The Odyssey Space Corp./OdysseyAI ("Odyssey," "we," "us," "our") builds and operates space-native compute infrastructure — orbital supercomputers and the ground systems that connect them to our customers. This Privacy Policy describes what information we collect, how we use it, how we secure it, the rights you have over it, and the additional commitments that apply because our compute lives in orbit.
This policy applies to odysseyintelligence.ai, the Odyssey customer portal, the Odyssey orbital compute platform (including capacity purchased through the Microsoft Azure Marketplace and other cloud providers), and any related services we provide (collectively, the "Services").
1. Our core commitment.
We do not use customer data beyond what is necessary to deliver and improve the Services you purchased. We do not sell personal information. We do not use the contents of your workloads to train any model, service any other customer, or market to you. Customer workload data is processed in isolated execution environments and is yours, not ours.
2. Information we collect.
2.1 Information you provide.
When you reserve compute, create an account, contact us, apply for a role, or sign up for press communications, you may provide: name, organization, role, business email, phone, billing details, mission or workload descriptions, and any other information you choose to send us (including the body of emails you send to contact@odysseyintelligence.ai and our other inboxes).
2.2 Information collected automatically.
When you use our website or portal, we collect standard log data: IP address, browser type, device identifiers, pages viewed, referring URLs, and timestamps. We use minimal first-party analytics and do not deploy third-party advertising trackers.
2.3 Customer workload data.
When you run workloads on Odyssey infrastructure (on-orbit or ground-segment), your code, models, datasets, inputs, outputs, intermediate artifacts, and runtime metadata flow through our platform. We treat all of this as your confidential information.
2.4 Spacecraft and ground-segment telemetry.
We collect operational telemetry from our spacecraft and ground stations — power, thermal, attitude, link quality, compute utilization, and similar engineering data. This telemetry concerns the health of our vehicles and is not derived from the contents of your workloads.
3. How we use information.
We use the information above only to:
- Provide, operate, secure, and improve the Services;
- Authenticate you and protect against fraud, abuse, and unauthorized access;
- Process payments and fulfill capacity reservations;
- Communicate with you about your account, the Services, security incidents, and material changes to this policy;
- Comply with legal obligations, including export-control, tax, and accounting requirements;
- Defend our legal rights and the rights of our customers.
We do not use the contents of your workloads, models, or datasets to train Odyssey models, develop competing products, profile you, or target advertising. We do not sell personal information or share it for cross-context behavioral advertising as those terms are defined under the California Consumer Privacy Act ("CCPA"), as amended by the California Privacy Rights Act ("CPRA").
4. Customer workload isolation.
Each customer's workloads execute in logically isolated environments. Access to customer data by Odyssey personnel is restricted to a minimum-necessary basis, requires multi-factor authentication, is logged, and is auditable. Where you require dedicated physical compute (for example, sovereign-customer or government workloads), we will document this in your service order.
5. Sharing and disclosure.
We share information only:
- With service providers who process data on our behalf (cloud infrastructure, payment processing, identity, customer-support tooling) under written contracts that prohibit any other use;
- With marketplace and partner platforms you choose to use (for example, Microsoft Azure Marketplace), limited to what those platforms need to provision and bill your capacity;
- To comply with law, valid legal process, or lawful government requests, after evaluating the request for validity, scope, and conflicts with the law of other jurisdictions;
- In connection with a corporate transaction (merger, financing, acquisition), under confidentiality, with continuity of this policy's protections;
- With your direction or consent.
We do not sell or rent personal information to third parties.
6. Security.
Odyssey is built to operate the world's most demanding workloads in the most demanding environment. Our security program reflects that. We maintain administrative, technical, and physical safeguards designed to protect information at rest and in transit, including:
- Encryption of customer data in transit and at rest across ground systems and orbital assets;
- Encrypted command-and-control of all spacecraft, with cryptographically authenticated uplink;
- Encrypted optical inter-satellite links and RF downlinks;
- Principle-of-least-privilege access controls, hardware-backed MFA, and continuous access logging;
- Alignment with the NIST Cybersecurity Framework and NIST SP 800-171 controls for handling Controlled Unclassified Information ("CUI"), with a roadmap to CMMC Level 2 attestation for applicable government workloads;
- SOC 2 Type II audit program in progress;
- Vulnerability management, secure software development lifecycle, and penetration testing on a defined cadence;
- Documented incident response and customer breach-notification procedures consistent with applicable U.S. state and federal law.
