Política de Privacidad

ASTROCHAT — PRIVACY POLICY

https://astrochat.pro/privacy-policy

Last Updated: February 27, 2026

1. INTRODUCTION

This Privacy Policy ("Policy") describes how ASTROLABS AI E.A.S. (referred to throughout this Policy as "ASTROLABS AI E.A.S.," "ASTROLABS AI," "ASTROLABS," "Company," "we," "us," or "our" — all such references are to the same legal entity regardless of capitalization or abbreviation), a company duly registered and organized under the laws of the Republic of Paraguay, with its registered address at Ernesto San Martín, Lambaré, Paraguay, collects, uses, stores, shares, and protects personal information and data in connection with the Astrochat platform (the "Service" or "Platform"), a product of ASTROLABS AI E.A.S., accessible at https://app.astrochat.pro/ and https://astrochat.pro/.

This Policy applies when you visit our websites, register for, access, or use the Service, interact with us through email, support channels, or other communications, or engage with us in any other related way.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.

This Privacy Policy is incorporated by reference into the Astrochat Terms and Conditions. Any terms not defined herein have the meanings assigned to them in the Terms and Conditions.

Direct Relationship. This Policy applies solely to Clients who have entered into a valid agreement with ASTROLABS by accepting the Terms and Conditions, and to their Authorized Users. Any resale, sublicensing, or distribution of the Service requires the prior express written authorization of ASTROLABS. Absent such written permission, ASTROLABS does not recognize any relationship arising from an unauthorized resale or distribution, and any person or entity accessing the Service through an unauthorized intermediary does so without any rights or protections under this Policy or the Terms and Conditions.

Feedback and Developed Features. Any feedback, feature requests, or improvement suggestions you submit to ASTROLABS may be used by ASTROLABS to develop, improve, or enhance the Service. Any resulting developments or improvements are the sole and exclusive property of ASTROLABS. Information contained in feedback submissions may be processed by ASTROLABS as described in Section 4.

2. KEY ROLES AND DEFINITIONS

ASTROLABS as Data Controller: When we collect and process personal data for our own purposes (e.g., account management, billing, service analytics, security), ASTROLABS acts as the Data Controller.

ASTROLABS as Data Processor: When we process personal data on behalf of our Clients (e.g., End User data, messages, contacts managed through the Service), ASTROLABS acts as the Data Processor under the Client's instructions. In this role, the Client is the Data Controller and is solely responsible for determining the purposes and means of processing, obtaining necessary consents from End Users, and complying with applicable data protection laws.

"Personal Data" means any information relating to an identified or identifiable natural person.
"Client" means any entity or individual that registers for and uses the Service.
"End User" means any individual who communicates with a Client through the messaging channels integrated with the Service.
"Client Data" means all data, messages, contacts, files, and other content uploaded, transmitted, processed, stored, or generated through the Service by or on behalf of the Client, including personal data of End Users.

3. INFORMATION WE COLLECT

3.1 Information You Provide Directly

When you register for, access, or use the Service, we may collect: account information (name, email, phone number, company name, password), billing information (payment method details, billing address, transaction records — we do not store full credit card numbers), communications you send to us, and profile information (display name, preferences, role within the workspace).

3.2 Information Collected Automatically

When you access or use the Service, we automatically collect technical and usage information such as IP address, browser type, operating system, device identifiers, pages and features visited, timestamps, actions taken, performance data, error logs, and push notification subscription tokens.

3.3 Cookies and Similar Technologies

We use cookies and similar technologies for essential functionality (session management, authentication), analytics (understanding how the Service is used), and preference storage. You can manage cookie preferences through your browser settings; disabling certain cookies may affect functionality.

3.4 Information from Third-Party Platforms

When you connect Third-Party Platforms (WhatsApp, Instagram, Messenger via Meta) to the Service, we may receive platform account identifiers, access tokens, account metadata, and message content and metadata routed through those platforms' APIs. This information is processed in accordance with the applicable platform's terms and policies.

