Privacy Policy

Last updated: October 12, 2026

Effective Date: October 12, 2026

Quick Summary

• Hosted Nova AI runs its core reasoning on providers whose commercial terms exclude training; some supporting tasks and the public chat use free model endpoints that may retain inputs (see section 4.2)
• AstroPulse does not train AI models on your conversations or Customer Data
• You can delete individual conversations and submit privacy requests
• Google Analytics only loads after an explicit analytics opt-in on our website and documentation
• We do not sell your personal information
• You can change optional analytics-cookie preferences at any time
• We support privacy rights requests under applicable laws, including GDPR, CCPA, and CPRA
• Use our contact form for any privacy concerns

1. Information We Collect

1.1 Information You Provide

Account information (name, email, and authentication profile)
Organization and team information
Payment and billing information where applicable (processed by Stripe or our invoicing providers)
Communications with us (support tickets, emails)
Sales inquiry information (contact details, company information, optional requirements, and related correspondence)
API usage and configuration data

1.2 Information Collected Automatically

Device and browser information (browser type, operating system, and user-agent information)
IP address and general location inferred from IP address
Usage data (pages visited, features used, interaction patterns)
Performance data (page load times, error rates)
Referral sources (how you found us)

2. Analytics & Tracking Technologies

2.1 Google Analytics 4 (GA4)

We may use Google Analytics 4 when analytics cookies are enabled. GA4 may collect:

Page views: Which pages you visit and how long you stay
Events: Button clicks, form submissions, feature usage
User journey: How you navigate through our site
Demographics: General location (country/city), language preferences
Technology: Browser, device type, screen resolution
Traffic sources: How you arrived at our site

Data Retention: Analytics retention is governed by our Google Analytics configuration

Consent Controls: Google Analytics is optional and loads only after you grant analytics consent on the website or in /docs. Rejecting optional cookies does not prevent using AstroPulse. You can change your choice through Cookie preferences in the site or docs footer. On withdrawal, we disable new GA measurement and attempt to clear first-party Google Analytics cookies. Consent withdrawal does not erase information already collected by analytics providers; contact us about any applicable deletion request.

Google's Use: Google may use this data to improve their services. See Google's Privacy Policy

2.1.1 Cloudflare Web Analytics

We also use Cloudflare Web Analytics to count page views and measure site performance. It does not set cookies or track you across sites. To provide it, Cloudflare processes your IP address and browser information. See Cloudflare's Privacy Policy.

2.2 Cookies and Browser Storage We Use

Name	Purpose	Duration
_ga	Google Analytics - Distinguishes unique users	Up to 2 years, subject to provider and browser settings
_ga_*	Google Analytics - Stores session and engagement data	Up to 2 years, subject to provider and browser settings
Authentication session cookies	Authentication and session management	Varies by session configuration
cookieConsent (browser storage)	Stores your analytics-cookie preference	Until cleared or updated

2.3 How to Control Your Data

Opt-out of Tracking: Use the Google Analytics Opt-out Browser Add-on
Manage Cookies: Adjust your browser settings to block or delete cookies
Consent Preferences: Select Cookie preferences in the website or documentation footer to accept, reject or withdraw Google Analytics consent at any time

2.4 Right to Erasure

You may exercise your right to erasure ("right to be forgotten") by submitting a request through our contact form. We will process your request in accordance with applicable law.

Note: Analytics providers may process pseudonymous identifiers and device or network information according to their own policies and your consent choices.

3. How We Use Your Information

Service Delivery: Provide and maintain the AstroPulse platform
Account Management: Manage your account and billing
Sales Inquiries: Respond to requests for product and Enterprise information
Communications: Send service updates, security alerts, and support messages
Improvements: Analyze usage to improve features and user experience
Security: Detect and prevent fraud and abuse
Legal Compliance: Comply with legal obligations
Marketing: Send promotional emails (only with your consent; unsubscribe at any time)

3.1 Legal Bases for Processing

Where GDPR or similar law applies, we process personal data under one or more of the following legal bases:

Contract: To provide the services you request
Legitimate interests: To operate, secure, improve, and support our services and respond to inquiries
Consent: For optional analytics cookies and consent-based communications. You can withdraw consent at any time through Cookie Preferences in the footer or the unsubscribe link in our emails, without affecting processing before withdrawal
Legal obligations: To comply with applicable law and enforce our agreements

3.2 Our Role

For account, billing, website and sales information, AstroPulse is the controller. For the data you or your organization submit to the services (Customer Data, including Nova conversations and cluster and application data), AstroPulse processes it on your organization's behalf under our Terms of Service or your Enterprise Agreement. Business customers who need a data processing agreement can request one through our contact form.

