engineering software and is not directed at children. Do not use the Service if you are not permitted to enter into these kinds of agreements under the law that applies to you.

11. Changes to this policy

We may update this Privacy Policy. If we make material changes, we will notify you (for example by email or an in-app notice) before they take effect.

12. Contact

Privacy questions and data-rights requests: privacy@paraxis.space. General support: admin@manyuspace.com.