1.Introduction
This policy explains how Astra collects, uses, and protects personal data when you use the website, the web platform, and the mobile apps. Astra is a brand of Watar Technology, a Saudi establishment with Unified National Number 7052773541.
The Arabic version of this policy governs if the two versions differ.
2.Data we collect
- Account data: name, email, password, and mobile number if provided. Passwords are stored hashed, in a form no one can read.
- Organization data: name, country, currency, and industry.
- Content users add: projects, tasks, meetings, messages, and attached files.
- Sign-in and device data: sign-in time, IP address, device and browser type, and session status.
- Subscription and payment data: plan, number of licenses, and invoice history. The payment gateway processes card details; Astra receives only what billing needs, such as card type, the last four digits, and the payment status.
- AI assistant conversations: questions and answers, kept in your account so you can return to them, and you can delete them at any time.
- Contact and demo requests: what you submit through the website’s forms.
3.How we use data
- To run and provide the service to you and your team.
- To send the notifications you choose, by email and in the platform.
- To manage subscriptions and billing.
- To protect accounts and detect unauthorized use.
- To respond to your requests and questions.
- To improve the service using aggregated usage data that doesn’t identify anyone.
4.The AI assistant
When you use the assistant, your questions are processed to produce an answer. We rely on an external AI model provider and send it only the question and the context needed to answer it. We don’t allow your data to be used to train models.
5.Sharing data
- Within your organization: members see what their roles and permissions allow.
- Client portal: invited clients see only the projects your organization shares with them.
- Service providers we rely on to operate, for hosting, payments, email, and AI, and only as much as their work requires.
- Official authorities where legally required.
- We don’t sell your personal data.
6.Storing and transferring data
We store data with service providers chosen against clear protection standards. If providing the service requires transferring personal data outside the Kingdom, we apply the safeguards required by the Personal Data Protection Law and its regulations. Legal review
7.Retention
We keep data for the duration of the subscription and for 90 days after the account is closed, except where the law requires longer.
8.Protecting data
We apply measures to protect accounts, including roles and permissions, session monitoring, and audit logs on the plans that include them. Details are on the Security page.
9.Your rights
- To know how your data is processed.
- To access your data and get a copy.
- To correct or complete it.
- To request its deletion.
- To withdraw consent.
Send requests to hello@astraplatform.io from the email registered to your account. We respond within 30 days.
10.Cookies
We use only the cookies needed to run the website and remember your choices, such as language. If we add analytics or marketing cookies, we’ll ask for your consent first.
11.Minors
The service is not directed at anyone under 18.
12.Changes to this policy
We publish any change on this page with its date, and notify you of significant changes by email and in the platform.
13.Contact
hello@astraplatform.io · Watar Technology · Kingdom of Saudi Arabia