4. Nova AI Chat Service

4.1 Chat Data Collection

When you use Nova AI, we collect:

Chat messages: Your conversations with Nova AI
Session data: Conversation history and context
Usage patterns: Features used, commands executed
Feedback: Ratings and feedback you provide on responses

4.2 AI Processing & Data Training

Hosted Nova AI routes each task to a model provider according to its configuration. AstroPulse-managed configurations use:

Anthropic (Claude): planning, investigation, execution and reasoning. Privacy Policy
OpenAI: embeddings used for search. Enterprise Privacy
OpenRouter: supporting tasks such as classifying and summarizing requests, safety checks, some code and image handling, and as a fallback when a primary model is unavailable. These use free model endpoints. Privacy Policy
Google (Gemini API): the public Ask Nova chat on our website. Gemini API Terms

Public Ask Nova: the Ask Nova chat on our public website, which answers visitors who are not signed in, uses Google's Gemini API and free model endpoints served through OpenRouter. Those providers may retain or use inputs under their own terms. Do not enter personal, confidential or sensitive information there.

Additional providers may be enabled for your environment or under an Enterprise Agreement. Provider choices and data-handling terms can vary by configuration. We will update this policy when required.

Where Training Is Excluded

AstroPulse itself does not train AI models on your conversations or Customer Data.

The providers behind Nova's planning, investigation, execution, reasoning and search do not use API data for model training under their commercial terms:

Anthropic API: Data is not used for model training under commercial terms (source)
OpenAI API: API data is not used to train models by default (source)

This does not extend to the free model endpoints described above (OpenRouter and the Gemini API), whose providers may retain or use inputs under their own terms. Contact us to discuss provider restrictions for your organization.

Provider retention periods are governed by each provider's own policies and may change. Refer to Anthropic's Privacy Policy and OpenAI's Enterprise Privacy for current retention information. Customer-provided API credentials and enabled external providers are governed by the applicable provider settings and terms.

4.3 Chat Data Retention

Active conversations: Retained according to your plan and any administrator-configured retention settings
Deleted conversations: Removed from active product access when deleted; residual copies may persist temporarily where required for backups, security, or legal obligations
Aggregated usage data: We may retain de-identified usage data for service improvement

4.4 Your Control Over Chat Data

Delete conversations: Delete individual chats from the product
Export data: Export available conversation data or submit a privacy request
Privacy requests: Contact us to request access to or deletion of personal data

4.5 Shared Chat Sessions

You may share Nova AI conversations with others via public links:

Public links: Anyone with the link can view the shared conversation
No authentication required: Shared sessions are accessible without login
Your responsibility: Do not share conversations containing sensitive or confidential information
Revocation: Shared links remain accessible while sharing is enabled. Contact us if you need help revoking a shared link

5. Astro Platform Data

When you use Astro Platform, we collect:

Cluster configurations: Kubernetes manifests, Helm charts, deployment settings
Infrastructure metadata: Cluster names, node counts, resource allocations
GitOps data: Repository connections, sync status, deployment history
Cloud provider data: Account IDs, region preferences, resource usage

For Self-Managed deployments, data handling depends on your configuration. Local model execution can keep operational data on your infrastructure; enabled external integrations and AI providers process the data sent to them. Cloud-managed deployments store operational data in our infrastructure with encryption at rest.

6. Third-Party Services

We work with third-party services that may process your data. Some support the core service; others process data only when you enable the relevant integration:

Auth0 (Authentication)

Manages user authentication and identity. Privacy Policy

Cloudflare (Security & Analytics)

Protects our public forms against automated abuse (Turnstile) and measures site traffic without cookies (Web Analytics). Privacy Policy

OpenRouter (AI Model Routing)

Serves free model endpoints for Nova's supporting tasks and fallbacks, and for the public Ask Nova chat. Privacy Policy

Google Gemini API (AI Models)

Serves the models behind the public Ask Nova chat on our website. Terms

Stripe (Payments)

Processes payments securely. We never store credit card details. Privacy Policy

Google Cloud Platform (Infrastructure)

May host service data, including stored sales inquiries. Privacy Policy

GitHub (Integration)

For repository integration features. Privacy Policy

Slack (Integration)

For workspace notifications, commands, and sales-inquiry routing when enabled. Privacy Policy

Datadog (Integration)

For monitoring and observability features. Privacy Policy

SendGrid (Email)

For transactional and notification emails. Privacy Policy

AWS, GCP, Azure (Cloud Providers)

For infrastructure management when enabled. We access your cloud accounts via OAuth or credentials you provide. Stored integration credentials are encrypted at rest using AES-256-GCM and encrypted in transit.

Container Registries

Docker Hub, AWS ECR, and Google GCR for container image management when enabled. Data handling depends on the connected registry and deployment configuration.

