AstraProject — Privacy Policy

Last updated: September 6, 2026

AstraProject respects your privacy.

This Privacy Policy explains how AstraProject collects, uses, stores, protects, and discloses personal information when you use the AstraProject desktop application, website, account, services, AI features, subscriptions, and related products.

By using AstraProject, you acknowledge that you have read and understood this Privacy Policy.

AstraProject is designed to provide access to multiple artificial intelligence models and tools through a single application. Because some of these features require information to be processed by third-party AI providers, this Privacy Policy explains when and why information may be shared.

AstraProject does not sell your personal information.

1. Scope

This Privacy Policy applies to information collected through:

• The AstraProject desktop application
• The AstraProject website
• AstraProject accounts
• AstraProject AI conversations
• AstraProject projects and workspaces
• AstraProject subscriptions and purchases
• AstraProject customer support
• AstraProject documentation and related services

This Privacy Policy does not apply to third-party websites, applications, AI providers, payment processors, or other services that AstraProject does not control.

Those services may have their own privacy policies.

2. Information We Collect

We collect only information reasonably necessary to operate, secure, improve, and provide AstraProject.

Depending on how you use AstraProject, this may include:

2.1 Account information

When you create an account, we may collect:

• Name or display name
• Email address
• Account identifier
• Authentication information
• Password information in securely protected form
• Account creation date
• Subscription status
• Plan information
• Account preferences
• Application settings

We do not store your password in plain text.

2.2 AI conversations

When you use AstraProject's AI features, your prompts and related content may be processed in order to generate responses.

This may include:

• Text prompts
• Questions
• Instructions
• AI responses
• Conversation history
• Files or content attached to a conversation
• Code submitted to the AI
• Images submitted to supported AI models
• Context necessary to answer your request

The information required to generate an AI response may be transmitted to the AI provider responsible for the selected model.

The exact processing performed may depend on the AI model and provider selected.

3. AI Model Providers

AstraProject may provide access to multiple third-party and proprietary AI models.

Depending on the model you select, your request may be processed by a third-party AI infrastructure provider.

This can include providers supporting models such as:

• Claude Fable 5
• GPT-6
• Gemini
• DeepSeek
• Qwen
• Other models made available through AstraProject
• AstraProject's proprietary models, including LunaSTRA 1.2 and Terra 2.4

AstraProject may change or add model providers over time.

When your request is sent to a third-party AI provider, the information necessary to process that request may leave AstraProject's infrastructure.

AstraProject takes reasonable measures to select and manage providers in a manner consistent with applicable privacy obligations.

Third-party providers may have their own privacy practices, retention policies, and terms.

You should avoid submitting highly sensitive personal information to an AI model unless you are comfortable with that information being processed to provide the requested service.

4. AI Training

AstraProject does not automatically treat your private conversations as public content.

AstraProject will not use private user conversations to train proprietary AI models unless the user has been clearly informed of that use and an appropriate legal basis exists.

Where applicable, AstraProject may use aggregated, anonymized, or de-identified information to understand system performance, detect abuse, improve reliability, and improve the service.

Information that has been effectively anonymized so that it can no longer reasonably be associated with an identifiable individual may be used for legitimate analytical or operational purposes.

5. How We Use Information

AstraProject may use information for the following purposes:

Providing the service

We use information to:

• Create and maintain accounts
• Authenticate users
• Provide AI responses
• Maintain conversation history
• Operate projects and workspaces
• Provide application functionality
• Process subscriptions
• Manage usage limits
• Provide customer support

Security

We may process information to:

• Detect unauthorized access
• Prevent fraud
• Detect abuse
• Prevent attacks
• Protect accounts
• Investigate security incidents
• Enforce our Terms of Service

Reliability

We may use technical information to:

• Diagnose errors
• Detect crashes
• Improve performance
• Monitor availability
• Resolve technical problems
• Maintain infrastructure

Product improvement

We may use aggregated or de-identified information to:

• Understand how features are used
• Improve application performance
• Develop new features
• Identify technical problems
• Improve reliability
• Measure service quality

Legal obligations

We may process information when necessary to:

• Comply with applicable laws
• Respond to valid legal requests
• Protect our rights
• Prevent fraud
• Protect users
• Investigate illegal activity

6. Information We Do Not Sell

AstraProject does not sell, rent, or trade personal information to third parties for their independent marketing purposes.

