Template — review with legal counsel before publishing in production.
This Privacy Policy explains how Astratelco ("we", "us") collects, uses, discloses and protects personal information when you use our platform. It is intended to meet the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA).
1. Notice at collection — categories of personal information
| Category | Examples | Purpose |
|---|---|---|
| Identifiers | Name, business e-mail, phone number, account ID, IP address | Account management, security, communications |
| Commercial information | Services, contracts, quotes, support tickets | Providing and supporting our services |
| Internet activity | Sign-in history, actions performed, browser type | Security, fraud prevention, audit |
| Professional information | Job title, department, company | Account management |
We do not collect sensitive personal information other than account log-in credentials, which are stored using strong one-way hashing.
2. Sources
Directly from you, from your employer or the company that holds the account, and automatically from your use of the platform.
3. How we use personal information
- To provide, operate and support the platform and the services you contract.
- To secure accounts (including two-factor authentication) and prevent fraud.
- To communicate with you about your account, services and support requests.
- To comply with legal obligations.
4. Disclosure, sale and sharing
We disclose personal information to service providers that help us operate the platform (for example hosting, e-mail and SMS delivery) under written contracts that restrict their use of it. We do not sell personal information and we do not share it for cross-context behavioral advertising.
5. Retention
We keep personal information for as long as your account is active and as needed to provide the services, resolve disputes, enforce agreements and comply with law. Security and audit records are kept for up to 12 months unless a longer period is legally required.
6. Your rights
Subject to the law, you have the right to:
- Know and access the personal information we hold about you;
- Delete personal information;
- Correct inaccurate personal information;
- Opt out of the sale or sharing of personal information;
- Limit the use and disclosure of sensitive personal information;
- Not be discriminated against for exercising these rights.
7. How to exercise your rights
Submit a request through the "Privacy request" page, from "My profile" inside the platform, or by e-mail to . We will confirm receipt and respond within 45 days. We may ask for information to verify your identity. An authorized agent may submit a request on your behalf with your signed permission.
8. Security
We use encryption in transit, encrypted storage of secrets, access controls by profile, two-factor authentication and audit logs to protect personal information.
9. Changes
When we materially change this policy we publish a new version and ask you to review and accept it. Previous versions remain available.
10. Contact
Astratelco —