7. Data Retention

Retention depends on the data category, your organization's plan and settings, whether the service remains active, and applicable legal, accounting, security and backup obligations. We do not apply one universal retention period to every Nova conversation or operational record. Enterprise customers can request the applicable retention schedule and deletion process under their agreement or through our contact form.

Nova Conversations and Investigations: Retained according to applicable plan and organization settings; individual deletions remove records from active product access, while backups or legal/security records can persist for a limited period where necessary
Account and Operational Data: Retained while necessary to provide the service, secure it, meet legal obligations, or resolve disputes, with account deletion requests evaluated under applicable law and contractual commitments
Sales Inquiries: Retained as needed to respond, manage the relationship, and meet legal obligations
Analytics Data: Subject to our configured provider settings; withdrawing future tracking consent does not retroactively delete previously collected data
Legal Records: As required by law

8. Your Privacy Rights

Under GDPR (European Users)

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data ("right to be forgotten")
Portability: Receive your data in a machine-readable format
Restriction: Limit how we process your data
Object: Opt-out of certain processing activities
Automated Decisions: Not be subject to solely automated decision-making

Under CCPA/CPRA (California Users)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following rights:

Right to Know: What personal information we collect, use, disclose, and sell
Right to Delete: Request deletion of your personal information (with certain exceptions)
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out: Opt-out of the sale or sharing of personal information where applicable
Right to Limit: Limit the use and disclosure of sensitive personal information
Right to Non-Discrimination: Equal service and pricing regardless of privacy choices
Right to Data Portability: Receive your data in a portable and readily usable format

Verification: We will verify your identity before processing requests using information you provided during account creation.

Authorized Agents: You may designate an authorized agent to submit requests on your behalf by providing written authorization.

Response Time: We will respond to verified requests within the time frames required by applicable law.

To exercise these rights, use our contact form.

9. Data Security

We implement security measures including:

Encryption in transit and encryption at rest for stored integration credentials and supported service data
Access controls and authentication
Organization-scoped access with approval gates and audit trails

For security inquiries or to report a vulnerability, use our contact form.

10. International Data Transfers

Your data may be processed in the United States and other countries. Where required, appropriate safeguards may include:

Standard Contractual Clauses with service providers
Adequacy decisions by regulatory authorities where applicable

11. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this policy from time to time. We will post the updated version and provide any additional notice required by applicable law.

13. California-Specific Disclosures

13.1 Categories of Personal Information

Depending on how you use the services, we may have collected the following categories of personal information from California residents in the past 12 months:

Identifiers: Name, email address, IP address, account username
Commercial Information: Subscription details, purchase history, payment information
Internet Activity: Browsing history on our site, interaction with services
Geolocation Data: General location (city/state level) derived from IP address
Professional Information: Job title, company name, work email (if provided)
Inferences: Preferences and behavior patterns derived from usage data

13.2 Business Purpose for Collection

We collect personal information for the following business purposes:

Providing and improving our services
Customer support and communication
Security, fraud prevention, and legal compliance
Analytics and service optimization
Marketing (with consent)

13.3 Sale and Sharing of Personal Information

We Do Not Sell Personal Information

AstroPulse does not sell personal information, and does not share it for cross-context behavioral advertising: advertising storage is disabled in our consent settings. Optional analytics technologies are controlled through your cookie preferences. If our practices change, we will update this policy and provide any choices required by applicable law before the change takes effect.

13.4 Sensitive Personal Information

We do not intentionally request sensitive personal information such as Social Security numbers, precise geolocation, racial or ethnic origin, religious beliefs, or genetic data. Do not submit sensitive personal information in chats or integration configuration unless necessary for your authorized use of the service.

13.5 Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. See Section 7 for retention categories and the criteria used to determine their duration.

13.6 Automated Features

Nova AI uses automated features to provide infrastructure recommendations and assistance:

Purpose: Nova AI provides infrastructure management recommendations, not decisions affecting employment, housing, credit, education, or healthcare
Questions: You may contact us with questions about AI-assisted features
Human Oversight: Sensitive write workflows use approval-aware controls and may require explicit user approval before execution

13.7 Shine the Light Law

California residents may use our contact form to request information about disclosures for third-party direct marketing purposes, if applicable.

14. Contact Information

Privacy Contact

AstroPulse, Inc.

A Delaware Corporation

Headquarters: California, United States

Use our contact form

Requests are handled within the time frames required by applicable law.

For EU residents: You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.

For California residents: You may contact the California Attorney General's Office or file a complaint with the California Privacy Protection Agency (CPPA).

Your Privacy Matters: We are committed to protecting your privacy and being transparent about our practices. If you have any questions or concerns, please don't hesitate to contact us.