Skip to main content
SWIFTSWIFT

Privacy Policy

Version 1.0 · Last updated June 2026

SWIFT — the Space Workforce Incubator for Texas — is an Austin-based 501(c)(3) nonprofit. This policy explains what personal data we collect through swiftrocket.org, why, and the choices you have. We collect as little as we can to run the site.

Who we are

SWIFT (Space Workforce Incubator for Texas) is the data controller for information collected through this site. You can reach us about any privacy question at geoff@swiftrocket.org.

What we collect

  • Newsletter signup: your email address, and your first name if you provide it.
  • Contact / partner inquiries: your name, email, optional subject, and the message you send us.
  • Donations: processed by Stripe. We never see or store your card details. We retain donation metadata — amount, status, and the name and email Stripe shares with us — to issue receipts and keep our records.
  • Analytics: with your consent, PostHog records anonymised usage events (such as page views). We do not put your name, email, or message content into analytics.
  • Technical data: your IP address and basic request information, used for security and spam protection (rate limiting) and to keep the service running.

Why we use it (legal bases)

  • Consent — for the newsletter and for analytics cookies. You can withdraw it at any time.
  • Legitimate interests — to respond to inquiries, secure the site, and prevent abuse.
  • Legal obligation — to keep adequate records of donations.

Service providers

We share data only with the processors needed to run the site, each under a data-processing agreement:

  • Neon — database hosting (our system of record).
  • Vercel — website hosting and delivery.
  • Resend — transactional email (confirmations, receipts, notifications).
  • Loops — newsletter delivery and nurture sequences.
  • Stripe — donation payment processing.
  • PostHog — product analytics (only with your consent).
  • Google Analytics (GA4) — website analytics (only with your consent).
  • Upstash — rate limiting / abuse prevention.
  • Sentry — error monitoring (configured to exclude personal data).

How long we keep it

  • Newsletter: until you unsubscribe or ask us to delete it.
  • Contact messages: kept only as long as needed to handle your inquiry and our records of it.
  • Donation records: retained as required for financial and legal purposes.

Your rights

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, delete, or export your data, to withdraw consent, or to object to certain processing. To exercise any of these, email geoff@swiftrocket.org and we will respond within the time the law requires.

Cookies

We set only a strictly-necessary cookie to remember your consent choice. Analytics cookies load only after you accept them. See our Cookie Policy for the full list.

Children

This site is not directed at children under 16, and we do not knowingly collect their data here. We ask only for an email to join the newsletter — no age is collected. If you are under 16, please use the site with a parent or guardian.

International transfers

We are based in the United States, and our providers may process your data in the US. Where required, transfers rely on appropriate safeguards.

Changes to this policy

We version this policy. Material changes bump the version shown above, and where appropriate we will ask you to re-consent.

Contact

Questions or requests: geoff@swiftrocket.org.