Privacy Policy

1. Introduction

Astrovia ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our tax management and compliance platform ("Service").

By accessing or using our Service, you agree to this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our Service, including:

• Account Information: Name, email address, password, and business details when you create an account
• Business Data: Company name, VAT/tax registration numbers, business addresses, and organizational structure
• Transaction Data: Sales data, order information, customer transaction records, and financial data uploaded for tax calculations
• Payment Information: Billing details processed through our secure payment provider (Stripe)
• Communication Data: Information you provide when contacting support or communicating with us

2.2 Information Collected Automatically

When you use our Service, we may automatically collect:

• Device information (browser type, operating system, device identifiers)
• Log data (IP address, access times, pages viewed, referring URLs)
• Usage data (features used, actions taken within the platform)
• Cookies and similar tracking technologies

2.3 Information from Third Parties

We may receive information from third-party integrations you authorize, such as:

• Shopify store data (orders, customers, products) when you connect your store
• Payment processor data for billing and transaction verification

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our tax calculation and reporting services
• Process tax reports and facilitate tax remittance as your authorized agent
• Send you service-related communications, including tax filing reminders and payment notifications
• Process payments and prevent fraud
• Respond to your inquiries and provide customer support
• Analyze usage patterns to improve our Service
• Comply with legal obligations and enforce our terms

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA) and United Kingdom, we process your personal data based on:

• Contract Performance: Processing necessary to provide our Service to you
• Legitimate Interests: Processing for fraud prevention, security, and service improvement
• Legal Obligation: Processing required to comply with tax and regulatory requirements
• Consent: Where you have provided explicit consent for specific processing activities

5. Data Sharing and Disclosure

We may share your information with:

• Tax Authorities: As required to file tax returns and remit taxes on your behalf as your authorized agent
• Service Providers: Third parties that help us operate our Service (hosting, payment processing, email delivery)
• Professional Advisors: Legal, accounting, or other professional advisors as needed
• Legal Requirements: When required by law, regulation, or legal process
• Business Transfers: In connection with any merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6. Data Retention

We retain your information for as long as necessary to:

• Provide our Service and maintain your account
• Comply with legal obligations (tax records must be retained for periods required by applicable law, typically 7-10 years)
• Resolve disputes and enforce agreements

When you close your account, we will delete or anonymize your personal information within 90 days, except where retention is required by law.

7. Data Security

We implement appropriate technical and organizational measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Access controls and authentication requirements
• Regular security assessments and monitoring
• Secure data centers with physical access controls

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (subject to legal retention requirements)
• Restriction: Request restriction of processing
• Portability: Receive your data in a portable format
• Objection: Object to certain processing activities
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at privacy@astrovia.io.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions where applicable
• Other legally recognized transfer mechanisms

10. Cookies

We use cookies and similar technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze usage and improve our Service

You can control cookies through your browser settings, though some features may not function properly without them.

11. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If we learn we have collected information from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Astrovia
Email: privacy@astrovia.io
Website: https://astrovia.io