Who is responsible
Apsia, based in Talavera de la Reina, Spain, is the data controller for personal data handled through this site and the app. Contact: the contact form.
What we collect and why
- Contact form. Name, email, organisation and your message, to answer you. Legal basis: taking steps at your request before a contract. Kept for 24 months after our last exchange.
- Workspace accounts. Email, organisation and the API key we issue you, to provide the service. Legal basis: contract. Kept while the workspace exists and 12 months after.
- Files you upload for the free analysis. Processed in memory to produce the report; the file and the telemetry are discarded when it ends. We keep a technical summary of the analysis with nothing that identifies you: not the file name, not your address, not the satellite. It holds the format, how the columns are named (only the words of power telemetry, no digits and no proper names), the battery, the orbit class (low, medium or geostationary), the estimate from each discharge and the result, with the day and never the time. We use it to improve our models and keep it for up to five years. To keep an analysis out, send it with the API option
contribute: false or tick «Do not use this analysis to improve the models» in the app. A workspace’s analyses, and any request sent with a key, are used this way only if you ask.
- Workspace data. Satellite power sheets, per-orbit summaries and reports, to give you history and comparisons. Raw telemetry is discarded after processing, except a pilot’s series when its box is left ticked (see Pilots). Deleted on request within 30 days.
- Pilots. If we invite you to a pilot: your name, e-mail and organisation, and the summary of each analysis, to run the pilot. The start page has a box, ticked by default: if you leave it ticked, we also keep the telemetry series you send during the pilot (reduced, at most 20 uploads), only to validate and improve Apsia. They are never shared or sold. You can untick it before you start, or ask us to delete them at any time. Your contact details and the series are deleted when the pilot ends plus 30 days, or sooner on request. The answers you give in the pilot’s form are kept without your contact details (with the company’s name only if you allow us to cite you). Legal basis: the pilot you accept (contract) and, for the series, our legitimate interest in validating and improving the product; you may object at any time.
- Registered battery health certificates. Their verification record (number, satellite, period, verdict and fingerprints), kept while the certificate is valid. When one is issued, only the fingerprint of its PDF (a one-way hash) is sent to DigiCert, FreeTSA and the OpenTimestamps calendars to time-stamp it; the file and its contents never leave our servers. Legal basis: contract.
- Server logs. IP address, user agent, requested path and timestamp, to keep the service secure and to rate-limit abuse. Legal basis: legitimate interest. Kept for 30 days.
Satellite telemetry is not personal data in itself, and we treat it under the commitments on the security page.
Cookies and local storage
No advertising or analytics cookies. The site stores your language choice and your workspace key, when you enter it or start a pilot, in your browser's local storage. Both stay on your device.
Where data is processed
In the European Union, on Google Cloud in Belgium. Google Cloud EMEA is our only sub-processor. We do not transfer personal data outside the EU.
Your rights
Access, rectification, erasure, restriction, portability and objection, under the GDPR. Use the contact form; we answer within one month. You can also complain to the Spanish Data Protection Agency (AEPD).
Changes
If this policy changes in a way that affects you, we tell workspace customers by email and update the date below.
Last updated: 14 October 2026