Privacy Policy

When you create an account, we collect the information you provide, which may include:

• your name (first, middle, last);
• work email address;
• company / firm, job title, and organization type;
• phone number and country (optional); and
• your marketing-communication preference.

We also collect limited technical data automatically — such as IP address, device and browser type, and authentication/session events — to operate and secure the Service. Authentication is handled by our identity provider, which processes your credentials and session data on our behalf. If you sign in with Google or Microsoft, that provider shares basic profile information (name and email) with us.

• to create and administer your account and authenticate you;
• to provide, maintain, secure, and improve the Service;
• to communicate with you about your account, security, and service updates;
• with your consent, to send market updates and product news (you can opt out anytime); and
• to comply with legal obligations and enforce our Terms.

Where the GDPR or UK GDPR applies, we process personal data on the basis of: performance of a contract (providing the Service to you), our legitimate interests (securing and improving the Service), consent (for marketing emails and non-essential cookies), and compliance with legal obligations.

We use cookies to keep you signed in (a strictly necessary authentication cookie set by our identity provider) and a local browser store to remember preferences such as your light/dark theme. We do not currently use analytics or advertising cookies. If we introduce any non-essential cookies in the future, we will use them only with your consent. You can control cookies through your browser settings.

We do not sell your personal information. We share it only with:

• Service providers that process data on our behalf — including our authentication provider, email-delivery provider, and hosting/infrastructure provider — under contractual confidentiality and security obligations;
• Legal and safety recipients, where required by law, regulation, legal process, or to protect rights and safety; and
• a successor in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We retain personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated personal data.

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, delete, or port your personal data; to object to or restrict certain processing; and to withdraw consent. Residents of the EEA/UK and of California (and other U.S. states with privacy laws) have additional rights, including the right to opt out of certain sharing and to be free from discrimination for exercising those rights. To make a request, contact us using the details below.

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal data.

The Service is intended for business professionals and is not directed to individuals under 18. We do not knowingly collect personal information from children.

We may update this Policy from time to time; material changes will be reflected by a new “Last updated” date. For privacy questions or to exercise your rights, contact privacy@astercre.com.