Last updated: 2026-07-08
This Policy explains what we collect, why, and your choices. We keep data collection to what we need to run AstraBourse for you.
We use your information to provide and secure the Service, process subscriptions, respond to support requests, prevent abuse (including detecting shared accounts), and comply with legal obligations. We do not sell your personal data.
We use a strictly-necessary httpOnly cookie to keep you signed in, and browser local storage to remember your session and display preferences (theme, language). We do not use third-party advertising or tracking cookies.
We share data only with service providers that help us operate — for example payment processors, email delivery, and cloud hosting — under agreements that limit their use of it. We may disclose data where required by law.
We keep your data while your account is active and as needed to meet legal, tax, and security obligations. When you delete your account we remove or anonymise your personal data within a reasonable period, except records we must retain by law.
We protect data with encryption in transit (HTTPS/HSTS), Argon2 password hashing, strict security headers and a content-security policy, rate limiting, and least-privilege access. No system is perfectly secure, but we work to safeguard your information.
Subject to applicable law, you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact us at the address below.
Your data may be processed in countries other than yours. Where it is, we take steps to ensure it receives an adequate level of protection.
We may update this Policy; we will post the new version here and update the “last updated” date. Material changes will be communicated where appropriate.
Privacy questions or requests? Contact us at [email protected].