ASTRA
1. Commitment to Privacy
Astra is built with privacy and data isolation as core principles. This Privacy Policy outlines how your personal data, uploaded documents, conversation history, and technical telemetry are gathered, processed, secured, and purged.
2. Data We Collect
We collect only the minimum necessary information to provide the secure RAG AI service:
- Account Credentials: Email address, username, phone number (if provided), and cryptographic password hash (Argon2id). We never store raw passwords.
- Uploaded Documents: Text, PDF, DOCX, and other files you explicitly upload for knowledge retrieval.
- Conversations & Queries: Prompts submitted to the assistant and synthesized responses. Temporary chat mode is available for ephemerality.
- Technical Metadata: Query response latencies, model telemetry, and error logs for platform health and abuse prevention.
3. Strict Multi-User Isolation
Astra enforces strict server-side authorization: User A can never view, query, or access User B's documents, conversations, or embeddings. Vector embeddings and document stores are segregated by authenticated user identifier in both relational databases and vector indices.
4. Zero Sale of Personal Data
We never sell, rent, monetize, or trade your personal information, documents, or conversation records to advertisers, data brokers, or external entities.
5. Secure Cookie & Token Architecture
Astra uses modern stateless authentication:
- Authentication tokens are transmitted via secure HTTP headers and
HttpOnly,SameSite=Laxcookies. - Client JavaScript cannot manipulate or expose core authentication secrets.
- AI provider API keys are strictly maintained on the server-side environment and are never transmitted to or accessible by client browsers.
6. Document & Conversation Deletion
You have full ownership of your data within the application:
- You may delete any individual document, file upload, or chat conversation directly from your dashboard at any time.
- Document deletion permanently removes chunks and vector embeddings from the system.
7. Contact & Privacy Inquiries
If you have any questions, concerns, or requests regarding this Privacy Policy, please email: privacy@astra.local.