3.5 Client Data (Processed on Behalf of Clients)

In providing the Service, we process Client Data on behalf of our Clients, which may include End User identifiers, message content, contact records, tags, custom fields, notes, and engagement metadata.

ASTROLABS processes Client Data strictly as a Data Processor under the Client's instructions and solely for the purpose of providing the Service. We do not independently access, use, sell, or disclose Client Data for our own purposes, except as permitted for generating aggregated and de-identified analytics or as required by law.

4. HOW WE USE YOUR INFORMATION

We use the information we collect to:

Provide the Service: Create and manage accounts, authenticate users, process and deliver messages, store contacts and conversations, deliver push notifications, sync templates, and process billing.
Improve the Service: Analyze usage patterns and performance, identify and fix issues, develop new features, and generate aggregated anonymized analytics.
Communicate with You: Send transactional notifications (service announcements, security alerts, billing notifications), respond to support requests, and send marketing communications where consented or permitted by law.
Security and Compliance: Monitor for unauthorized access, fraud, and abuse; enforce our Terms and Conditions; comply with applicable laws; and establish, exercise, or defend legal claims.
Aggregated Data: We may aggregate and de-identify information so that it can no longer identify any individual, and use such data for any lawful business purpose.

5. HOW WE SHARE YOUR INFORMATION

ASTROLABS does not sell your Personal Data to third parties. We may share your information in the following circumstances, including but not limited to:

5.1 Service Providers and Sub-Processors

We engage trusted third-party service providers to assist in delivering the Service. ASTROLABS maintains Data Processing Agreements (DPAs) with its core infrastructure providers.

Entity Name	Purpose of Processing	Location	DPA
Vercel Inc.	Application hosting, serverless compute, edge delivery, and front-end deployment	USA / Brazil	Yes
Supabase Inc.	Cloud database (PostgreSQL), authentication, real-time subscriptions, file storage, and serverless functions	USA / Brazil	Yes

We may also engage service providers for payment processing, analytics, and customer communication. All service providers are contractually bound to process Personal Data only on our behalf and in accordance with our instructions. ASTROLABS will update this list if additional sub-processors are engaged.

5.2 Third-Party Platforms

When you integrate Third-Party Platforms (WhatsApp, Instagram, Messenger), data is transmitted to and from those platforms through their APIs. Your use of such platforms is governed by their respective terms and privacy policies:

Meta/WhatsApp: https://www.whatsapp.com/legal/privacy-policy
Meta/Instagram: https://privacycenter.instagram.com/policy
Meta/Facebook: https://www.facebook.com/privacy/policy

5.3 Legal Compliance and Protection

We may disclose your information if required by law or if we believe in good faith that disclosure is necessary to comply with legal obligations, enforce our Terms and Conditions, protect the rights, property, or safety of ASTROLABS, our users, or the public, detect or prevent fraud or security issues, or respond to an emergency involving potential risk of death or serious injury.

5.4 Business Transfers

In the event of a merger, acquisition, reorganization, or asset sale, your information may be transferred to the surviving or acquiring entity.

5.5 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

6. DATA SECURITY

6.1 Security Measures

We implement appropriate technical and organizational security measures to protect Personal Data, including encryption in transit and at rest, access controls and role-based permissions, Row-Level Security (RLS) for multi-tenant data isolation, multi-factor authentication support, and logging and monitoring of system access.

6.2 No Absolute Guarantee

No method of electronic transmission or storage is 100% secure. We cannot and do not guarantee the absolute security of your information. Any transmission of Personal Data to and from the Service is at your own risk.

ASTROLABS shall not be liable for any unauthorized access, use, disclosure, or loss of data resulting from circumstances beyond our reasonable control, including hacking, cyberattacks, or breaches of Third-Party Platform security.

6.3 Security Incident Notification

In the event of a security incident resulting in unauthorized access to Personal Data that is likely to pose a risk to affected individuals, ASTROLABS will notify affected Clients without undue delay and take reasonable steps to mitigate the impact.

