Thank you for taking the time to familiarize yourself with Astra's privacy notice which describes how we collect, use, and disclose information about you. This Privacy Notice applies to information we collect from Data Subjects when you access or use our Services or otherwise interact with us, such as by using our platform, APIs, or visiting our Website.

1. Our Privacy Notice in a Nutshell

1.1. In this Privacy Notice, we explain how and on what basis we collect, store, and process Personal Data of Data Subjects. We also explain Data Subjects' rights and our obligations and liabilities.

1.2. Astra processes End-Users' information as directed by our Customers for the provision of our Services.

1.3. For End-Users to fully understand how Personal Data is processed in connection with the Service, End-Users should review both privacy notices, i.e., this Privacy Notice and the privacy notices of those Customers whose services the End-Users are getting verified for.

2. Definitions

2.1. Agreement – the service agreement entered into between Astra and Customers, including service agreements for trials and partnership agreements.

2.2. AI Model - means any artificial intelligence or machine learning model, algorithm, or system developed or used by Astra to provide the Services.

2.3. Customer – the legal entity to whom we provide our Services under the Agreement.

2.4. Data Controller – a legal person that determines the purposes and means of the processing of Personal Data.

2.5. Data Subject / you – a natural person about whom we have Personal Data.

3. Our Main Privacy Principles

Security and Confidentiality

We process Personal Data in a reliable and confidential way.
State-of-the-art security measures protect collected data.

Privacy by Design and Default

Data protection is integrated into our Services.
Privacy requirements are part of our employees' training.

Lawful and Purposeful Processing

We set clear goals for data processing and process data only for these purposes.

4. Personal Data We Process

End-User Data

Identity Information
Document Details
Verification Data
Technical Data

Customer Representative Data

Contact information
Account access credentials
Communication records

Website Visitor Data

IP address and location data
Browser and device information

5. Legal Grounds and Processing Purposes

Service Provision

Verify identity documents
Perform biometric verification
Conduct fraud prevention checks

Legitimate Interests

Service improvement and AI model training
Fraud prevention and security

6. AI Technology and Automated Processing

AI Systems and Machine Learning

Advanced AI and machine learning for secure verification.
Continuous model training with anonymized data.

Automated Decision-Making

Hybrid approach combining automated and human oversight.

7. Data Subject Rights

Your Rights

The Right to Access
The Right to Rectification
The Right to Erasure
The Right to Restrict Processing
The Right to Object
The Right to Data Portability

Exercising Your Rights

Requests can be made via email, online form, or mail.
Verification may be required to protect your privacy.

8. Data Sharing and Transfers

Categories of Recipients

Service Providers and Sub-processors
Customers
Regulatory Bodies and Law Enforcement

International Transfers

Standard Contractual Clauses (SCCs) and additional safeguards.

9. Security Measures

Technical Security

Infrastructure Security
Access Control Systems
Network Security

Organizational Security

Employee Training
Incident Response
Third-Party Risk Management

10. Data Retention

Retention Periods

Verification Data
Customer Account Data
Technical Data

Retention Criteria

Legal Requirements
Business Needs
Data Sensitivity

11. Changes to Privacy Notice

Update Process

Regular review of privacy practices and procedures.

Notification Methods

Direct Communication
Website Updates

12. Contact Information

Contact Us

For privacy-related inquiries:

Email: privacy@astraprotocol.com
Support: support@astraprotocol.com
Website: www.astraprotocol.com/contact

Back to Home