We may disclose information to service providers that process information on our behalf when necessary to operate AstraProject.

Those disclosures are different from selling personal information.

7. Payment Information

When you purchase an AstraProject subscription or other paid service, payment information may be processed by a third-party payment processor.

AstraProject may receive information such as:

• Payment status
• Transaction identifier
• Payment method type
• Last four digits of a payment card, where provided
• Billing country
• Currency
• Subscription information

AstraProject does not intentionally store complete payment card numbers when payment processing is handled by a specialized payment processor.

Payment processors may process your information according to their own privacy policies and security requirements.

8. Technical Information

When you use AstraProject, technical information may be automatically generated.

This may include:

• IP address
• Operating system
• Application version
• Device type
• Browser information when using the website
• Approximate location derived from IP address
• Language preferences
• Time zone
• Error reports
• Crash information
• Performance information
• Security events
• Login timestamps
• Feature usage information

This information helps AstraProject operate and secure the service.

9. Desktop Application Data

AstraProject is a desktop application.

Certain information may be stored locally on your computer depending on the features you use and your configuration.

Local information may include:

• Application preferences
• Cached data
• Conversation history
• Projects
• Workspace information
• Authentication tokens
• Locally stored files
• Model configuration
• Application logs

Information stored locally may remain on your device even after you delete your AstraProject account.

Deleting your AstraProject account does not automatically guarantee deletion of every local file or cache created by the desktop application.

You are responsible for managing local files stored on your device.

10. Files and User Content

AstraProject may allow you to upload or provide:

• Documents
• Images
• Code
• Text files
• Projects
• Other digital content

We process this content only as necessary to provide the functionality you request, maintain the service, protect the platform, or comply with applicable legal obligations.

You remain responsible for the content you upload.

You should not upload information that you do not have the right to disclose or process.

11. Sensitive Information

AstraProject is not designed to require sensitive personal information for ordinary use.

You should avoid submitting unnecessary sensitive information, including:

• Government identification numbers
• Financial account credentials
• Passwords
• Authentication secrets
• Medical records
• Highly sensitive personal documents
• Private information belonging to another person

If you voluntarily provide sensitive information through an AI prompt or uploaded file, that information may be processed as part of providing the requested functionality.

12. Cookies and Similar Technologies

The AstraProject website may use cookies or similar technologies.

These technologies may be used for:

• Authentication
• Security
• Remembering preferences
• Maintaining sessions
• Website functionality
• Analytics
• Measuring performance

AstraProject does not use cookies to sell personal information to advertisers.

Where consent is legally required for non-essential cookies or similar technologies, AstraProject will request the appropriate consent.

13. Analytics

AstraProject may use analytics technologies to understand how the website and application are used.

Analytics information may include:

• Pages visited
• Features used
• Approximate geographic information
• Device information
• Performance information
• Session information

Analytics data may be aggregated or de-identified where appropriate.

AstraProject may discontinue or replace analytics providers at any time.

14. Third-Party Service Providers

AstraProject may use third-party companies to provide infrastructure and operational services.

These providers may support:

• Cloud hosting
• Authentication
• Database infrastructure
• AI processing
• Payment processing
• Email delivery
• Customer support
• Analytics
• Error monitoring
• Security
• Content delivery

Third-party service providers receive only the information reasonably necessary to perform their services.

AstraProject expects service providers handling personal information to implement appropriate security measures.

15. International Data Processing

AstraProject and its service providers may process information in countries other than Canada.

Depending on the AI model, infrastructure provider, payment processor, or other service involved, information may be processed outside Quebec or Canada.

