Privacy Policy

1. Who We Are

Pramatra Space Private Limited ("the Company," "we," "us," or "our") (Prestige Trade Tower, Palace Road, Level 12, Bengaluru, Karnataka 560001, India) operates the platform at pramtaraspace.org. We are committed to handling personal information responsibly and in line with applicable data protection law, including the Information Technology Act 2000 and the Digital Personal Data Protection Act 2023 as applicable. Contact us at [email protected].

The Company provides AI-orchestrated quantum-safe networking infrastructure, including satellite quantum key distribution services, to financial institutions, critical infrastructure operators, and government networks. This policy describes the personal data we process in connection with that service and the website at pramtaraspace.org.

2. Information We Collect

Because the Company provides a B2B infrastructure service rather than a consumer application, the data we handle is limited and primarily relates to authorised operators who access the platform. Specifically, we collect:

• Account and identity data you submit when requesting access or registering: name, work email address, organisation name, and role.
• Authentication credentials used to access the network management console (hashed and stored securely; plaintext passwords are never stored or logged).
• Network telemetry and session metadata generated by the platform during key exchange sessions: session identifiers, node identifiers, key delivery timestamps, error codes, and throughput counters. This telemetry does not include the cryptographic key material itself.
• Key management metadata: records of which nodes received keys, when, and under which policy configuration. The actual quantum-derived key material is never stored on our servers after delivery.
• Technical and usage data collected automatically when you visit pramtaraspace.org: IP address, browser type, pages visited, referring URL, and session duration.
• Communications you send us: support requests, pilot enquiry forms, and email correspondence.

3. How We Use Information

The Company uses the information described above to:

• Operate and deliver the satellite QKD platform to authorised operators -- provisioning node access, routing key exchanges, and maintaining service availability;
• Authenticate operator sessions and enforce access policies on the network management console;
• Diagnose service incidents and debug integration issues reported by operators;
• Send operators technical notices, security advisories, and service status updates directly related to their deployments;
• Respond to pilot enquiries and evaluate fit with prospective deployment partners;
• Improve the platform's routing algorithms and reliability, using aggregated and de-identified telemetry only;
• Meet legal obligations, including obligations under applicable Indian law and any applicable sector-specific regulatory requirements (such as those arising from Reserve Bank of India or SEBI guidance on information security).

We do not sell personal information. We do not use platform telemetry or key management records to train machine learning models without the explicit written consent of the relevant operator.

4. Sharing

We share information only as follows:

• Service providers acting on our behalf: cloud infrastructure providers and technical subprocessors who host the platform or provide supporting services, each bound by written contracts restricting their use of data to providing those services;
• Legal and regulatory disclosures: when required by applicable law, court order, or a competent regulatory authority;
• Business transfers: if the Company is involved in a merger, acquisition, or asset sale, affected parties will be notified before any transfer of personal data.

We do not share network telemetry or key management metadata with any third party other than the service providers described above.

5. Retention and Security

We retain account and identity data for as long as your operator relationship with the Company continues, plus any period required for legal or regulatory record-keeping. Network telemetry and session metadata are retained for 90 days for operational troubleshooting, after which they are deleted or anonymised. Key management metadata is subject to agreed retention terms in each operator's service agreement, reflecting that some operators (particularly in financial services) have their own regulatory record-keeping obligations.

We apply administrative, technical, and physical safeguards designed to protect the data we hold. The platform itself is built around post-quantum cryptographic primitives aligned with the NIST PQC algorithm suite (ML-KEM, ML-DSA), meaning key material in transit is protected against both classical and quantum adversaries. Access to production systems is restricted to authorised personnel under least-privilege controls.

6. Your Rights

Subject to applicable law, you may have rights to access, correct, delete, or restrict our use of personal information we hold about you, and to object to certain processing or withdraw consent where processing is based on consent. Under the Digital Personal Data Protection Act 2023, data principals have the right to obtain information about processing, correct inaccurate data, and seek erasure in defined circumstances.

To make a request, email us at [email protected]. We will respond within 30 days unless a shorter period is required by applicable law. We may need to verify your identity before fulfilling a request.

7. Cookies

See our Cookie Policy for details of the cookies and similar technologies used on pramtaraspace.org.

8. Changes and Contact

We may update this Privacy Policy from time to time. Material changes will be reflected by an updated "Last updated" date at the top of this page. We will notify active operators of material changes to the extent required by applicable law.