Privacy Policy
Last updated: September 2026
What we collect
- Account details: your name, email, mobile number, role, and your organization's name, location, website and size.
- Business data you add or connect: clients, campaigns, advertising performance, leads and their contact details, notes and messages.
- Usage and security data: sign-in times, devices and actions taken, kept in an audit log.
How we use it
- To provide the service: show your reports, manage your leads, and sign you in securely.
- To verify your identity with one-time codes by email and SMS.
- To support you, prevent abuse, and meet legal obligations.
We do not sell your data, and we do not use one organization's data for another.
Data from Meta and Google
When you connect Meta or Google, we receive only the data covered by the permissions you grant, such as campaign performance and lead form submissions. We use it only to show it to you inside Astrya and to send conversion results back to those platforms at your request. You can disconnect at any time.
Who can see your data
- People in your organization, according to the roles and access you set.
- Our staff, only when needed to support you or keep the service secure, and every such access is logged.
- Service providers that host and run the platform (hosting, database, email and SMS delivery), under contract.
Retention and deletion
We keep your data while your account is active. If you delete your organization, we delete its data within 30 days, except where the law requires us to keep it. You can ask for a copy of your data at any time.
To delete your data yourself:
- Sign in, open Settings, then Organization, and choose to delete the organization. Its leads, campaigns and files are removed after 30 days.
- To remove only the data we received from Facebook, Instagram or WhatsApp, open Integrations and disconnect that account; the messages and lead records pulled from it are deleted within 30 days.
- To delete only your own user account, open Settings, then Profile.
If you cannot sign in, write to us through the contact form from the email address on the account and ask for deletion. We confirm in writing once it is done, within 30 days of the request.
Security
Data is encrypted in transit, each organization's data is kept separate, and sign-in codes are stored only in hashed form.
Your rights
You can access, correct, export or delete your personal data. Contact us to make a request.
Contact
Privacy questions: contact us at the email shown in your account.