Privacy Policy

Last updated: October 9, 2026

Viventine Space Systems LLC, a Florida limited liability company ("Viventine," "we," "us," or "our"), operates viventine.com, the Viventine Console at console.viventine.com, and the Orbit Sentinel platform. This policy describes how we collect, use, and protect your information when you use our website and services.

Information We Collect

Information you provide

Email address — when you join our waitlist, request beta access, subscribe to The Downlink, or sign in to the Viventine Console.
Name and message content — when you submit our contact form.

Account and authentication data (Viventine Console)

The Viventine Console uses passwordless, email-based "magic link" sign-in. When you request access or sign in, we process:

Your email address — used as your account identifier and to deliver one-time sign-in links.
Sign-in tokens and sessions — we store a hash of each one-time sign-in token (never the token itself) and a session identifier set in a cookie after you sign in.
Security and audit metadata — for each sign-in request and session we record the IP address and browser user-agent, along with timestamps, to detect abuse and protect your account. We keep a security audit log of authentication events.
API key metadata — if you mint Orbit Sentinel API keys, we store a hash of the key (we cannot recover the key itself) together with its name, usage tier, and creation, revocation, and last-used timestamps.
Billing identifiers — if and when we introduce paid plans, we may store a payment-processor customer identifier associated with your account.

Information collected automatically

Analytics and session recording (viventine.com) — we use Microsoft Clarity to understand how visitors interact with our marketing website. Clarity may record your browsing sessions, including mouse movements, clicks, scrolling behavior, and page interactions, to generate heatmaps and session replays. This data may also include pages visited, session duration, device type, browser, and approximate geographic location. Clarity does not capture text entered into password fields but may capture other on-screen interactions. Clarity sets no cookies unless you accept analytics cookies in our cookie banner; without that consent it runs in no-consent mode and does not link your page views across visits. We do not run Clarity or any third-party analytics inside the Viventine Console.
Google Analytics (viventine.com) — we use Google Analytics 4, loaded through Google Tag Manager, to measure traffic to our marketing website: pages visited, referring source, device and browser type, approximate geographic location, and whether a form was submitted. Google Analytics cookies are set only if you accept them in our cookie banner. If you decline or make no choice, no analytics cookies are set and Google receives only limited, cookieless measurement signals that are not tied to a persistent identifier. We do not use Google advertising features.
Network logs — Cloudflare, which sits in front of our website, Console, and API, may collect IP addresses, request timestamps, and other standard HTTP metadata for security and performance purposes.
Orbit Sentinel API and MCP request records — for each request to the Orbit Sentinel API or MCP server we record the API key used (if any), the IP address and user agent, the path and query parameters (including search terms), the MCP tool called, and the response status, size, and timing. We use these records to enforce rate limits, detect and prevent abuse, report usage on your key, and keep the service reliable.
Service logs — our servers write operational logs that can include IP addresses, user agents, request paths, and other request metadata. We use them to diagnose failures and investigate abuse.

How We Use Your Information

To process your waitlist signup and send you a confirmation email.
To respond to messages you send through our contact form.
To authenticate you to the Viventine Console, deliver sign-in links, maintain your session, and manage your Orbit Sentinel API keys.
To send you transactional email about your account, including sign-in links and key and security notices.
To send you product updates, beta invitations, and occasional newsletters related to Orbit Sentinel and Viventine (you can unsubscribe at any time).
To analyze website usage and improve our services, content, and user experience.
To maintain the security and performance of our website and services, detect and prevent abuse, and enforce usage limits.

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your personal data under the following legal bases:

Consent — for marketing communications and for Google Analytics cookies.
Legitimate interest — for cookieless analytics and session recording used to improve our website.
Legitimate interest — for website security, fraud prevention, and improving our services.
Contract performance — for processing your beta access request and providing our services.

