Privacy Policy

This Privacy Policy applies to Astrum Toolbox and its browser-based utilities (the “Service”). AstrumFlow LLC (“AstrumFlow,” “we,” “us,” and “our”) is the data controller for the Service. It explains how information is collected, used, stored, disclosed, and deleted when you visit or use the Service.

By using the Service, you acknowledge this Policy. If you do not agree with it, please do not use the Service.

Depending on the features you use, we may receive:

• Account information: such as your email address, display name, and authentication details when an account is required.
• Transaction information: such as the package purchased, amount, currency, payment status, and transaction identifier. Full card numbers are handled by the payment provider shown at checkout and are not sent to us through support.
• Support communications: information you include when contacting us about a tool, account, payment, refund, or security issue.
• Tool inputs: files, text, images, or other content that you intentionally provide to a feature.

When you access the Service, standard technical information may be processed to deliver pages, protect the Service, and troubleshoot failures. This may include IP address, browser and device type, operating system, language and time zone, request timestamps, referring page, and error or performance information.

The Service may also remember necessary preferences such as selected language, theme, or local tool settings. We do not use browser-first file processing as a reason to upload your files to our servers.

We use information only as needed to:

• provide, maintain, and improve the Service and its tools;
• authenticate accounts and maintain account, credit, and transaction records when those features are available;
• process purchases, refunds, billing questions, and fraud-prevention checks;
• respond to support requests and send essential service, security, billing, or policy notices;
• diagnose errors, prevent abuse, and protect users, systems, and third parties; and
• meet legal, accounting, tax, and regulatory obligations.

Where applicable law requires a legal basis, these activities rely on providing the Service, complying with legal obligations, protecting legitimate interests, or your consent where consent is required. We may use aggregated or de-identified information for statistics and service improvement when it can no longer reasonably identify you.

Many Astrum Toolbox tools process files and text directly in your browser. For those tools, the input may remain in the browser’s temporary memory and may not be uploaded to us. You should still review the description and behavior of a tool before using it with sensitive material.

Some features use third-party AI providers and may require network requests, an account, a payment provider, or another third-party service. When a feature needs remote processing, we will use the information necessary to provide that feature and will not ask you to provide more than is reasonably needed.

We may use strictly necessary storage or cookies for core functionality, such as session security, language preference, theme preference, or remembering a local tool setting. These technologies are not used to read the contents of files processed locally in your browser.

If optional analytics or marketing technologies are introduced, we will describe them here and provide any controls required by applicable law. You can also manage cookies and local storage through your browser settings, although disabling necessary storage may affect the Service.

We do not sell personal information. We may share limited information with:

• Service providers: hosting, authentication, payment, email, security, support, and infrastructure providers that process information on our instructions.
• Payment provider: Waffo Pancake processes transaction and payment details needed to authorize purchases, prevent fraud, and issue refunds. Full card numbers are processed by Pancake and are not stored on our servers.
• Third-party AI providers: certain features use third-party AI providers to process the inputs and return the requested output. We share only the information needed for that feature.
• Legal and safety recipients: courts, regulators, law enforcement, or other parties when disclosure is required by law or reasonably necessary to protect rights, safety, or the integrity of the Service.
• Business transaction recipients: a successor or advisor in connection with a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate confidentiality protections.

We use reasonable administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, and destruction. These measures may include HTTPS in transit, access controls, authentication protections, encrypted or hashed credentials, least-privilege access, and security monitoring.

No online service can guarantee absolute security. Please use a unique password, keep your account credentials private, and tell us promptly if you suspect unauthorized access.

We retain information only for as long as reasonably needed for the purposes described in this Policy, including providing the Service, maintaining security, resolving disputes, enforcing agreements, and meeting legal, accounting, and tax requirements.

• Account information is retained while the account is active and deleted within 30 days after deletion or closure, unless a longer period is required by law or needed for a legal dispute.
• Transaction, billing, refund, and dispute records are retained for 7 years after the transaction or resolution date.
• Support records are retained for 24 months after the support case is closed. Security and audit logs are retained for 12 months.
• Locally processed tool inputs are not retained by AstrumFlow and remain available only during the browser session, unless a feature explicitly says otherwise. Backups containing account data are deleted within 90 days after the underlying data is deleted.

Depending on where you live, you may have the right to access, correct, delete, restrict, or receive a copy of personal information we hold about you. You may also have the right to object to certain processing or withdraw consent where processing is based on consent.

To make a request, contact support@astrumflow.com and include the account email associated with your request. We may need to verify your identity before responding. We will respond within the period required by applicable law.

You may also have the right to complain to the data protection authority or privacy regulator in your jurisdiction.

The Service is intended for adults and is not directed to children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, contact support@astrumflow.com so we can review and delete it where appropriate.

We and our service providers may process information in countries other than the country where you live. When information is transferred across borders, we use safeguards required by applicable law, such as contractual protections, adequacy decisions, or other recognized transfer mechanisms.

The Service may link to or integrate with third-party websites, payment services, authentication providers, or other services. This Policy applies only to information processed by Astrum Toolbox. Review the privacy policies of third parties before using their services; their practices are governed by their own terms and policies.

We may update this Policy when the Service, law, or our information practices change. For material changes, we will provide reasonable notice through the Service or to the contact information associated with your account. The updated date at the top of this page will change when the new version takes effect.

Data controller: AstrumFlow LLC. Privacy questions or requests can be sent to support@astrumflow.com. Include enough context for us to understand your request, but do not send passwords, full payment-card numbers, or other unnecessary sensitive information.

This Privacy Policy is intended to describe the Service’s information practices in plain language. It does not limit any privacy rights that cannot be limited under applicable law.