Privacy Notice

Last Updated: 20 July 2026

Here at Charter, we value your need for privacy and we are doing our best to ensure that your data is securely and fairly used. In this document you will find all the information you may need on how and why we collect information, as well as the ways we process and store it. In case you have any questions about our procedures, you can get in touch with us by sending an email at privacy@charter.space

1. Definitions

Affiliates: Our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.

Charter (referred to as either ‘we’, ‘our’, ‘us’ or ‘the Company’): Charter Space Technologies, Inc. is a privately-owned Delaware C-Corporation operating in California.

Cookies: Pieces of data from a website that are stored within a web browser that the website can retrieve at a later time.

Customer (referred to as ‘you’ or ‘your’): The individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

Device: Any electronic device used by the Customer to access the Website, e.g. a computer, a mobile phone or a tablet.

Do-Not-Track (referred to as ‘DNT’): A browser setting available on all major web browsers, and some mobile browsers, which tells websites not to track your personal information.

Form: The dedicated webpage on our Website where you can input your Personal Data.

Personal Data: Any information that relates to an identified or identifiable individual (further outlined in Section 3).

Privacy Policy: This present document, outlining the way Charter collects and handles your Personal Data.

Service: Our web-based platform, Ubik, our Website, and our Store.

Service Provider: Any natural or legal person who processes data on behalf of the Company. It can include employees of the Company, not excluding individuals employed on a contract basis, and third-party companies partnering with the Company, in the latter’s effort to provide the Service.

Store: Our dedicated platform for browsing and purchasing our merchandise and similar products, on the subdomain https://shop.charter.space.

Third-Party: Any entity, other than Charter and the Customer, that is not bound by this Privacy Policy (e.g. a business partner).

Usage Data: Data collected automatically, either generated by the use of the Service or from the Service infrastructure itself (for example, the duration of a page visit).

User: The Customer.

Website: Our domain (https://charter.space) and any related pages under this domain.

2. Who we are

Charter is a California-based company, developing a tool to assist space systems' operators with their day-to-day tasks and to increase efficiency. Our platform aims to reduce time and resources wasted in needless areas, while ensuring higher success rates and faster mission completion.

3. Information we collect

Personal Data collected:

  • First Name
  • Last Name
  • Email Address
  • Company Name/Position

Usage Data includes: IP address, browser type/version, pages visited, time/date of visit, unique device identifiers, and diagnostic data.

4. Ways your information is used

  • To deliver and facilitate delivery of Services to the User
  • To respond to User inquiries/offer support to Users
  • To send administrative information
  • To request feedback
  • To protect our Services (fraud monitoring and prevention)
  • To comply with regulatory requests

5. Children's Rights

Our Services are oriented toward working individuals; thus, we do not knowingly solicit data from or directly market to minors. However, if you are the parent or legal guardian of a person below the age of 18 years, or if you are aware that we have collected Personal Data from a minor, please get in touch with Charter immediately, by emailing privacy@charter.space.

6. Handling & Protection of your Information

If you are located in the EU or UK, this section applies to you:

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

  • Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time.
  • Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
  • Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
    • Analyze how our Services are used so we can improve them to engage and retain users
    • Diagnose problems and/or prevent fraudulent activities
    • Understand how Users use our Services so we can improve user experience
  • Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
  • Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

In legal terms, we are generally the “data controller” under European data protection laws of the personal information described in this privacy notice since we determine the means and/or purposes of the data processing we perform. This privacy notice does not apply to the personal information we process as a “data processor” on behalf of our customers. In those situations, the customer that we provide services to and with whom we have entered into a data processing agreement is the “data controller” responsible for your personal information, and we merely process your information on their behalf in accordance with your instructions. If you want to know more about our customers’ privacy practices, we advise you to read their privacy policies and direct any questions you have to them.

If you are located in Canada, this section applies to you:

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

  • If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
  • For investigations and fraud detection and prevention
  • For business transactions provided certain conditions are met
  • If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
  • For identifying injured, ill, or deceased persons and communicating with next of kin
  • If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
  • If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
  • If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
  • If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
  • If the collection is solely for journalistic, artistic, or literary purposes
  • If the information is publicly available and is specified by the regulations

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any Personal Data we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized Third-Parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should always access the Services within a secure environment.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this Privacy Policy will require us keeping your Personal Data for longer than eighteen (18) months past the date of their provision.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymise such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

7. Third-parties & their tools

We may share data with third parties in the following categories:

  • Cloud Computing Services
  • Data Analytics Services
  • Payment Services Providers
  • Sales & Marketing Tools
  • Website Hosting Service Providers

We also may need to share your personal information in the following situations:

  • Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
  • Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy notice. Affiliates include our parent company and any subsidiaries, joint venture partners, or other companies that we control or that are under common control with us.
  • Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.

8. Use of Cookies & Tracking

Tracking services (like Google Analytics) might be used on the Website for the sole purpose of understanding the needs of our Users and to improve their experience. When using our Services, data from tracking services are being anonymised before delivered to us.

Some web browsers and mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy. For detailed information about the Cookies we use, please refer to our Cookie Policy and the Website Cookie Policy.

9. Your rights over your data

In some regions, you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your Personal Data, (ii) to request rectification or erasure; (iii) to restrict the processing of your Personal Data; and (iv) if applicable, to data portability.

In certain circumstances, you may also have the right to object to the processing of your Personal Data. You can make such a request by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in California, the California Consumer Privacy Act (CCPA) applies.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: https://edpb.europa.eu/about-edpb/about-edpb/members_en. If you are located in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.

We are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law. This means you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section “Updates & Contact” below. However, please note that this will not affect the lawfulness of the processing before its withdrawal, nor when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

10. Updates & Contact

For any questions or concerns about our privacy practices, please contact us at privacy@charter.space