Privacy Policy

OpenAstrix ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal information when you use our platform.

Account Information: Name, email address, password (hashed), organization name, timezone.

Usage Data: Interaction counts, feature usage, login times, IP addresses.

Content You Provide: Agent configurations, system prompts, uploaded documents, knowledge base content.

Conversation Data: Messages exchanged between your contacts and AI agents, including contact names, phone numbers, and email addresses.

Billing Information: Payment details are processed and stored by Stripe. We store only your Stripe customer ID and subscription status.

We use your information to: (a) provide and improve the Service; (b) process payments; (c) send transactional communications (account confirmations, billing notices); (d) monitor usage for plan enforcement; (e) detect and prevent fraud or abuse; (f) provide customer support.

Messages sent to AI agents are processed by third-party AI providers (Anthropic) to generate responses. These messages are sent via API and are subject to the AI provider's data processing terms. We do not use your conversation data to train AI models. Document embeddings are generated via Voyage AI for knowledge base search functionality.

Your data is stored on secure servers. We use encryption in transit (TLS) and implement access controls to protect your information. Passwords are hashed using bcrypt. We retain your data for as long as your account is active, plus 30 days after deletion for backup purposes.

We do not sell your personal information. We share data only with: (a) third-party service providers necessary to operate the Service (Stripe for payments, Anthropic for AI, Voyage AI for embeddings, Tavily for web search); (b) law enforcement when required by law; (c) in connection with a merger, acquisition, or sale of assets.

You have the right to: (a) access your personal data; (b) correct inaccurate data; (c) delete your account and associated data; (d) export your data; (e) withdraw consent for optional data processing. To exercise these rights, contact us at privacy@openastrix.com.

We use localStorage (not cookies) to store your authentication token and language preference. No third-party tracking cookies are used on the platform.

Your data may be processed in countries other than your own. We ensure appropriate safeguards are in place for international data transfers in compliance with applicable data protection laws.

The Service is not intended for children under 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

Account data is retained while your account is active. Conversation history retention depends on your plan (7 days for Free, 90 days for Starter, unlimited for Pro+). After account deletion, all data is permanently removed within 30 days.

We may update this Privacy Policy from time to time. Material changes will be communicated via email at least 30 days before taking effect.

For privacy-related inquiries: privacy@openastrix.com