Privacy Policy

Who we are. Astrulite is operated by Howland Liva ("Astrulite", "we", "us"). Howland Liva is the data controller for personal data processed through the Astrulite service and website.

What we collect.

• Account data — name, email address, hashed password or third-party sign-in identifier, display name, and profile settings.
• Content you create — chat prompts, projects, designs, BOMs, CAD artifacts, uploaded files, and marketplace listings.
• Usage and device data — pages viewed, features used, credit consumption, IP address, browser and device identifiers, and diagnostic logs.
• Support communications — messages you send us and metadata about those messages.
• Cookies and similar technologies — strictly necessary cookies for authentication and session management, and limited first-party analytics cookies.

Payment card details are entered directly into our payment provider (Paddle) and are never stored by Astrulite.

How we use it and the legal basis.

• To provide the service and run the Astrulite engine for you — performance of a contract.
• To secure the service, prevent fraud and abuse, and keep records — legitimate interests and legal obligation.
• To improve product quality, debug issues, and understand feature usage — legitimate interests.
• To send transactional emails about your account, purchases, and important service changes — performance of a contract.
• To send optional marketing emails — consent, which you can withdraw at any time.

We do not sell your personal data. We do not use your private designs to train models without your explicit opt-in.

Who we share data with. We share personal data only with the following categories of recipients, and only as needed:

• Paddle.com Market Ltd. — our Merchant of Record. Paddle handles all orders, payment processing, tax calculation, invoicing, subscription management, refunds, and related customer-service inquiries. See Paddle's privacy notice at paddle.com/legal/privacy.
• Infrastructure and platform providers — cloud hosting, database, authentication, email delivery, error monitoring, and AI inference providers acting as our processors. A current list of subprocessors is available on request.
• Professional advisers — legal, accounting, and compliance advisers under duties of confidentiality.
• Authorities — where required by law, court order, or to protect our rights and users.

International transfers. Where personal data leaves your jurisdiction, we rely on appropriate safeguards such as Standard Contractual Clauses or applicable adequacy decisions.

Retention. We retain personal data only as long as needed for the purposes above:

• Account data — for the life of your account, then deleted or anonymised within 90 days of account closure.
• Content you create — for the life of your account; you can delete individual projects at any time.
• Order, invoice and tax records — retained by Paddle and by us for up to 10 years to meet tax and accounting obligations.
• Support communications — up to 3 years after the ticket is closed.
• Server and security logs — up to 12 months.

Security. We apply appropriate technical and organisational measures, including encryption in transit (TLS), encryption at rest for the primary database and file storage, role-based access controls, audit logging, least-privilege service credentials, and periodic access reviews.

Your rights. Depending on where you live, you may have the right to access, rectify, delete, restrict or object to processing, port your data, and withdraw consent. You may also lodge a complaint with your local data-protection authority. To exercise these rights, email privacy@astrulite.com. We will respond within one month.

Cookies. We use strictly necessary cookies for sign-in and session management, and limited first-party analytics cookies to measure aggregate usage. You can manage cookies through your browser settings.

Children. Astrulite is not directed to children under 16 and we do not knowingly collect personal data from them.

Changes. We will post material changes to this notice on this page and, where appropriate, notify you by email.

Contact. Howland Liva — privacy@astrulite.com.