Last updated: February 26, 2026
AstralDigital ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website building platform.
1. Information We Collect
1.1 Information You Provide
- Account Information: Name, email address, password, phone number, and business details when you create an account
- Payment Information: Credit card details and billing address (processed securely by our payment provider, Stripe)
- Website Content: Text, images, and other content you upload to your websites
- Communications: Messages you send through our support channels
1.2 Information Collected Automatically
- Usage Data: Pages visited, features used, time spent on the platform
- Device Information: Browser type, operating system, IP address
- Location Data: General location based on IP address
- Cookies: See our Cookie Policy for details
2. How We Use Your Information
We use collected information to:
- Provide, maintain, and improve the Service
- Process transactions and send related information
- Send administrative messages (security alerts, updates)
- Respond to your comments, questions, and support requests
- Send marketing communications (with your consent, which you can withdraw anytime)
- Monitor and analyze trends, usage, and activities
- Detect, prevent, and address fraud and security issues
- Comply with legal obligations
3. Data Sharing & Third Parties
We may share your information with:
3.1 Service Providers
- Stripe: Payment processing
- Cloudflare: Website hosting and CDN
- AWS/Supabase: Cloud infrastructure and database
- Analytics providers: Usage analytics
3.2 Legal Requirements
We may disclose information if required by law or to:
- Comply with legal process
- Protect our rights, privacy, safety, or property
- Enforce our Terms of Service
3.3 Business Transfers
In connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.
4. Cookies & Tracking Technologies
We use cookies and similar technologies for functionality, analytics, and personalization. See our Cookie Policy for detailed information and opt-out options.
5. Data Retention
We retain your information for as long as:
- Your account is active
- Necessary to provide the Service
- Required to comply with legal obligations
- Needed to resolve disputes and enforce agreements
After account deletion, we retain anonymized analytics data and may retain backups for up to 90 days for disaster recovery purposes.
6. Your Rights
6.1 All Users
- Access: Request a copy of your personal data
- Correction: Update or correct inaccurate data
- Deletion: Request deletion of your data
- Portability: Export your data in a standard format
- Opt-out: Unsubscribe from marketing communications
6.2 European Users (GDPR)
If you are in the European Economic Area (EEA), you have additional rights:
- Right to restrict processing
- Right to object to processing
- Right to withdraw consent
- Right to lodge a complaint with a supervisory authority
Legal Basis for Processing: We process your data based on contract performance (providing the Service), legitimate interests (improving the Service, security), consent (marketing), and legal obligations.
6.3 California Residents (CCPA)
California residents have the right to:
- Know what personal information is collected and how it is used
- Request deletion of personal information
- Opt-out of the sale of personal information
- Non-discrimination for exercising privacy rights
We do not sell personal information.
7. Security Measures
We implement appropriate security measures including:
- Encryption of data in transit (TLS/SSL) and at rest
- Regular security assessments and penetration testing
- Access controls and authentication requirements
- Employee training on data protection
- Incident response procedures
While we strive to protect your information, no method of transmission over the Internet is 100% secure.
8. International Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws.
For transfers from the EEA, we use Standard Contractual Clauses approved by the European Commission or other appropriate safeguards.
9. Children's Privacy
AstralDigital is not intended for children under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use after changes constitutes acceptance.
Contact Us
For privacy-related questions or to exercise your rights:
Email: privacy@astraldigital.com
Address: AstralDigital Inc., Attn: Privacy Team, 123 Tech Way, San Francisco, CA 94105
EU Representative: [To be appointed if applicable]
Data Protection Officer: dpo@astraldigital.com