Space Tour Web Application

Effective Date: 2025-08-21

Last Updated: 2026-02-10

1. General Principles

Web Space Technology FZE respects user privacy and aims to comply with applicable data protection laws, including, where applicable:

General Data Protection Regulation (GDPR, European Union)
Personal Data Protection Law (PDPL, United Arab Emirates)
Personal Information Protection and Electronic Documents Act (PIPEDA, Canada)
California Consumer Privacy Act and California Privacy Rights Act (CCPA/CPRA, USA)

This Privacy Policy explains how personal data is collected, used, stored, and protected when using the Space Tour web application available at https://app.space-tour.com.

2. Data Controller

The data controller responsible for the processing of personal data is:

Web Space Technology FZE

Business Centre, Sharjah Publishing City Free Zone,

Sharjah, United Arab Emirates

Registration Number: 4423054

Jurisdiction: United Arab Emirates

Web Space Technology FZE acts as the Data Controller in accordance with applicable data protection laws.

For privacy-related inquiries, please contact:

support@space-tour.com

3. Personal Data We Collect

Depending on how the user interacts with the web application, we may collect the following categories of personal data:

Identification data: name, email address, phone number (if provided)
Account data: username, encrypted password, authentication identifiers (including Telegram ID, if used)
Technical data: IP address, device type, browser type, operating system, cookies
Usage data: interactions with the web application, feature usage, and system logs
User-generated content: images, project names, metadata, and other materials uploaded by the user

Personal data is collected solely for purposes related to the provision and operation of the service.

4. Purposes of Data Processing

Personal data is processed for the following purposes:

Account registration and authentication
Provision, maintenance, and improvement of the web application
Subscription management and billing
Technical support and user communication
Security, fraud prevention, and abuse detection
Analytics and performance monitoring

5. Legal Basis for Processing

Personal data is processed on one or more of the following legal grounds:

Performance of a contract with the user
Legitimate interests of the Administration (service improvement, security, analytics)
User consent, where required by applicable law (for example, cookies or marketing communications)

6. Data Storage and Location

Personal data is stored on secure servers located in the European Union, including data centers in Amsterdam, The Netherlands, as well as on infrastructure provided by third-party service providers.

Appropriate technical and organizational measures are implemented to protect personal data against unauthorized access, loss, or disclosure.

7. Data Retention

Personal data is retained in accordance with the following principles:

Account data is stored for as long as the user maintains an active account
Technical logs are retained for a limited period necessary for security, diagnostics, and compliance purposes
Backups are stored for a limited time to ensure service reliability and recovery
Upon account deletion or a valid data erasure request, personal data is deleted or anonymized unless retention is required by law

Requests related to data deletion or access are processed within a reasonable timeframe, typically not exceeding 30 days.

8. International Data Transfers

Where personal data is transferred outside the European Economic Area, such transfers are carried out in accordance with applicable data protection laws and may rely on:

Adequacy decisions
Standard Contractual Clauses (SCCs)
Other lawful transfer mechanisms permitted by law

9. User Rights

Depending on the user’s jurisdiction, users may have the following rights:

Right to access, rectification, and erasure
Right to restriction of processing
Right to data portability
Right to withdraw consent
Right to lodge a complaint with a supervisory authority

United Arab Emirates (PDPL)

Rights similar to GDPR
Restrictions on international data transfers without adequate protection or explicit consent

Canada (PIPEDA)

Right to access and correct personal data
Right to be informed in case of data breaches

United States (CCPA/CPRA)

Right to know what personal data is collected
Right to request deletion
Right to opt out of the sale or transfer of personal data

Requests related to these rights may be submitted to support@space-tour.com.

10. Cookies and Analytics

The web application uses cookies and similar technologies, which may be categorized as:

Necessary cookies, required for core functionality and security
Analytics cookies, used to understand usage patterns and improve the service
Marketing cookies, where applicable

Where required by applicable law, analytics and marketing cookies are used only with user consent, which may be managed through a cookie banner or browser settings.

Disabling cookies may affect the availability of certain features.

11. Data Security

Reasonable technical and organizational security measures, including encryption, access controls, and monitoring, are applied to protect personal data.

However, no method of data transmission or storage can be guaranteed to be completely secure.

12. Third-Party Services

The web application relies on third-party services for the following categories:

Hosting and cloud infrastructure
Content delivery and storage
Analytics and performance monitoring
Payment processing

Such third-party providers act as data processors or sub-processors under applicable data protection laws.

The Administration does not control the privacy practices of third-party services and encourages users to review their respective privacy policies.

13. Policy Updates

This Privacy Policy may be updated from time to time.

The most current version will always be available on the website. Material changes may be communicated to users through the web application or by email.

14. Contact Information

For questions regarding this Privacy Policy or the processing of personal data, please contact: