The short version. We collect what we need to run your account, your strategies and your billing, and to keep the Services safe and lawful. We do not sell your personal data. Wallet addresses and transactions are recorded on public blockchains, which nobody, including us, can change or delete.
1Who we are
This Privacy Policy explains how Astra Technologies LLC, a limited liability company formed under the laws of the Cayman Islands ("Astra", "we", "us"), collects, uses, shares and protects personal data when you use the Astra Market Maker website, web application and related services (the "Services"). Words defined in our Terms of Service have the same meaning here.
Astra is the data controller of your personal data for the purposes of the Data Protection Act of the Cayman Islands (as revised) and, where they apply to you, the EU General Data Protection Regulation and the UK GDPR.
2The data we collect
| Category | Examples |
|---|---|
| Account data | Email address; name and profile details shared by Google or Apple if you sign in with them; account ID; sign-in method; account settings. |
| Wallet and blockchain data | Public wallet addresses; wallet names you choose; balances; Project Token contract addresses; transaction hashes and history; Strategy settings and results. |
| Billing data | Plan, billing period, invoices, payment amounts, the asset and network used, paying wallet address and payment transaction hash. We do not collect bank card details. |
| Security data | 2FA status, sign-in times, IP address, device and browser type, approximate location derived from IP, security events such as key exports and withdrawals. |
| Support data | Messages and files you send us, and your Telegram username or email if you contact us there. |
| Usage data | Pages and features used, clicks, errors, performance data, referring pages and preferences. |
| Verification data | Only if we ask: identity documents, company documents, proof of authority over a Project Token, source of funds information and screening results. |
Private keys. Keys of wallets created for you are generated and secured by our wallet infrastructure provider. Keys you import are stored only in encrypted form and are used only to sign transactions you have instructed. We never ask for your seed phrase, and we do not use private keys for any other purpose.
We collect data directly from you, automatically when you use the Services, and from third parties such as sign-in providers, wallet infrastructure providers, public blockchains, market data providers and compliance screening providers.
3How we use your data, and why
| Purpose | Legal basis |
|---|---|
| Create and run your account, wallets and Strategies, and execute your instructions | Performance of our contract with you |
| Process payments, issue receipts and manage your Plan | Performance of contract; legal obligation (records) |
| Keep the Services and your account secure, including 2FA, fraud prevention and abuse detection | Legitimate interests; performance of contract |
| Sanctions screening, anti-money-laundering checks, market abuse prevention and responding to authorities | Legal obligation; legitimate interests |
| Provide support and send service messages, such as receipts, security alerts and expiry reminders | Performance of contract; legitimate interests |
| Assess Cash-out Guarantee claims | Performance of contract |
| Improve, debug and develop the Services, and produce aggregated statistics | Legitimate interests |
| Send product news and offers | Consent or legitimate interests, and you can opt out at any time |
| Establish, exercise or defend legal claims and enforce our Terms | Legitimate interests; legal obligation |
Where we rely on legitimate interests, we have balanced them against your rights. Where we rely on consent, you may withdraw it at any time without affecting earlier processing.
4Public blockchains
Transactions made through the Services are recorded on public blockchains. Wallet addresses, amounts and transaction details are visible to anyone, are permanent, and may be linked to you by third parties using analytics. Astra does not control blockchains and cannot edit or delete information recorded on them. This affects your rights to correction and erasure for that data.
6International transfers
We and our service providers operate in several countries, so your data may be processed outside the Cayman Islands and outside your own country, including in countries that may not offer the same level of protection. Where required, we use appropriate safeguards, such as standard contractual clauses or equivalent measures, to protect transferred data.
7How long we keep data
We keep personal data for as long as your account is active and for as long as needed for the purposes in this Policy. After your account closes, we generally keep account, billing, transaction and verification records for at least five years to meet anti-money-laundering, tax and record-keeping obligations and to deal with possible claims. Security and usage logs are generally kept for up to 24 months. We then delete or anonymise data, unless the law requires us to keep it longer.
8Security
We use technical and organisational measures designed to protect personal data, including encryption in transit and at rest, encrypted storage of imported keys, access controls, 2FA for sensitive actions, and monitoring. No system is completely secure, and we cannot guarantee the security of data sent over the internet or stored on your devices. Keep your devices, email account and sign-in methods secure.
9Your rights
Depending on where you live, you may have the right to:
- be told about and access the personal data we hold about you;
- have inaccurate data corrected;
- have data deleted, or its processing restricted, where the law allows;
- object to processing based on legitimate interests, and to direct marketing at any time;
- receive your data in a portable format;
- withdraw consent; and
- complain to a data protection authority. In the Cayman Islands this is the Office of the Ombudsman. If you are in the EEA or UK, you may also complain to your local authority.
To use your rights, contact privacy@byastra.ai. We may need to verify your identity first. We will respond within the time required by law. Some requests may be limited by our legal obligations, such as record-keeping duties, or by the nature of public blockchains.
11Automated decisions
Strategies execute automatically according to the settings you choose. We also use automated screening to detect sanctions exposure, fraud and abuse, which may result in a transaction or account being blocked or reviewed. You can ask for a human review of any such decision by contacting us.
12Children
The Services are only for people aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, contact us and we will delete it.
13Changes to this Policy
We may update this Policy from time to time. We will post the new version with a new "Last updated" date and, for material changes, notify you through the Services or by email.
14Contact
Astra Technologies LLC, Cayman Islands
Privacy requests: privacy@byastra.ai
Support: @Astra_HelpDesk_Bot on Telegram