Privacy Policy
This Privacy Policy explains how Astral (“we,” “us,” or “our”) collects, uses, shares, and protects personal information when you use our website, applications, and services (the “Service”). By using the Service you acknowledge the practices described here.
1. Information we collect
Account data: name, email address, password (hashed), profile photo, biography, and social links you provide.
Transaction data: purchase history, payment method metadata (handled by Stripe/PayPal; we do not store full card numbers), invoices, and refund records.
Course activity: enrollments, progress, quiz results, reviews, messages between students and teachers, and certificate records.
Technical data: IP address, device type, browser, approximate location, cookies, and usage logs needed to operate and secure the Service.
Communications: support tickets, newsletter subscriptions, and feedback you send us.
2. How we use information
- Provide, maintain, and improve the Service
- Process payments and issue payouts to teachers
- Send transactional emails (receipts, course updates, security alerts)
- Personalize recommendations and search results
- Detect fraud, abuse, and security incidents
- Comply with legal obligations and enforce our Terms
- With your consent, send marketing communications (you may opt out anytime)
3. Legal bases (where applicable)
Where GDPR or similar laws apply, we process data on the bases of contract performance, legitimate interests (security, product improvement), consent (marketing, optional cookies), and legal obligation.
4. Sharing of information
We share data with:
- Service providers who process data on our behalf (hosting, email, analytics, payment processors such as Stripe and PayPal, authentication via Supabase)
- Teachers, limited to information needed to deliver and support their courses (e.g. student name/email for enrolled students)
- Authorities when required by law or to protect rights and safety
- Successors in connection with a merger, acquisition, or asset sale
We do not sell your personal information.
5. Cookies and similar technologies
We use essential cookies for authentication and security, and optional analytics/preference cookies. You can control non-essential cookies through your browser settings. Third-party payment and analytics tools may set their own cookies subject to their policies.
6. Data retention
We retain account and transaction data for as long as your account is active and as needed for legal, tax, and dispute-resolution purposes. You may request deletion of your account; some records may be retained where required by law.
7. Security
We use industry-standard measures including encryption in transit (TLS), hashed passwords, access controls, and monitoring. No method of transmission or storage is 100% secure; please use a strong unique password.
8. International transfers
Your data may be processed in countries other than your own. Where required, we use appropriate safeguards such as standard contractual clauses.
9. Your rights
Depending on your location, you may have rights to access, correct, delete, or export your data, object to or restrict certain processing, and withdraw consent. To exercise these rights, contact us at the address below. You may also lodge a complaint with your local supervisory authority.
10. Children’s privacy
The Service is not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have done so, contact us and we will take appropriate steps to delete it.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised version with an updated “Last updated” date and, for material changes, provide additional notice.
12. Contact
Privacy inquiries: privacy@astral.example
Data protection requests may also be sent to the same address. Please include enough detail for us to verify your identity and respond.