Privacy Policy
Last updated: 10/15/2025
Effective Date: 10/15/2025
Quick Summary
- • We use Google Analytics to understand how you use our site
- • We never sell your personal information
- • You can opt-out of tracking at any time
- • We comply with GDPR, CCPA, and CPRA regulations
- • California headquarters - full compliance with California privacy laws
- • Contact us at privacy@astropulse.io for any concerns
1. Information We Collect
1.1 Information You Provide
- Account information (name, email, password)
- Organization and team information
- Payment and billing information (processed by Stripe)
- Communications with us (support tickets, emails)
- API usage and configuration data
1.2 Information Collected Automatically
- Device information (browser type, operating system, device ID)
- IP address and approximate location (country/city level)
- Usage data (pages visited, features used, interaction patterns)
- Performance data (page load times, error rates)
- Referral sources (how you found us)
2. Google Analytics & Tracking Technologies
2.1 Google Analytics 4 (GA4)
We use Google Analytics 4 to collect and analyze usage information. GA4 collects:
- Page views: Which pages you visit and how long you stay
- Events: Button clicks, form submissions, feature usage
- User journey: How you navigate through our site
- Demographics: General location (country/city), language preferences
- Technology: Browser, device type, screen resolution
- Traffic sources: How you arrived at our site
Data Retention: Google Analytics data is retained for 14 months
IP Anonymization: We enable IP anonymization to protect your privacy
Google's Use: Google may use this data to improve their services. See Google's Privacy Policy
2.2 Cookies We Use
| Cookie Name | Purpose | Duration |
|---|---|---|
| _ga | Google Analytics - Distinguishes unique users | 2 years |
| _ga_* | Google Analytics - Stores session and engagement data | 2 years |
| _gid | Google Analytics - Distinguishes users | 24 hours |
| _gat_gtag_* | Google Analytics - Throttles request rate | 1 minute |
| auth0-* | Authentication and session management | Session to 7 days (varies) |
| cookieConsent | Stores your cookie preferences | 1 year |
2.3 How to Control Your Data
- Opt-out of Tracking: Use the Google Analytics Opt-out Browser Add-on
- Manage Cookies: Adjust your browser settings to block or delete cookies
- Consent Preferences: Update your preferences using our cookie consent banner
- Do Not Track: We honor Do Not Track browser signals
2.4 Right to Erasure
You may exercise your right to erasure ("right to be forgotten") by submitting a request to privacy@astropulse.io. We will process your request within 30 days in accordance with applicable law.
Note: Analytics data collected by Google Analytics is processed in aggregated and anonymized form. Individual user profiles cannot be directly identified from this data.
3. How We Use Your Information
- Service Delivery: Provide and maintain the AstroPulse platform
- Account Management: Manage your account and billing
- Communications: Send service updates, security alerts, and support messages
- Improvements: Analyze usage to improve features and user experience
- Security: Detect and prevent fraud and abuse
- Legal Compliance: Comply with legal obligations
- Marketing: Send promotional emails (only with your consent)
4. Third-Party Services
We work with trusted third-party services that may process your data:
Auth0 (Authentication)
Manages user authentication and identity. Privacy Policy
Stripe (Payments)
Processes payments securely. We never store credit card details. Privacy Policy
Google Cloud Platform (Infrastructure)
Hosts our services and data. Privacy Policy
GitHub (Integration)
For repository integration features. Privacy Policy
5. Data Retention
- Account Data: Retained while your account is active plus 30 days
- Analytics Data: 14 months (Google Analytics)
- Logs: 90 days for security and debugging
- Backups: 30 days for disaster recovery
- Legal Records: As required by law (typically 7 years for financial records)
6. Your Privacy Rights
Under GDPR (European Users)
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate or incomplete data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a machine-readable format
- Restriction: Limit how we process your data
- Object: Opt-out of certain processing activities
- Automated Decisions: Not be subject to solely automated decision-making
Under CCPA/CPRA (California Users)
Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following rights:
- Right to Know: What personal information we collect, use, disclose, and sell
- Right to Delete: Request deletion of your personal information (with certain exceptions)
- Right to Correct: Request correction of inaccurate personal information
- Right to Opt-Out: Opt-out of the sale or sharing of personal information (we do not sell or share personal information)
- Right to Limit: Limit the use and disclosure of sensitive personal information
- Right to Non-Discrimination: Equal service and pricing regardless of privacy choices
- Right to Data Portability: Receive your data in a portable and readily usable format
Verification: We will verify your identity before processing requests using information you provided during account creation.
Authorized Agents: You may designate an authorized agent to submit requests on your behalf by providing written authorization.
Response Time: We will respond to verified requests within 45 days (may extend by 45 days if needed).
To exercise these rights, contact us at privacy@astropulse.io
7. Data Security
We implement industry-standard security measures including:
- Encryption in transit (TLS/SSL) and at rest (AES-256)
- Regular security audits and penetration testing
- Access controls and authentication
- Regular backups and disaster recovery procedures
- Employee training on data protection
8. International Data Transfers
Your data may be processed in the United States and other countries. We ensure appropriate safeguards through:
- Standard Contractual Clauses with service providers
- Privacy Shield certification (where applicable)
- Adequacy decisions by regulatory authorities
9. Children's Privacy
Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.
10. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes via email or a prominent notice on our website. Your continued use after changes constitutes acceptance.
11. California-Specific Disclosures
11.1 Categories of Personal Information
In the past 12 months, we have collected the following categories of personal information from California residents:
- Identifiers: Name, email address, IP address, account username
- Commercial Information: Subscription details, purchase history, payment information
- Internet Activity: Browsing history on our site, interaction with services
- Geolocation Data: General location (city/state level) derived from IP address
- Professional Information: Job title, company name, work email (if provided)
- Inferences: Preferences and behavior patterns derived from usage data
11.2 Business Purpose for Collection
We collect personal information for the following business purposes:
- Providing and improving our services
- Customer support and communication
- Security, fraud prevention, and legal compliance
- Analytics and service optimization
- Marketing (with consent)
11.3 Sale and Sharing of Personal Information
We Do Not Sell Personal Information
AstroPulse does not sell personal information to third parties and has not sold personal information in the past 12 months. We do not share personal information for cross-context behavioral advertising.
11.4 Sensitive Personal Information
We do not collect or process sensitive personal information as defined by the CPRA (such as Social Security numbers, precise geolocation, racial or ethnic origin, religious beliefs, or genetic data) except for account credentials, which are used solely for authentication purposes.
11.5 Retention Periods
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. See Section 5 for specific retention periods.
11.6 Shine the Light Law
Under California Civil Code Section 1798.83 ("Shine the Light" law), California residents may request information about our disclosure of personal information to third parties for direct marketing purposes. As we do not share personal information with third parties for their direct marketing purposes, we are exempt from this requirement.
12. Contact Information
Data Protection Officer
AstroPulse, Inc.
A Delaware Corporation
Headquarters: California, United States
Email: privacy@astropulse.io
General: contact@astropulse.io
Legal: legal@astropulse.io
Response Time: Within 30 days (45 days for California requests)
For EU residents: You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.
For California residents: You may contact the California Attorney General's Office or file a complaint with the California Privacy Protection Agency (CPPA).
Your Privacy Matters: We are committed to protecting your privacy and being transparent about our practices. If you have any questions or concerns, please don't hesitate to contact us.