Privacy Policy
This Privacy Policy explains how Astrape AI Private Limited ("Astrape AI", "we", "us" or "our") collects, uses, shares, and protects personal data when you visit our website, use our platform, or purchase our services. It also describes your rights under the EU and UK General Data Protection Regulation ("GDPR") and India's Digital Personal Data Protection Act, 2023 ("DPDP Act").
We are committed to protecting your privacy. We only process personal data in accordance with this policy and applicable data protection law. By using our website or services, you acknowledge the practices described here.
01Who we are
Astrape AI Private Limited is the data controller responsible for your personal data. Our registered office is:
21st Floor, 2104, C-Wing, Raheja Ridgewood,
Goregaon East, Mumbai, Maharashtra 400063, India.
For any privacy-related query, contact us at contact@astrape.ai.
02Data we collect
We collect personal data that you provide directly, data generated as you use our platform, and data collected automatically. This may include:
- Identity & contact data — name, email address, organisation, job title, and account credentials.
- Transaction data — billing details and records of purchases. Payment card details are processed by our payment provider and are not stored by us.
- Usage & technical data — IP address, browser and device type, pages viewed, app activity, and request logs used to operate and secure the service.
- Content data — applications, files, and data you create or upload while using the platform.
- Preference & communication data — your marketing preferences and the content of enquiries or survey responses you send us.
We do not intentionally collect special categories of data (such as health, religion, or biometric data) and ask that you do not submit such data unless strictly necessary.
03How and why we use data
We use personal data only for specified, legitimate purposes, including to:
- create and administer your account and provide the platform and its features;
- process payments and manage subscriptions;
- respond to enquiries and provide customer support;
- maintain security, prevent fraud, and keep audit and access logs;
- improve and develop our products through analytics;
- send service messages and, where permitted, marketing communications;
- conduct market research and surveys; and
- comply with legal, regulatory, and accounting obligations.
04Legal bases for processing (GDPR)
Where the GDPR applies, we rely on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Providing the platform and account management | Performance of a contract (Art. 6(1)(b)) |
| Payments and statutory record-keeping | Legal obligation (Art. 6(1)(c)) |
| Security, fraud prevention, and product improvement | Legitimate interests (Art. 6(1)(f)) |
| Marketing emails and non-essential cookies | Consent (Art. 6(1)(a)) |
Where we rely on consent, you may withdraw it at any time without affecting processing carried out before withdrawal. Where we rely on legitimate interests, we have balanced those interests against your rights and you may object as described in Your rights.
05Cookies
A cookie is a small file stored on your device. We use:
- Essential cookies — required to sign you in and keep the service secure. These cannot be disabled.
- Analytics cookies — help us understand which pages are used so we can improve the site. These are used for statistical purposes and are set only with your consent.
Most browsers let you refuse or delete cookies through their settings. Blocking essential cookies may prevent parts of the platform from working. Analytics data is aggregated and does not give us access to your device or any data beyond what you choose to share.
06Sharing and third parties
We do not sell, rent, or trade your personal data. We share it only with:
- Service providers (processors) acting on our instructions — including hosting providers and our payment processor, Razorpay — under contracts that require appropriate safeguards;
- Authorities or advisers where required by law, regulation, or to establish or defend legal claims; and
- A successor entity in connection with a merger, acquisition, or reorganisation, subject to this policy.
07International transfers
We are based in India, and your data may be processed in India or other countries where we or our providers operate. Where personal data is transferred outside the EEA or UK, we put in place appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK Addendum), or rely on an adequacy decision. A copy of the relevant safeguard is available on request.
08Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements. Account and content data is retained while your account is active and for a reasonable period afterwards; billing records are retained as required by tax and company law. When data is no longer needed, we securely delete or anonymise it.
09Security
We maintain technical and organisational measures designed to protect personal data against unauthorised access, loss, or disclosure — including access controls, encryption in transit, role-based permissions, and logging. No method of transmission or storage is completely secure, but we work to protect your data and to notify you and the relevant authority of a personal data breach where the law requires.
10Your rights
Subject to applicable law, you have the right to:
- Access a copy of the personal data we hold about you;
- Rectify inaccurate or incomplete data;
- Erase your data ("right to be forgotten") in certain circumstances;
- Restrict or object to processing, including for direct marketing;
- Data portability — receive your data in a structured, machine-readable format;
- Withdraw consent at any time where processing is based on consent; and
- Lodge a complaint with a supervisory authority.
To exercise any right, email contact@astrape.ai. We will respond within one month (extendable for complex requests) and free of charge in most cases. EEA users may complain to their local data protection authority; UK users to the Information Commissioner's Office (ICO); Indian users to the Data Protection Board of India.
11Marketing choices
We send marketing communications only where you have opted in or where otherwise permitted by law. You can opt out at any time by using the unsubscribe link in any email or by writing to us. When you submit a form, you can indicate whether you wish your data to be used for direct marketing. We will not pass your details to third parties for their own marketing without your consent.
12Children's privacy
Our website and services are intended for businesses and are not directed to children. We do not knowingly collect personal data from children under 16 (or the age of digital consent in your jurisdiction). If you believe a child has provided us data, please contact us and we will delete it.
13Changes to this policy
We may update this policy from time to time by posting a revised version on this page with a new "Last updated" date. Where changes are significant, we will take reasonable steps to notify you. Please review this page periodically.
14Contact us
If you have questions about this policy, wish to exercise your rights, or believe any information we hold about you is incorrect, please contact us:
Astrape AI Private Limited
21st Floor, 2104, C-Wing, Raheja Ridgewood,
Goregaon East, Mumbai, Maharashtra 400063, India.
Email: contact@astrape.ai