Privacy Policy

This Privacy Notice is issued by Astrixy (the "Company", "we", "us", or "our"), trading as Astrixy and operating www.astrixy.app. For the personal data we collect about you through the Service, Astrixy acts as the data controller. Contact us about privacy matters at privacy@astrixy.app.

We collect the following categories of personal data:

• Account information (name, email, password / login credentials)
• Billing information (business name, billing country) — payment card and detailed billing data are collected directly by our payment provider (Dodo Payments) and we do not store card numbers on our servers
• Business information (company name, store details)
• Communications and support messages
• Usage data, analytics, device identifiers, and IP address

We process your personal data for the purposes below, on the legal bases indicated:

• Provide, maintain, and improve the Service — performance of a contract
• Process orders, subscriptions, and invoices — performance of a contract and legal obligation
• Send technical notices, security alerts, and support messages — legitimate interests
• Detect, prevent, and investigate fraud, abuse, and security incidents — legitimate interests
• Analyse usage patterns and improve features — legitimate interests
• Send marketing communications — consent, which you can withdraw at any time
• Comply with legal, regulatory, and tax obligations — legal obligation

We share personal data only with the following categories of recipients:

• Dodo Payments — our SaaS payment processor. Handles subscription payment processing, invoicing, and tax collection. Receives your name, email, billing address, country, and payment card information directly through its PCI-compliant checkout. Governed by Dodo Payments' own privacy policy.
• Merchant payment gateways (Stripe, PayPal, and others). When you buy from a storefront hosted on Astrixy, your payment is processed by the merchant's own payment gateway. Astrixy does not collect or hold your buyer payment details.
• Cloud hosting, database, email, and analytics subprocessors that operate the Service on our behalf
• Professional advisers (legal, accounting, auditors), where necessary
• Public authorities or law enforcement, where required by applicable law
• An acquirer or successor in connection with a merger, acquisition, or asset transfer

We do not sell your personal information to third parties.

We implement appropriate technical and organizational measures to protect your personal information, including encryption in transit, access controls, and audit logging. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

We retain your information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it.

You have the following rights regarding your personal information:

• Access and receive a copy of your data
• Correct inaccurate information
• Request deletion of your data
• Object to processing of your data
• Request data portability
• Withdraw consent at any time

We use cookies and similar tracking technologies to collect and track information about your activities on our service. You can control cookies through your browser settings, but disabling them may affect service functionality.

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. Review their privacy policies before use.

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses where applicable.

Our service is not intended for children under 18. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information immediately.

For users in the European Economic Area (EEA), we comply with the General Data Protection Regulation (GDPR). You have additional rights under GDPR, including the right to lodge a complaint with a supervisory authority.

California residents have specific rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information is collected and to opt out of the sale of personal information.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

If you have questions about this Privacy Policy, contact us at privacy@astrixy.app.