When personal information is transferred outside Quebec, AstraProject will take the measures required by applicable privacy laws, including appropriate assessments and safeguards where required.

International processing may mean that information becomes subject to the laws of the country where it is processed.

16. Data Retention

AstraProject keeps personal information only for as long as reasonably necessary for the purposes for which it was collected, including providing the service, maintaining security, resolving disputes, complying with legal obligations, and enforcing agreements.

Retention periods depend on the type of information.

For example:

• Account information may be retained while an account remains active.
• Billing records may be retained for accounting, tax, fraud prevention, and legal purposes.
• Security logs may be retained for a reasonable period necessary to protect the service.
• Conversations may remain available according to the user's account and application settings.
• Support communications may be retained as necessary to resolve requests and maintain service records.

When information is no longer required, AstraProject will delete, destroy, or anonymize it where reasonably appropriate and technically feasible.

Some information may remain in encrypted backups for a limited period before being automatically overwritten.

17. Account Deletion

You may request deletion of your AstraProject account.

When an account deletion request is accepted, AstraProject will take reasonable steps to delete or anonymize personal information associated with the account.

Some information may be retained when necessary for:

• Legal compliance
• Fraud prevention
• Security
• Accounting
• Tax obligations
• Resolving disputes
• Enforcing agreements
• Protecting AstraProject's rights

Deleting an account may also result in the loss of conversations, projects, settings, and other account-associated information.

Information stored locally on your device may need to be deleted separately.

18. Security

AstraProject uses reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.

Security measures may include:

• Encryption in transit
• Access controls
• Authentication controls
• Secure infrastructure
• Monitoring
• Logging
• Security reviews
• Limited administrative access
• Incident response procedures

No internet service can guarantee absolute security.

You are responsible for protecting your account credentials and device.

You should never share your password or authentication credentials with another person.

19. Privacy Breaches

If AstraProject experiences a security incident involving personal information, we will assess the incident and take the measures required by applicable law.

Where legally required, affected individuals and relevant authorities will be notified.

AstraProject may also take additional measures to contain the incident, investigate its cause, protect affected accounts, and prevent similar incidents.

20. Your Privacy Rights

Depending on where you live and the applicable law, you may have rights concerning your personal information.

These may include the right to:

• Know whether AstraProject holds personal information about you
• Request access to your personal information
• Request correction of inaccurate information
• Request deletion where legally available
• Withdraw consent where applicable
• Ask how your information is collected, used, or disclosed
• Challenge AstraProject's privacy practices
• File a privacy complaint with the appropriate privacy authority

AstraProject will process privacy requests in accordance with applicable law.

21. Quebec Privacy Rights

For users in Quebec, AstraProject respects applicable requirements under Quebec's private-sector privacy legislation, including requirements introduced through Law 25.

These requirements include greater transparency concerning personal-information practices, governance, consent, privacy impact assessments in applicable circumstances, and individual privacy rights.

AstraProject will maintain privacy practices appropriate to the nature and sensitivity of the information it processes.

22. Access and Correction Requests

You may request access to personal information AstraProject holds about you.

You may also request that inaccurate or incomplete information be corrected.

To make a request, contact AstraProject through the privacy or support contact method made available on the official AstraProject website.

AstraProject may need to verify your identity before providing access to personal information or making changes.

This verification is intended to prevent unauthorized access to personal information.

23. Marketing Communications

AstraProject may send service-related communications necessary to operate your account.

Examples include:

• Security notifications
• Account notifications
• Billing information
• Important service announcements
• Changes to the service
• Password or authentication messages

Where permitted by law, AstraProject may also send promotional communications.

You may unsubscribe from promotional communications using the unsubscribe mechanism included in the message.

Unsubscribing from promotional communications does not prevent AstraProject from sending essential service communications.

24. Children and Minors

AstraProject is not designed to knowingly collect unnecessary personal information from children.

If AstraProject becomes aware that it has collected personal information from a child in circumstances where collection was not permitted, AstraProject may take reasonable steps to delete that information.

