Privacy Policy

Last updated: June 2, 2026

Effective Date: June 2, 2026

Quick Summary

• Hosted Nova AI chats may be processed by configured AI providers under commercial API terms and defaults that do not use API data for model training
• You can delete individual conversations and submit privacy requests
• We may use Google Analytics when analytics cookies are enabled
• We do not sell your personal information
• You can change optional analytics-cookie preferences at any time
• We support privacy rights requests under applicable laws, including GDPR, CCPA, and CPRA
• Contact us at privacy@astropulse.io for any concerns

1. Information We Collect

1.1 Information You Provide

Account information (name, email, and authentication profile)
Organization and team information
Payment and billing information where applicable (processed by Stripe or our invoicing providers)
Communications with us (support tickets, emails)
Sales inquiry information (contact details, company information, optional requirements, and related correspondence)
API usage and configuration data

1.2 Information Collected Automatically

Device and browser information (browser type, operating system, and user-agent information)
IP address and general location inferred from IP address
Usage data (pages visited, features used, interaction patterns)
Performance data (page load times, error rates)
Referral sources (how you found us)

2. Analytics & Tracking Technologies

2.1 Google Analytics 4 (GA4)

We may use Google Analytics 4 when analytics cookies are enabled. GA4 may collect:

Page views: Which pages you visit and how long you stay
Events: Button clicks, form submissions, feature usage
User journey: How you navigate through our site
Demographics: General location (country/city), language preferences
Technology: Browser, device type, screen resolution
Traffic sources: How you arrived at our site

Data Retention: Analytics retention is governed by our Google Analytics configuration

Consent Controls: Analytics cookies are controlled through our cookie consent banner

Google's Use: Google may use this data to improve their services. See Google's Privacy Policy

2.2 Cookies and Browser Storage We Use

Name	Purpose	Duration
_ga	Google Analytics - Distinguishes unique users	2 years
_ga_*	Google Analytics - Stores session and engagement data	2 years
_gid	Google Analytics - Distinguishes users	24 hours
_gat_gtag_*	Google Analytics - Throttles request rate	1 minute
Authentication session cookies	Authentication and session management	Varies by session configuration
cookieConsent (browser storage)	Stores your analytics-cookie preference	Until cleared or updated

2.3 How to Control Your Data

Opt-out of Tracking: Use the Google Analytics Opt-out Browser Add-on
Manage Cookies: Adjust your browser settings to block or delete cookies
Consent Preferences: Select Cookie Preferences in the website footer to update your analytics-cookie choice

2.4 Right to Erasure

You may exercise your right to erasure ("right to be forgotten") by submitting a request to privacy@astropulse.io. We will process your request in accordance with applicable law.

Note: Analytics providers may process pseudonymous identifiers and device or network information according to their own policies and your consent choices.

3. How We Use Your Information

Service Delivery: Provide and maintain the AstroPulse platform
Account Management: Manage your account and billing
Sales Inquiries: Respond to requests for product and Enterprise information
Communications: Send service updates, security alerts, and support messages
Improvements: Analyze usage to improve features and user experience
Security: Detect and prevent fraud and abuse
Legal Compliance: Comply with legal obligations
Marketing: Send promotional emails (only with your consent)

3.1 Legal Bases for Processing

Where GDPR or similar law applies, we process personal data under one or more of the following legal bases:

Contract: To provide the services you request
Legitimate interests: To operate, secure, improve, and support our services and respond to inquiries
Consent: For optional analytics cookies and consent-based communications
Legal obligations: To comply with applicable law and enforce our agreements

4. Nova AI Chat Service

4.1 Chat Data Collection

When you use Nova AI, we collect:

Chat messages: Your conversations with Nova AI
Session data: Conversation history and context
Usage patterns: Features used, commands executed
Feedback: Ratings and feedback you provide on responses

4.2 AI Processing & Data Training

Hosted Nova AI conversations may be routed to external AI providers according to the configured model lane. AstroPulse-managed configurations may use providers including:

Anthropic (Claude): Privacy Policy
OpenAI: Enterprise Privacy

Additional providers may be enabled for your environment or under an Enterprise Agreement. Provider choices and data-handling terms can vary by configuration. We will update this policy when required.

