Privacy Policy

When you create an account, we collect the information you provide, which may include:

• your name (first, middle, last);
• work email address;
• company / firm, job title, and organization type;
• phone number and country (optional); and
• your marketing-communication preference.

We also collect limited technical data automatically — such as IP address, device and browser type, and authentication/session events — to operate and secure the Service. Authentication is handled by our identity provider, which processes your credentials and session data on our behalf. If you sign in with Google or Microsoft, that provider shares basic profile information (name and email) with us.

We use a privacy-respecting product-analytics service to understand how the Service is used — the pages and features you view, clicks, and navigation paths — and we may record interaction sessions (with all form inputs and sensitive fields automatically masked) to diagnose problems and improve the product. This analytics relies on local browser storage rather than cookies, and for signed-in users is associated with your account so we can understand usage at the firm level. We do not use it for advertising and do not track you across other websites.

• to create and administer your account and authenticate you;
• to provide, maintain, secure, and improve the Service;
• to communicate with you about your account, security, and service updates;
• with your consent, to send market updates and product news (you can opt out anytime); and
• to comply with legal obligations and enforce our Terms.

Where the GDPR or UK GDPR applies, we process personal data on the basis of: performance of a contract (providing the Service to you), our legitimate interests (securing and improving the Service), consent (for marketing emails and non-essential cookies), and compliance with legal obligations.

We use cookies to keep you signed in (a strictly necessary authentication cookie set by our identity provider) and a local browser store to remember preferences such as your light/dark theme. Our product-analytics tool (described above) likewise uses local browser storage rather than cookies. We do not use analytics or advertising cookies, and we do not track you across other websites. If we introduce any non-essential cookies in the future, we will use them only with your consent. You can control cookies and clear local storage through your browser settings.

We do not sell your personal information. We share it only with:

• Service providers that process data on our behalf — including our authentication provider, product-analytics provider, email-delivery provider, and hosting/infrastructure provider — under contractual confidentiality and security obligations;
• Content-delivery origins your browser contacts directly when rendering the Service — web fonts (Google Fonts) and, on map pages, map tiles (CARTO / OpenStreetMap) — which receive your IP address and standard request metadata as a technical consequence of serving that content;
• Legal and safety recipients, where required by law, regulation, legal process, or to protect rights and safety; and
• a successor in connection with a merger, acquisition, or sale of assets, subject to this Policy.

We retain personal information for as long as your account is active and as needed to provide the Service, then for a reasonable period to comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion of your account and associated personal data.

We use administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have the right to access, correct, delete, or port your personal data; to object to or restrict certain processing; and to withdraw consent. Residents of the EEA/UK and of California (and other U.S. states with privacy laws) have additional rights, including the right to opt out of certain sharing and to be free from discrimination for exercising those rights. To make a request, contact us using the details below.

We may process and store information in the United States and other countries. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers of personal data.

The Service is intended for business professionals and is not directed to individuals under 18. We do not knowingly collect personal information from children.

We may update this Policy from time to time; material changes will be reflected by a new “Last updated” date. For privacy questions or to exercise your rights, contact privacy@astercre.com.