Parents or legal guardians who believe that a child has provided personal information to AstraProject may contact AstraProject and request appropriate action.

25. Third-Party Websites

AstraProject may contain links to third-party websites or services.

AstraProject does not control those websites.

Once you leave AstraProject's services, the third party's privacy policy may apply.

You should review the privacy practices of third-party services before providing them with personal information.

26. Legal Disclosures

AstraProject may disclose personal information when reasonably necessary to:

• Comply with applicable law
• Respond to valid legal processes
• Respond to lawful government requests
• Protect users
• Protect AstraProject
• Investigate fraud
• Prevent abuse
• Investigate security incidents
• Enforce contractual rights
• Protect property or safety

AstraProject will seek to limit disclosures to information reasonably necessary for the applicable purpose.

27. Business Transfers

If AstraProject is involved in a merger, acquisition, restructuring, financing, sale of assets, bankruptcy, or similar transaction, personal information may be transferred as part of that transaction.

Any such transfer will be handled in accordance with applicable privacy laws.

Where legally required, affected users will receive appropriate notice.

28. Data Minimization

AstraProject aims to collect and process only information reasonably necessary for legitimate purposes.

We do not intentionally collect personal information simply because it is available.

Where a feature can operate without collecting additional personal information, AstraProject may design the feature to minimize collection.

29. Accuracy

AstraProject takes reasonable measures to keep personal information accurate and appropriate for the purposes for which it is used.

You may request correction of inaccurate or incomplete information.

30. Changes to This Privacy Policy

AstraProject may update this Privacy Policy from time to time.

When changes are made, the updated version will be published through the AstraProject website or application.

If a change materially affects how personal information is collected, used, or disclosed, AstraProject will provide additional notice or obtain consent where required by law.

The "Last updated" date at the beginning of this Privacy Policy indicates when the policy was most recently modified.

31. Questions and Privacy Complaints

If you have a question, concern, access request, correction request, deletion request, or complaint concerning privacy, you may contact AstraProject through the official support or privacy contact channel provided on the AstraProject website.

AstraProject will review privacy complaints in a reasonable manner and will attempt to resolve concerns directly.

You may also have the right to contact the applicable privacy regulator if you are not satisfied with AstraProject's response.

For users in Quebec, this may include the Commission d'accès à l'information du Québec.

For matters subject to Canadian federal privacy law, this may include the Office of the Privacy Commissioner of Canada.

32. No Sale of Personal Information

AstraProject does not sell personal information.

AstraProject may nevertheless disclose information to processors and service providers when required to operate the service.

Such processing is performed for legitimate operational purposes and does not constitute a sale of personal information.

33. Your Responsibility

You are responsible for the information you choose to submit through AstraProject.

Before submitting information to an AI model, file, project, or third-party integration, you should consider whether that information should be processed through the selected service.

Do not submit passwords, private encryption keys, financial credentials, government identification numbers, or other highly sensitive information unless absolutely necessary and you understand how the relevant service processes that information.

34. Governing Privacy Principles

AstraProject is committed to privacy principles including:

• Accountability
• Transparency
• Purpose limitation
• Meaningful consent
• Data minimization
• Limited retention
• Accuracy
• Appropriate safeguards
• Individual access
• Correction
• Responsible disclosure

These principles are intended to guide AstraProject's privacy practices and are applied consistently with applicable law.

35. Contact

For privacy questions, requests, or complaints, use the official AstraProject support or privacy contact channel available through the AstraProject website.

AstraProject will make reasonable efforts to respond to privacy requests within the time required by applicable law.

Final Statement

AstraProject is committed to building AI software that respects user privacy.

We aim to collect only the information necessary to operate the service, clearly explain how information is processed, protect personal information with appropriate safeguards, and provide users with meaningful control over their information.

By using AstraProject, you acknowledge this Privacy Policy and understand that AI requests may be processed by the model provider selected for a particular request.

AstraProject — Privacy first. AI without unnecessary data collection.