Privacy Policy

• We do not sell your personal data.
• We do not use your data for advertising or share it with advertisers.
• We process your data only to provide the Astra service to you.
• You can delete your account, and the data associated with it, at any time from within the app.

To do its job, Astra processes data from the accounts and connectors you choose to connect — for example your email and calendar. This can include message and event content, senders and participants, times, and related metadata. Astra reads this data to surface what matters, draft suggestions, and display insights.

You decide what to connect, and you can disconnect a connector at any time. Astra proposes actions but does not send email or change your calendar without your explicit approval.

• To organize and prioritize your day across the surfaces in the app (Today, Tasks, Discover, Calendar, and more).
• To power Ask Astra and voice, including using AI to chat with you and generate insights.
• To personalize your experience based on the preferences and interests stored in Memory.
• To operate, secure, and improve the service.

Astra uses AI models to understand your connected data, answer your questions, and present insights. Content relevant to your request may be sent to our AI subprocessor to generate a response. We do not permit your data to be used to train third-party foundation models.

We rely on a small set of trusted infrastructure providers to run Astra:

• Google Cloud Platform (GCP) — hosting, storage, and infrastructure.
• OpenAI — AI model inference for chat and insights.

These subprocessors process data only on our behalf and under contractual confidentiality and security obligations.

We retain your data only as long as it is useful to you and necessary to provide the service. When you delete your account from within the app, we delete your associated personal data from our active systems, subject to limited retention required for security, fraud prevention, or legal obligations.

We use industry-standard safeguards to protect your data in transit and at rest. Astra has completed a CASA (Cloud Application Security Assessment) Tier 2 review against the App Defense Alliance standard. No method of transmission or storage is ever completely secure, but we work continuously to protect your information.

• Connect or disconnect any data source at any time.
• Adjust how much external context (such as web search) Astra uses, including a privacy-filtered mode.
• Delete your account and associated data from within the app.
• Contact us to request access to or deletion of your personal data.

Astra is not directed to children under 13 (or the age required by your jurisdiction), and we do not knowingly collect their data.

We may update this policy from time to time. Material changes will be reflected by the “last updated” date above and, where appropriate, communicated in the app.

Questions about privacy? Email us at mail@heyastra.xyz.