Privacy Policy

Last updated: August 6, 2025

Space.co.mu ("we", "our", "us") is committed to protecting your privacy in accordance with the Mauritius Data Protection Act 2017 and international best practices.

1. Legal Basis for Processing

Under Mauritius Data Protection Act 2017, we process personal data based on:

Consent: For anonymous uploads and marketing communications
Contract: To provide services to registered users
Legitimate Interests: For security, fraud prevention, and service improvement
Legal Obligations: To comply with Mauritian laws and regulations

2. Information We Collect

1.1 Anonymous Users

IP address for geographic verification (Mauritius & Seychelles only)
Upload metadata (file size, type, upload time)
Browser tracking cookie for daily upload limit (7GB)
No personal information is required or collected

1.2 Registered Users

Email address and username
Hashed password (never stored in plain text)
Usage statistics (storage used, file count, bandwidth)
IP addresses for security and audit purposes
Payment information (processed securely via Stripe)

2. How We Use Your Information

To provide and maintain our file sharing service
To enforce upload limits and prevent abuse
To verify geographic eligibility for free anonymous uploads
To communicate service updates and important notices
To process payments for premium subscriptions
To improve our service and user experience
To comply with legal obligations

3. Data Storage and Security

We implement industry-standard security measures to protect your data:

All passwords are hashed using bcrypt
SSL/TLS encryption for all data transfers
Files stored on secure servers in Mauritius
Regular security audits and updates
Automatic file deletion after retention period
Malware scanning on all uploaded files

4. Data Retention

4.1 File Retention

Anonymous uploads: 7 days (automatic deletion)
Free registered users: 30 days default
Premium users: Customizable retention periods
Enterprise users: Unlimited retention available

4.2 Account Data

Account information is retained while your account is active. You may request account deletion at any time.

5. Cookies and Tracking

We use minimal cookies necessary for service operation:

Session cookies: For user authentication
Tracking cookies: For anonymous upload limits
Security cookies: For CSRF protection

We do not use third-party analytics or advertising cookies.

6. Third-Party Services

We use the following third-party services:

Stripe: Payment processing (PCI compliant)
Let's Encrypt: SSL certificates
MongoDB: Database services

These services have their own privacy policies and data handling practices.

7. Your Rights

You have the right to:

Access your personal data
Correct inaccurate data
Request data deletion
Export your data
Opt-out of marketing communications
Close your account at any time

To exercise these rights, contact us at privacy@space.mu

8. Children's Privacy

Our service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of any significant changes via email. Continued use of our service after changes constitutes acceptance of the updated policy.

10. Contact Information

Email: privacy@space.mu

Address: Grand Baie, Mauritius

Data Protection Officer: dpo@space.mu

11. Compliance with Mauritius Data Protection Act

We comply with all requirements of the Mauritius Data Protection Act 2017, including:

Registration with the Data Protection Office of Mauritius
Appointment of a Data Protection Officer
Implementation of appropriate technical and organizational measures
Conducting Data Protection Impact Assessments where required
Maintaining records of processing activities
Reporting data breaches within 72 hours to authorities

12. Your Rights Under Mauritian Law

As a data subject under the Mauritius Data Protection Act, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data (subject to legal requirements)
Restriction: Limit processing of your data
Portability: Receive your data in a machine-readable format
Objection: Object to processing based on legitimate interests
Lodge a complaint: File a complaint with the Data Protection Commissioner

To exercise these rights, contact our Data Protection Officer at dpo@space.mu

13. Age Restrictions

Our services are not intended for children under 18 years of age. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.