Privacy Policy

Last updated: July 17, 2026

This Privacy Policy explains how Manyu Space Systems Pvt. Ltd. (the "Company", "we", "us"), a private limited company incorporated in India, collects and uses personal data when you use Paraxis Console (the "Service"). The Service is currently in an invite-only private beta.

1. Data we collect

  • Account data: your name, email address, and optional avatar image.
  • Organization data: your membership and role within organizations on the Service.
  • Project and mission data: the engineering content you and your organization create in the Service (requirements, analyses, simulation configurations, documents, and similar).
  • Operational logs: IP addresses, timestamps, and records of actions taken in the Service, kept for security and audit purposes.
  • Cookies: session cookies used for authentication (via the better-auth library), a locale cookie (NEXT_LOCALE), and a theme preference. We use no third-party analytics, no advertising or marketing cookies, and no tracking pixels during the beta.

2. How we use data

We use the data above to operate and provide the Service, authenticate you, enforce access controls, secure and audit the Service, respond to support requests, and send transactional email only — invitations, email verification, password resets, and security notices. We do not send marketing email.

3. AI features

The Service includes optional AI features (a copilot assistant and document or report generation). When — and only when — you invoke an AI feature, relevant project content is sent to the configured model provider: OpenAI and/or Anthropic, depending on deployment configuration. We do not use your content to train models, and we do not authorize the providers to train on it; both providers' API terms default to no training on API inputs. Providers may retain API inputs briefly (approximately 30 days) for abuse monitoring. See AI Features and Customer Data Use for details.

4. Where your data is stored

The Service is hosted on Google Cloud Platform (Cloud Run and Cloud SQL Postgres) in the us-central1 region, in the United States. User avatars and organization logos are stored in S3-compatible object storage; no other customer data is stored there. Simulation engines (orbit, power, thermal, ADCS, radiation, and similar) are first-party services operated by the Company on Google Cloud Platform — they are not third-party subprocessors. Real-time collaboration runs through a Company-operated sync server.

5. Subprocessors

The following third parties may process customer data on our behalf:

  • Google Cloud Platform — hosting and storage, United States.
  • OpenAI — AI model provider, only when you invoke an AI feature.
  • Anthropic — AI model provider, only when you invoke an AI feature.
  • A transactional email delivery provider — delivery of invitations, verification, password-reset, and security emails. The provider is being finalized; this page will be updated when it is confirmed.

We do not sell personal data and do not share it with advertisers.

6. Cookies

The Service sets only the following cookies: session cookies for authentication (better-auth), the NEXT_LOCALE cookie storing your language preference, and a theme preference. None of these are used for tracking or advertising.

7. Data retention and deletion

You can delete your account from Settings → Danger Zone. Deleting your account also permanently deletes any organization in which you are the only member, together with all of its project data. Organizations that have other members are not deleted; if you are their only owner, you must transfer ownership or delete them before deleting your account. Organization owners can delete an organization at any time, which cascades deletion of its project data. When you delete data, active copies are removed promptly. Residual copies may persist in encrypted backups until those backups expire within the backup retention window, after which they are gone.

Operational logs are retained for security and audit purposes for as long as reasonably necessary for those purposes.

8. Your rights

You may request access to, correction of, or deletion of your personal data by emailing privacy@paraxis.space. As an Indian operator, we handle personal data in accordance with India's Digital Personal Data Protection Act (DPDP Act). We also serve users in other jurisdictions and will honor applicable data-rights requests from them; however, we do not currently claim compliance certifications and have not appointed representatives in other jurisdictions.

9. Security

We protect data with TLS in transit, encryption at rest via Google Cloud defaults, invite-only access with administrator approval, and organization-scoped access controls, among other measures. See our Security Overview for an honest account of what we do and do not have in place.

10. Children

The Service is professional engineering software and is not directed at children. Do not use the Service if you are not permitted to enter into these kinds of agreements under the law that applies to you.

11. Changes to this policy

We may update this Privacy Policy. If we make material changes, we will notify you (for example by email or an in-app notice) before they take effect.

12. Contact

Privacy questions and data-rights requests: privacy@paraxis.space. General support: support@paraxis.space.