# Privacy Policy

Last updated: April 25, 2026

## 1. Introduction

Astra ("we", "our", or "us") operates the Codeastra platform — blind agent infrastructure for AI. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We are committed to protecting your privacy. Our platform is built on the principle that **AI should never see sensitive data** — and we apply that same philosophy to how we handle your information.

## 2. Information We Collect

**Account Information:** When you create an account, we collect your email address, display name, and authentication credentials. If you sign in with Google, we receive your name, email, and profile picture from Google.

**Usage Data:** We collect anonymized usage metrics including API call counts, feature usage patterns, and performance data. This data is used to improve service reliability and is never linked to the content of your API requests.

**Payment Information:** If you subscribe to a paid plan, payment processing is handled entirely by Stripe. We never store your credit card number, CVV, or full card details on our servers.

**Technical Data:** We automatically collect IP addresses, browser type, device information, and cookies necessary for authentication and session management.

## 3. How We Use Your Information

We use the information we collect to:

- Provide, maintain, and improve the Codeastra platform
- Authenticate your identity and manage your account
- Process transactions and send billing notifications
- Monitor usage to enforce rate limits and prevent abuse
- Send important service updates and security alerts
- Respond to your support requests

We **never** use your data to train AI models. We **never** sell your personal information to third parties.

## 4. Data Blindness Architecture

Codeastra is architected around data blindness. When you send data through our platform:

- **Smart Tokens:** Sensitive data is replaced with cryptographic tokens before reaching any AI model. The AI reasons on structure, never content.
- **Blind RAG:** Retrieval-augmented generation queries are executed on encrypted embeddings. No plaintext is exposed during search or reasoning.
- **Zero-Knowledge Logging:** In zero-log mode, we retain no request or response payloads. Only anonymized metadata (timestamps, token counts) is recorded.
- **Provider Headers:** We inject provider-specific no-training headers (e.g., Anthropic's `no-training-1`, OpenAI's `X-No-Training`) on every outbound LLM call.

## 5. Data Storage & Security

Your account data is stored in encrypted databases with row-level security policies. API keys are hashed before storage — we cannot retrieve your raw API key after initial generation.

All data in transit is encrypted with TLS 1.3. Data at rest is encrypted with AES-256. Our infrastructure runs on SOC 2 compliant providers.

For on-premise and hybrid deployments, all data remains within your infrastructure. Codeastra never phones home with customer data in these configurations.

## 6. Third-Party Services

We use the following third-party services:

- **Stripe** — Payment processing (PCI-DSS Level 1 compliant)
- **Google OAuth** — Optional authentication provider
- **AI Providers** — Anthropic, OpenAI, Google, Groq (your data is tokenized before reaching them)

We do not share your personal information with any of these providers beyond what is strictly necessary for the service to function.

## 7. Cookies

We use only essential cookies required for authentication and session management. We do not use advertising cookies, tracking pixels, or third-party analytics that follow you across the web.

## 8. Your Rights

You have the right to:

- **Access** — Request a copy of the personal data we hold about you
- **Rectification** — Request correction of inaccurate data
- **Deletion** — Request deletion of your account and associated data
- **Portability** — Request your data in a machine-readable format
- **Objection** — Object to processing of your data for specific purposes

To exercise any of these rights, contact us at [mpkobed@driftlayer.dev](mailto:mpkobed@driftlayer.dev).

## 9. GDPR Compliance

For users in the European Economic Area (EEA), we process your data under the following legal bases: consent (for optional features), contractual necessity (for account and service delivery), and legitimate interest (for security and fraud prevention).

Data transfers outside the EEA are protected by Standard Contractual Clauses (SCCs) with our infrastructure providers.

## 10. Data Retention

We retain your account data for as long as your account is active. Usage metrics are retained in anonymized form for up to 12 months. Upon account deletion, all personal data is permanently removed within 30 days.

In zero-log mode, request and response payloads are never stored — not even temporarily.

## 11. Children's Privacy

Codeastra is not intended for use by individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will delete it promptly.

## 12. Codeastra Chrome Extension

The following disclosures apply specifically to the **Codeastra** Chrome extension distributed via the Chrome Web Store. They describe exactly what the extension does, what permissions it requests, and what data it handles.

**Single purpose:** Codeastra detects sensitive data (PII, PHI, secrets) inside supported web apps — including Gmail compose windows, AI chat interfaces, and collaboration tools — replaces it with vault tokens before the data is sent to any third-party server, and automatically resolves those tokens for authorized workspace members who view protected content.

**Permission justifications:**

- **`storage`:** Stores the user's Codeastra API key and backend URL in `chrome.storage.sync`. No sensitive data, message bodies, or document contents are stored locally.
- **Host permissions:** The extension only runs on an explicit allow-list of supported hosts (e.g. `mail.google.com`, `chatgpt.com`, `claude.ai`, `gemini.google.com` and other workspace tools), and connects to `app.codeastra.dev` to tokenize detected sensitive values via the Codeastra vault API.

**Remote code:** The extension does **not** execute remote code. All JavaScript is bundled inside the extension package shipped to the Chrome Web Store. The extension only exchanges JSON payloads (text fragments, tokens) with the Codeastra vault API — no scripts, modules, or `eval`'d code are fetched from the network at runtime.

**Data collected and how it is used:** The extension processes **website content** (the text you type, paste, or upload inside supported pages) for the sole purpose of detecting and tokenizing sensitive values in real time. We certify that:

- Collected data is **not sold** to third parties.
- Collected data is **not used or transferred** for purposes unrelated to the extension's single purpose.
- Collected data is **not used or transferred** to determine creditworthiness or for any lending purpose.

Detected sensitive fragments are sent to the Codeastra vault API only to mint or resolve tokens for the authenticated workspace. They are not stored long-term in plaintext, are never used for advertising, and are never used to train machine learning models.

**Extension contact email:** [mpakaobed90@gmail.com](mailto:mpakaobed90@gmail.com)

## 13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. Your continued use of the platform after changes constitutes acceptance of the updated policy.

## 14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

**General privacy email:** [mpkobed@driftlayer.dev](mailto:mpkobed@driftlayer.dev)

**Chrome extension contact:** [mpakaobed90@gmail.com](mailto:mpakaobed90@gmail.com)