Privacy Policy.
We believe privacy should be straightforward. Here is exactly what we collect, why we collect it, and how you can control it. Last updated: 14 September 2026.
Space Control.io is a product of Cross Sonic. When you use our platform, Cross Sonic acts as the data controller for operator account data and as a data processor for the member data you upload on behalf of your members. Our registered address and contact details are available at privacy@spacecontrol.io.
We collect the minimum data needed to run the Service:
- Account data — name, email, and billing details you provide when signing up
- Member data — profiles, bookings, door access logs, and invoices created by you or your members
- Usage data — pages visited, features used, and errors encountered, to improve the product
- Payment data — processed by Stripe or GoCardless; we never store raw card numbers
Your data is used solely to deliver and improve the Service. Specifically:
- To provide and operate the platform features you have purchased
- To process payments and send invoices
- To send product updates, security notices, and support responses
- To detect and prevent fraud or misuse
We do not sell your data or use it for advertising.
We share data only with the sub-processors necessary to operate the platform. Key third parties include:
- Stripe & GoCardless — payment processing
- Kisi, Salto, Brivo — door access control (if enabled)
- Xero & QuickBooks — accounting sync (if enabled)
- Google Workspace & Microsoft 365 — calendar integration (if enabled)
All sub-processors are bound by data processing agreements and may not use your data for their own purposes.
We retain your data for as long as your subscription is active. After cancellation you have 30 days to export your data. We then delete it from live systems within 90 days, and from backups within 12 months, unless a longer period is required by law.
We use industry-standard measures to protect your data:
- Encryption at rest (AES-256) and in transit (TLS 1.2+)
- Role-based access controls limiting who inside Cross Sonic can see your data
- Regular penetration testing and vulnerability scanning
- SOC 2 Type II audit in progress
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict how we process your data
- Receive a portable copy of your data
To exercise any of these rights, email us at privacy@spacecontrol.io. We will respond within 30 days.
We use essential cookies to keep you signed in and remember your preferences. We use analytics cookies (anonymised) to understand how the platform is being used. We do not use advertising or tracking cookies. You can manage cookie preferences from your browser settings.
We may update this Privacy Policy from time to time. We will notify you by email at least 14 days before any material change takes effect. The date at the top of this page always reflects the most recent version.
For any privacy questions or to submit a data request, contact us at privacy@spacecontrol.io. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Privacy questions before you start?
We are happy to walk you through how we handle your members' data before you sign anything.