Privacy Policy

1. What we collect

• Account email — the address you sign up with, used for login, verification, and sending your receipts/license keys.
• Extracted lead data — businesses, contact details, and profile fingerprints you collect through the extractor. This is your data; we store it so your jobs and lists persist across logins.
• SMTP mailbox credentials — for sending, you can connect your own mailbox. These are stored encrypted with AES-256-GCM and are never sent anywhere except to your own mailbox provider as part of sending.
• Browser-profile data — per-profile browsing context and fingerprints so your browser profiles stay separate and persistent.
• Payment records — for a purchase we store the Bitcoin/USDT transaction hash and the wallet address you paid to, so a purchase can be matched to your license.
• Linked Telegram chat id — only if you opt in to Telegram notifications in Settings; we store the chat id it takes to send you messages.
• AI usage — when you use the agent, prompts are relayed to our AI provider and attributed to your account via an opaqueexternal_user_id (never your name or email), so daily AI cost can be tracked per account.

2. Cold-outreach data is your responsibility

The content of your outreach and the recipient lists you build are your own data and your own business responsibility. SpaceWorker OS stores them to run your campaigns, but it is up to you to ensure your sending complies with the laws that apply to you (e.g. CAN-SPAM, GDPR). This is not an anonymity product — see our Terms. As the sender, you control and are accountable for what and who you contact.

3. Retention and deletion

Today SpaceWorker OS automatically deletes completed extraction jobs — and all the leads they produced — once they are more than 30 days old, ifnone of their leads’ emails have ever been used in a campaign. Running or paused jobs, jobs that failed, and any lead whose details fed a campaign are kept. Anything outside that rule is retained until you ask us to delete it.

To request deletion of data we hold about you, or of a specific job/campaign, email us at noreply@instaweb.topand we’ll action it as soon as possible.

4. Payments never touch card data

We do not accept, store, or process any credit-card data — there is no PCI scope. Purchases are paid with Bitcoin or USDT (TRC-20 or ERC-20) directly to an address we provide, and we only record the transaction hash to match the payment to your license.

5. Telegram linking is opt-in and revocable

Linking a Telegram chat for notifications is entirely optional. You can disconnect it at any time from Settings, which removes the stored chat id.

6. Contact

Questions about this policy, or to exercise deletion, can be sent to noreply@instaweb.top.