Privacy Policy

Viventine Space Systems LLC, a Florida limited liability company ("Viventine," "we," "us," or "our"), operates viventine.com, the Viventine Console at console.viventine.com, and the Orbit Sentinel platform. This policy describes how we collect, use, and protect your information when you use our website and services.

Information We Collect

Information you provide

• Email address — when you join our waitlist, request beta access, subscribe to The Downlink, or sign in to the Viventine Console.
• Name and message content — when you submit our contact form.

Account and authentication data (Viventine Console)

The Viventine Console uses passwordless, email-based "magic link" sign-in. When you request access or sign in, we process:

• Your email address — used as your account identifier and to deliver one-time sign-in links.
• Sign-in tokens and sessions — we store a hash of each one-time sign-in token (never the token itself) and a session identifier set in a cookie after you sign in.
• Security and audit metadata — for each sign-in request and session we record the IP address and browser user-agent, along with timestamps, to detect abuse and protect your account. We keep a security audit log of authentication events.
• API key metadata — if you mint Orbit Sentinel API keys, we store a hash of the key (we cannot recover the key itself) together with its name, usage tier, and creation, revocation, and last-used timestamps.
• Billing identifiers — if and when we introduce paid plans, we may store a payment-processor customer identifier associated with your account.

Information collected automatically

• Analytics and session recording (viventine.com) — we use Microsoft Clarity to understand how visitors interact with our marketing website. Clarity may record your browsing sessions, including mouse movements, clicks, scrolling behavior, and page interactions, to generate heatmaps and session replays. This data may also include pages visited, session duration, device type, browser, and approximate geographic location. Clarity does not capture text entered into password fields but may capture other on-screen interactions. Clarity is loaded in cookieless mode, meaning no tracking cookies are set on your device. We do not run Clarity or any third-party analytics inside the Viventine Console.
• Server logs — our hosting provider (Cloudflare) may collect IP addresses, request timestamps, and other standard HTTP metadata for security and performance purposes.

How We Use Your Information

• To process your waitlist signup and send you a confirmation email.
• To respond to messages you send through our contact form.
• To authenticate you to the Viventine Console, deliver sign-in links, maintain your session, and manage your Orbit Sentinel API keys.
• To send you transactional email about your account, including sign-in links and key and security notices.
• To send you product updates, beta invitations, and occasional newsletters related to Orbit Sentinel and Viventine (you can unsubscribe at any time).
• To analyze website usage and improve our services, content, and user experience.
• To maintain the security and performance of our website and services, detect and prevent abuse, and enforce usage limits.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

• Consent — for marketing communications.
• Legitimate interest — for cookieless analytics and session recording used to improve our website.
• Legitimate interest — for website security, fraud prevention, and improving our services.
• Contract performance — for processing your beta access request and providing our services.

You may withdraw consent for marketing communications at any time by unsubscribing from emails. You can opt out of analytics by using browser privacy settings or extensions.

International Data Transfers

Your data may be transferred to and processed in the United States, where our servers and third-party service providers are located. Our providers — Cloudflare, Microsoft, and Resend — maintain appropriate safeguards for international data transfers, including Standard Contractual Clauses (SCCs) where applicable. By using our services, you acknowledge that your data may be processed outside your country of residence.

Third-Party Services

We use the following third-party services to operate our website and services:

• Resend — transactional and marketing email delivery, including Console sign-in links, and contact management. Resend Privacy Policy
• Microsoft Clarity — analytics and session recording on the marketing website only. Microsoft Privacy Statement
• Cloudflare — website and Console hosting, CDN, security, and database storage (Cloudflare D1, where Console account, session, and API key data is stored). Cloudflare Privacy Policy

We do not sell, rent, or trade your personal information to any third party.

Data Retention

We retain your email address and contact information for as long as your account is active or as needed to provide you services. One-time sign-in tokens expire within minutes and are deleted or marked consumed once used; Console sessions expire after 30 days of inactivity. We retain authentication and security audit logs for a limited period for fraud prevention and account security. You may request deletion of your data at any time by emailing [email protected].

Cookies

Our marketing website (viventine.com) does not set first-party cookies. Microsoft Clarity and Cloudflare may set cookies on the marketing site for analytics and security purposes.

The Viventine Console (console.viventine.com) sets a single strictly-necessary, first-party session cookie when you sign in. This cookie is HTTP-only, secure, and used solely to keep you signed in — it is not used for advertising or cross-site tracking. Because it is essential to the service you have requested, it is not subject to consent, but you can clear it at any time through your browser settings or by signing out.

Your Rights

You have the right to:

• Request access to the personal data we hold about you.
• Request correction or deletion of your data.
• Unsubscribe from marketing emails at any time using the link in each email.
• Opt out of analytics tracking by using browser privacy settings or extensions.

To exercise any of these rights, contact us at [email protected].

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to: request disclosure of the categories and specific pieces of personal information we have collected about you; request deletion of your personal information; and opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us at [email protected].

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the website after changes constitutes acceptance of the revised policy.