Managed API Data Is Not Used for AI Training by Default

For AstroPulse-managed API access, we select commercial API terms and defaults that do not use API data for model training:

Anthropic API: Data is not used for model training under commercial terms (source)
OpenAI API: API data is not used to train models by default (source)

Provider retention periods are governed by each provider's own policies and may change. Refer to Anthropic's Privacy Policy and OpenAI's Enterprise Privacy for current retention information. Customer-provided API credentials and enabled external providers are governed by the applicable provider settings and terms.

4.3 Chat Data Retention

Active conversations: Retained according to your plan and any administrator-configured retention settings
Deleted conversations: Removed from active product access when deleted; residual copies may persist temporarily where required for backups, security, or legal obligations
Aggregated usage data: We may retain de-identified usage data for service improvement

4.4 Your Control Over Chat Data

Delete conversations: Delete individual chats from the product
Export data: Export available conversation data or submit a privacy request
Privacy requests: Contact us to request access to or deletion of personal data

4.5 Shared Chat Sessions

You may share Nova AI conversations with others via public links:

Public links: Anyone with the link can view the shared conversation
No authentication required: Shared sessions are accessible without login
Your responsibility: Do not share conversations containing sensitive or confidential information
Revocation: Shared links remain accessible while sharing is enabled. Contact us if you need help revoking a shared link

5. Astro Platform Data

When you use Astro Platform for Kubernetes management, we collect:

Cluster configurations: Kubernetes manifests, Helm charts, deployment settings
Infrastructure metadata: Cluster names, node counts, resource allocations
GitOps data: Repository connections, sync status, deployment history
Cloud provider data: Account IDs, region preferences, resource usage

For Self-Managed deployments, data handling depends on your configuration. Local model execution can keep operational data on your infrastructure; enabled external integrations and AI providers process the data sent to them. Cloud-managed deployments store operational data in our infrastructure with encryption at rest.

6. Third-Party Services

We work with third-party services that may process your data. Some support the core service; others process data only when you enable the relevant integration:

Auth0 (Authentication)

Manages user authentication and identity. Privacy Policy

Stripe (Payments)

Processes payments securely. We never store credit card details. Privacy Policy

Google Cloud Platform (Infrastructure)

May host service data, including stored sales inquiries. Privacy Policy

GitHub (Integration)

For repository integration features. Privacy Policy

Slack (Integration)

For workspace notifications, commands, and sales-inquiry routing when enabled. Privacy Policy

Datadog (Integration)

For monitoring and observability features. Privacy Policy

SendGrid (Email)

For transactional and notification emails. Privacy Policy

AWS, GCP, Azure (Cloud Providers)

For infrastructure management when enabled. We access your cloud accounts via OAuth or credentials you provide. Stored integration credentials are encrypted at rest using AES-256-GCM and encrypted in transit.

Container Registries

Docker Hub, AWS ECR, and Google GCR for container image management when enabled. Data handling depends on the connected registry and deployment configuration.

7. Data Retention

Chat Data: Retained according to your plan and any administrator-configured retention settings
Account and Operational Data: Retained as needed to provide the service and meet legal obligations
Sales Inquiries: Retained as needed to respond, manage the relationship, and meet legal obligations
Analytics Data: Retained according to our configured analytics-provider settings
Legal Records: As required by law

8. Your Privacy Rights

Under GDPR (European Users)

Access: Request a copy of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your data ("right to be forgotten")
Portability: Receive your data in a machine-readable format
Restriction: Limit how we process your data
Object: Opt-out of certain processing activities
Automated Decisions: Not be subject to solely automated decision-making