7. DATA RETENTION

7.1 Retention Periods

We retain Personal Data for as long as we determine necessary for our legitimate business purposes, unless a specific deletion request is received:

Account Information: Retained for the duration of your Account and for as long thereafter as ASTROLABS determines necessary for legal, accounting, compliance, or business purposes.
Billing Information: Retained for the period required by applicable tax and accounting laws or for as long as necessary for ASTROLABS's internal accounting and financial record-keeping purposes.
Client Data: Retained for the duration of the Client's Account and, following Account termination for any reason (whether initiated by the Client or by ASTROLABS), for as long as ASTROLABS determines necessary for legitimate business purposes including, but not limited to legal compliance, dispute resolution, fraud prevention, and enforcement of its Terms and Conditions. Absent an explicit written deletion request from the Client, ASTROLABS is under no obligation to delete Client Data and may retain it indefinitely. Upon written request, Client Data will be deleted or anonymized within ninety (90) days from receipt of such request, subject to legal retention obligations. Residual copies in backup systems will be overwritten in the ordinary course of operations.
Usage and Log Data: Retained for as long as ASTROLABS determines necessary for analytics, security, and service improvement purposes.

7.2 Deletion Requests

All data deletion is request-based. You may request deletion of your Personal Data by contacting us at [email protected]. Termination of your Account, whether by you or by ASTROLABS, does not automatically trigger deletion of your data. We will process written deletion requests in accordance with applicable law. We may need to retain certain information for legal compliance, dispute resolution, fraud prevention, or to enforce our Terms and Conditions.

8. YOUR RIGHTS

Subject to applicable law, you may have the right to: (a) access and obtain a copy of your Personal Data; (b) request correction of inaccurate data; (c) request deletion of your Personal Data, subject to our legal obligations and legitimate interests; (d) request restriction of processing in certain circumstances; (e) request data portability; (f) object to processing for certain purposes; and (g) withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any right, contact us at [email protected]. We may require identity verification and will respond within the timeframes prescribed by applicable law.

If you are an End User whose Personal Data is processed through the Service on behalf of a Client, please direct any requests to the Client directly. The Client, as the Data Controller, is responsible for responding. ASTROLABS will assist Clients in fulfilling such obligations as reasonably required.

9. INTERNATIONAL DATA TRANSFERS

ASTROLABS is based in the Republic of Paraguay. In order to provide the Service, your data may be transferred to, stored, and processed in any jurisdiction where ASTROLABS or its service providers maintain infrastructure, which may include jurisdictions with data protection standards that differ from those of your country of residence. By using the Service, you expressly consent to such transfers and acknowledge that ASTROLABS shall not be liable for the data protection practices of any jurisdiction in which data is processed. ASTROLABS selects service providers that maintain contractual data protection obligations, but makes no representations or warranties regarding the adequacy of any foreign jurisdiction's data protection framework.

10. THIRD-PARTY LINKS AND SERVICES

The Service may contain links to third-party websites or services not owned or controlled by ASTROLABS. This Privacy Policy does not apply to such third-party services. We are not responsible for the privacy practices, content, or security of any third-party service.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top. For material changes, we will use reasonable efforts to notify you by email or through the Service; however, ASTROLABS shall not be liable for any failure to provide such notice.

Your continued use of the Service after any changes constitutes acceptance of the revised Policy.

12. GOVERNING LAW AND JURISDICTION

This Privacy Policy shall be governed by and construed in accordance with the laws of the Republic of Paraguay. Any disputes arising from or relating to this Policy shall be submitted exclusively to the competent courts of the city of Asunción, Republic of Paraguay.

13. CONTACT US

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

ASTROLABS AI E.A.S. Address: Ernesto San Martín, Lambaré, Paraguay Email: [email protected] Product: Astrochat Website: https://astrochat.pro/ Application: https://app.astrochat.pro/

Astrochat is a product of ASTROLABS AI E.A.S., registered in the Republic of Paraguay.