No system is perfectly secure. If we ever discover an incident that affects your information, we will notify you in accordance with our contractual commitments and applicable law.
7. Data retention.
We retain personal information only as long as needed for the purposes described in this policy, the duration of your service relationship with us, or as required by applicable law (including tax, accounting, and export-control recordkeeping). Customer workload data is retained per the terms of your service order; on termination, we delete or return it within the period specified there.
8. Your privacy rights — California (CCPA/CPRA).
If you are a California resident, you have the right to:
- Know what personal information we collect, the sources, the purposes, and the categories of third parties to which it is disclosed;
- Access a copy of the personal information we hold about you;
- Correct inaccurate personal information;
- Delete personal information, subject to legal retention obligations;
- Limit the use of sensitive personal information to what is necessary to provide the Services;
- Opt out of sale or sharing — we do not sell or share personal information for cross-context behavioral advertising, so this opt-out is the default;
- Non-discrimination — we will not deny Services, charge a different price, or provide a different level of quality because you exercised these rights.
To exercise these rights, email contact@odysseyintelligence.ai. We will verify your identity before responding. You may use an authorized agent; we will request reasonable proof of authorization.
9. Federal and sector compliance.
Odyssey complies with applicable U.S. federal law governing the collection, use, and transfer of information, including the Federal Trade Commission Act, the Electronic Communications Privacy Act, the Computer Fraud and Abuse Act, the Defend Trade Secrets Act, and sector-specific obligations that apply to particular customer engagements (for example, FAR/DFARS clauses for U.S. Government customers and Department of Defense-related work). Where customer engagements involve federal CUI, we implement the NIST SP 800-171 control baseline and contractual flow-down requirements.
10. Space-specific provisions.
10.1 Where your data physically resides.
When you run workloads on Odyssey infrastructure, portions of your data — including code, models, and intermediate state — may be processed and stored on Odyssey spacecraft in Low Earth Orbit (and other orbits in the future), on Odyssey ground stations (or partner ground stations), and on Odyssey or partner-operated terrestrial systems. The orbital segment is operated by The Odyssey Space Corp. under U.S. Federal Communications Commission and National Oceanic and Atmospheric Administration authorizations and, where applicable, FAA launch and reentry licensing.
10.2 Sovereign and dedicated compute.
For customers with sovereignty or jurisdiction requirements, we offer dedicated spacecraft, dedicated orbital planes, and ground-segment routing arrangements that constrain where data is processed and transited. These commitments are documented in your service order and override any general statements in this policy to the extent of conflict.
10.3 Spacecraft telemetry vs. customer data.
Spacecraft engineering telemetry (power, thermal, attitude, link metrics, compute-resource utilization at the platform level) is operational data about Odyssey vehicles. It does not contain the contents of customer workloads and is handled separately from customer data.
11. Export controls.
Some Odyssey technology, services, and technical data are subject to U.S. export-control laws and regulations, including the International Traffic in Arms Regulations ("ITAR," 22 CFR §§ 120–130), the Export Administration Regulations ("EAR," 15 CFR §§ 730–774), and economic sanctions administered by the U.S. Department of the Treasury's Office of Foreign Assets Control ("OFAC"). By using the Services, you represent that (a) you are not located in, organized under the laws of, or ordinarily resident in any country or region subject to comprehensive U.S. sanctions, (b) you are not on any U.S. Government restricted-party list, and (c) you will not export, re-export, transfer, or release Odyssey technology, services, or technical data in violation of these laws. Personnel access to controlled technical data is restricted in accordance with applicable export-control requirements.
12. International data transfers.
Odyssey is headquartered in the United States. If you access the Services from outside the United States, you understand that your information will be transferred to and processed in the United States and other jurisdictions where Odyssey or its service providers operate. We use appropriate contractual and technical safeguards consistent with applicable law for cross-border transfers, including where required, the European Commission's Standard Contractual Clauses.
13. Third-party services and links.
The Services may contain links to third-party sites or be integrated with third-party platforms (such as Microsoft Azure). Those third parties operate under their own privacy policies. We are not responsible for the privacy practices of third parties.
14. Changes to this policy.
We will update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you by email or through the customer portal. Continued use of the Services after a material change constitutes acceptance of the revised policy.
15. Contact us.
Questions, requests, or concerns about this policy or our handling of your information:
The Odyssey Space Corp.
Attn: Privacy
El Segundo, California, United States
contact@odysseyintelligence.ai
Microsoft and Azure are trademarks of Microsoft Corporation. All other trademarks are the property of their respective owners.