Under CCPA/CPRA (California Users)

Under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA), California residents have the following rights:

Right to Know: What personal information we collect, use, disclose, and sell
Right to Delete: Request deletion of your personal information (with certain exceptions)
Right to Correct: Request correction of inaccurate personal information
Right to Opt-Out: Opt-out of the sale or sharing of personal information where applicable
Right to Limit: Limit the use and disclosure of sensitive personal information
Right to Non-Discrimination: Equal service and pricing regardless of privacy choices
Right to Data Portability: Receive your data in a portable and readily usable format

Verification: We will verify your identity before processing requests using information you provided during account creation.

Authorized Agents: You may designate an authorized agent to submit requests on your behalf by providing written authorization.

Response Time: We will respond to verified requests within the time frames required by applicable law.

To exercise these rights, contact us at privacy@astropulse.io

9. Data Security

We implement security measures including:

Encryption in transit and encryption at rest for stored integration credentials and supported service data
Access controls and authentication
Organization-scoped access with approval gates and audit trails

For security inquiries or to report a vulnerability, contact contact@astropulse.io.

10. International Data Transfers

Your data may be processed in the United States and other countries. Where required, appropriate safeguards may include:

Standard Contractual Clauses with service providers
Adequacy decisions by regulatory authorities where applicable

11. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Policy

We may update this policy from time to time. We will post the updated version and provide any additional notice required by applicable law.

13. California-Specific Disclosures

13.1 Categories of Personal Information

Depending on how you use the services, we may have collected the following categories of personal information from California residents in the past 12 months:

Identifiers: Name, email address, IP address, account username
Commercial Information: Subscription details, purchase history, payment information
Internet Activity: Browsing history on our site, interaction with services
Geolocation Data: General location (city/state level) derived from IP address
Professional Information: Job title, company name, work email (if provided)
Inferences: Preferences and behavior patterns derived from usage data

13.2 Business Purpose for Collection

We collect personal information for the following business purposes:

Providing and improving our services
Customer support and communication
Security, fraud prevention, and legal compliance
Analytics and service optimization
Marketing (with consent)

13.3 Sale and Sharing of Personal Information

We Do Not Sell Personal Information

AstroPulse does not sell personal information. Optional analytics technologies are controlled through your cookie preferences. If our practices change, we will update this policy and provide any choices required by applicable law before the change takes effect.

13.4 Sensitive Personal Information

We do not intentionally request sensitive personal information such as Social Security numbers, precise geolocation, racial or ethnic origin, religious beliefs, or genetic data. Do not submit sensitive personal information in chats or integration configuration unless necessary for your authorized use of the service.

13.5 Retention Periods

We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. See Section 7 for specific retention periods.

13.6 Automated Features

Nova AI uses automated features to provide infrastructure recommendations and assistance:

Purpose: Nova AI provides infrastructure management recommendations, not decisions affecting employment, housing, credit, education, or healthcare
Questions: You may contact us with questions about AI-assisted features
Human Oversight: Sensitive write workflows use approval-aware controls and may require explicit user approval before execution

13.7 Shine the Light Law

California residents may contact privacy@astropulse.io to request information about disclosures for third-party direct marketing purposes, if applicable.

14. Contact Information

Privacy Contact

AstroPulse, Inc.

A Delaware Corporation

Headquarters: California, United States

Email: privacy@astropulse.io

General: contact@astropulse.io

Legal: legal@astropulse.io

Requests are handled within the time frames required by applicable law.

For EU residents: You have the right to lodge a complaint with your local supervisory authority if you believe we have violated your privacy rights.

For California residents: You may contact the California Attorney General's Office or file a complaint with the California Privacy Protection Agency (CPPA).

Your Privacy Matters: We are committed to protecting your privacy and being transparent about our practices. If you have any questions or concerns, please don't hesitate to contact us.