1. Who we are
Tycho is operated by Prometheus Space Technologies, referred to in this document as PromSpace, we, us, or our. The public company details currently published by PromSpace are: SIREN 102795259, registered office at 47 Rue Vivienne, 75002 Paris, France, contact email contact@promspace.eu. This policy applies to the public Tycho web experience, including the Tycho application, the Tycho Help Center, and related support or billing flows.
2. What data we collect
Account and profile data
- Email address, display name, and authentication provider when a user signs in.
- Plan or tier status, usage counters, and product entitlements needed to operate Tycho access.
Conversation and support data
- User prompts, Tycho responses, conversation history, and related context that the service uses to continue a conversation or support the user experience.
- Bug reports, support messages, and limited technical context submitted through Tycho support flows.
Billing and commercial data
- Stripe customer identifiers, subscription identifiers, checkout metadata, purchased usage balances, and plan state.
- Tycho does not store full payment card numbers; payment details are handled by Stripe.
Technical and device data
- Browser and device context needed to operate the product safely, including limited logs and diagnostics.
- Approximate region or location context when it is needed to answer a query, route a map, or tailor billing or language behavior.
- Notification permission state, if the user chooses to enable browser notifications.
Browser storage and preferences
- Preferences such as theme, language, notification choices, and limited session continuity markers.
- Session and local storage entries used for launch access, billing success banners, onboarding state, caching, or continuity of the Tycho interface.
3. How we use personal data
- To authenticate users and maintain accounts.
- To answer environmental and Earth Observation queries and provide maps, overlays, and analysis.
- To save conversation history and user preferences when that experience is enabled for a signed-in user.
- To process purchases, subscriptions, usage packs, refunds, and service access.
- To provide support, resolve bugs, improve reliability, and investigate incidents.
- To defend the service against abuse, misuse, fraud, or security risks.
- To meet legal, accounting, or regulatory obligations where applicable.
4. Legal bases we rely on
- Contract: to provide Tycho, maintain accounts, answer queries, and operate paid features.
- Legitimate interests: to secure, improve, troubleshoot, and administer the product.
- Consent: for optional browser notifications and any non-essential cookies or similar technologies, if introduced.
- Legal obligation: where we must retain or disclose information for tax, accounting, security, or regulatory reasons.
5. Infrastructure, AI, and data providers
Tycho uses third-party infrastructure and data sources to operate the product and answer user questions. Depending on the request, Tycho may send limited personal or query-related information, such as a place name, coordinates, area of interest, or time window, to these providers.
- Google Cloud / Firebase: hosting, authentication, Firestore storage, and related infrastructure operations.
- Google Gemini: language model processing for Tycho responses and DeepScan behavior.
- Stripe: payment processing, subscriptions, and usage-pack billing.
- HERE: geocoding and location resolution.
- Copernicus / ESA / ECMWF: satellite and environmental data services used by Tycho tools.
- NASA and USGS: Earth Observation and environmental datasets used by Tycho tools.
- Other operational data providers: for example Open-Meteo or similar environmental sources when a Tycho tool depends on them.
Providers act in different roles depending on the flow: some operate as processors or infrastructure vendors, while others are external data sources that Tycho queries in order to retrieve public scientific or environmental datasets.
6. Data sharing
We do not sell user personal data. We share data only where it is necessary to operate Tycho, process payments, provide support, answer Earth Observation requests, protect the service, or comply with law.
7. Retention
- Conversation history and profile preferences are retained while the relevant account or service relationship remains active, unless deleted sooner by the user or by PromSpace operational policy.
- Support and bug-report records may be retained for product reliability, audit, and incident follow-up purposes.
- Billing and transaction records may be retained for accounting, tax, fraud prevention, and legal compliance.
- Short-lived technical logs and operational diagnostics may be retained for limited periods needed for reliability and security operations.
8. International transfers
Tycho uses cloud and data providers that may process data across multiple jurisdictions. Where personal data is transferred outside the European Economic Area, PromSpace should rely on an appropriate legal transfer mechanism, such as adequacy decisions or contractual safeguards, where required.
9. User rights
Depending on the applicable law, users may have the right to access, correct, delete, restrict, object to, or port certain personal data, and to withdraw consent where processing depends on consent.
Requests can be sent to contact@promspace.eu. Users may also have the right to lodge a complaint with a competent supervisory authority.
10. Security
PromSpace uses technical and organizational measures designed to protect Tycho data flows and stored information. No service can guarantee absolute security, but Tycho is designed to limit unnecessary exposure and to keep operational and support data scoped to what is needed to run the product.
11. Changes to this policy
We may update this Privacy Policy to reflect product, legal, or operational changes. If the changes are material, we should update the effective date and surface the revised policy through Tycho's public trust surfaces.