Privacy Policy

Scope of This Privacy Policy

This Privacy Policy applies only to data processing carried out by Astra.

It does not apply to:

• Third-party services or infrastructure
• Open-source code usage outside of our control
• Blockchain networks or smart contracts

We are not responsible for the privacy practices of third parties.

Who Processes Your Data

Your data is processed by Astra.

If you have questions about data processing, you can contact:

Email: hey@Astra.ai

What Data We Process

3.1 Personal Identifiable Information (PII)

We may collect and process personal data that can identify you, including:

• Email address (for authentication via magic link)
• Any information you voluntarily provide through communication with us

We do not collect names, payment details, or sensitive personal data unless explicitly provided by you.

3.2 Technical Information

We and/or our authorized service providers may automatically collect technical data when you interact with the Website, including:

• IP address
• Browser type and version
• Device type and operating system
• Referrer URLs
• Pages visited and interaction events
• Timestamps and session duration

In limited cases, technical data may be considered personal data. However, we do not use this data to directly identify individuals.

3.3 Developer Tools (SDK and CLI)

The Astra SDK and CLI:

• Do not collect personal data
• Do not include analytics or telemetry
• Do not transmit usage information to Astra

Your use of these tools is fully local unless you explicitly integrate external services.

Purposes and Legal Basis for Processing

We process your data for the following purposes:

4.1 Providing the Services

This includes:

• Creating and managing user authentication (email-based login)
• Delivering access to the Website and documentation
• Responding to inquiries and support requests

Legal basis: performance of a contract or legitimate interest

4.2 Improving the Services

We use technical data to:

• Understand how the Website is used
• Improve features and performance
• Detect and fix errors

Legal basis: legitimate interest

4.3 Security and Fraud Prevention

We process data to:

• Detect abuse or misuse of the Services
• Maintain system integrity and security

Legal basis: legitimate interest and legal obligation

4.4 Communication

We may use your email address to:

• Send authentication links
• Respond to inquiries
• Notify you about important updates

We do not send marketing emails unless explicitly opted into.

Legal basis: consent or legitimate interest

Analytics and Telemetry

We use third-party analytics providers on the Website, including:

• PostHog
• Axiom

These services may collect:

• Anonymous usage data
• Device and browser metadata
• Interaction and event data

We use this data solely to:

• Analyze usage patterns
• Improve performance and reliability
• Debug issues

We do not use analytics to track users across unrelated services.

Cookies

We use cookies and similar technologies to:

• Maintain sessions
• Enable authentication
• Analyze usage

Cookies are small data files stored on your device.

You may disable cookies in your browser settings; however, some functionality of the Website may be affected.

How We Share Your Data

We share your data only in limited circumstances:

7.1 Service Providers

We may share data with trusted service providers who assist us in operating the Services (e.g., hosting, analytics, logging).

These providers:

• Process data on our behalf
• Are contractually obligated to protect your data

7.2 Legal Requirements

We may disclose data if required to:

• Comply with applicable law or regulation
• Respond to legal requests or court orders
• Protect the rights, safety, or property of Astra, users, or the public

7.3 Business Transfers

If Astra is involved in a merger, acquisition, or asset sale:

• Your data may be transferred as part of that transaction
• We will notify you where required

Data Retention

We retain personal data only for as long as necessary to:

• Provide the Services
• Fulfill legal obligations
• Resolve disputes

Technical and analytics data may be retained in aggregated or anonymized form.

International Data Transfers

Your data may be processed outside your country of residence.

We take reasonable measures to ensure that:

• Data is protected in accordance with applicable laws
• Appropriate safeguards are in place where required

Your Rights

Depending on your jurisdiction, you may have the following rights:

• Right of access to your data
• Right to correction
• Right to deletion (erasure)
• Right to restrict processing
• Right to object to processing

To exercise these rights, contact us at hey@Astra.ai.

We may require verification of your identity before processing requests.

Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Secure infrastructure
• Access controls
• Monitoring and logging

However, no system is completely secure, and we cannot guarantee absolute security.

Children’s Privacy

The Services are not intended for individuals under the age of 13.

We do not knowingly collect data from children. If we become aware of such data, we will delete it.

Third-Party Infrastructure and Blockchain Disclaimer

The Services may interact with third-party infrastructure, including blockchain networks and smart contract systems.

You acknowledge that:

• Blockchain data is public and immutable
• Transactions may be visible to third parties
• We do not control or process blockchain data

We are not responsible for:

• Data published on public blockchains
• Third-party smart contracts or infrastructure
• Any privacy implications arising from blockchain usage

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we do:

• We will update the “Last Updated” date
• Continued use of the Services constitutes acceptance of the updated policy

If changes are material, we may provide additional notice.

Contact

If you have questions about this Privacy Policy or your data:

Email: hey@Astra.ai

Additional Information

This Privacy Policy applies only to Astra-controlled data processing and does not override:

• Open-source licenses (including Apache License 2.0)
• Third-party terms and policies