You may withdraw consent for marketing communications at any time by unsubscribing from emails. You can withdraw consent for analytics cookies at any time using the "cookie settings" link in the footer of any page, and you can further opt out of analytics by using browser privacy settings or extensions.

International Data Transfers

Your data may be transferred to and processed in the United States, where our servers and third-party service providers are located. Our providers — Cloudflare, Google, Microsoft, Oracle, OVHcloud, and Resend — maintain appropriate safeguards for international data transfers, including Standard Contractual Clauses (SCCs) where applicable. By using our services, you acknowledge that your data may be processed outside your country of residence.

Third-Party Services

We use the following third-party services to operate our website and services:

Resend — transactional and marketing email delivery, including Console sign-in links, and contact management. Resend Privacy Policy
Microsoft Clarity — analytics and session recording on the marketing website only. Microsoft Privacy Statement
Google Analytics and Google Tag Manager — traffic measurement on the marketing website only. Google Privacy Policy
Cloudflare — website and Console hosting, CDN, security, and database storage (Cloudflare D1, where Console account, session, and API key data is stored). Cloudflare Privacy Policy
Oracle Cloud Infrastructure (OCI) — hosting of the Orbit Sentinel API and MCP servers, alert notifications, and storage of regulatory documents and backups (United States, Ashburn, Virginia). Oracle Privacy Policy
OVHcloud — hosting of the Orbit Sentinel database and processing servers, and storage of service logs and backups (United States, Vint Hill, Virginia). OVHcloud Privacy Policy

We do not sell, rent, or trade your personal information to any third party.

Data Retention

We retain your email address and contact information for as long as your account is active or as needed to provide you services. One-time sign-in tokens expire within minutes and are deleted or marked consumed once used; Console sessions expire after 30 days of inactivity. We retain authentication and security audit logs for a limited period for fraud prevention and account security. You may request deletion of your data at any time by emailing hello@viventine.com.

API keys. We keep the hash and metadata of a key (name, creation and last-use times, usage counts) while it is active, and keep the record of a revoked or expired key, marked as such, for audit purposes. Filing alerts. An alert subscription stores the delivery address and the filters you chose; it is deactivated the moment you use an unsubscribe link or delete it through the API, and removed when the account or key that created it is deleted. We do not use alert addresses for any other purpose. Service logs. We keep service logs for up to 90 days, after which they are deleted automatically. API and MCP request records. We keep request records for 12 months, after which they are deleted.

Cookies

Our marketing website (viventine.com) sets analytics cookies only with your consent. If you accept them in our cookie banner, Google Analytics sets first-party cookies (such as _ga) and Microsoft Clarity sets first-party cookies (such as _clck and _clsk) to distinguish visitors and sessions; if you decline, they are not set. Your choice is remembered in your browser's local storage, and you can change it at any time using the "cookie settings" link in the footer. Without consent, Microsoft Clarity runs without cookies, and Cloudflare may set strictly-necessary cookies for security purposes.

The Viventine Console (console.viventine.com) sets a single strictly-necessary, first-party session cookie when you sign in. This cookie is HTTP-only, secure, and used solely to keep you signed in — it is not used for advertising or cross-site tracking. Because it is essential to the service you have requested, it is not subject to consent, but you can clear it at any time through your browser settings or by signing out.

Your Rights

You have the right to:

Request access to the personal data we hold about you.
Request correction or deletion of your data.
Unsubscribe from marketing emails at any time using the link in each email.
Decline or withdraw consent for analytics cookies using the "cookie settings" link in the footer, and opt out of analytics tracking by using browser privacy settings or extensions.

To exercise any of these rights, contact us at hello@viventine.com.

Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children.

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have the right to: request disclosure of the categories and specific pieces of personal information we have collected about you; request deletion of your personal information; and opt out of the sale of your personal information. We do not sell personal information. To exercise your rights, contact us at hello@viventine.com.

Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated revision date. Your continued use of the website after changes constitutes acceptance of the revised policy.