Privacy Policy

1. Who we are

AstroCore AI ("AstroCore", "we", "us") is a workspace for AI agents available at astrocore.one. It is operated by [Your full name], an individual based in the Czech Republic, who acts as the data controller for the personal data described in this policy.

Contact for any privacy question or request: astrocore.one@outlook.cz or Telegram @AstroCore_Manager

2. What data we collect

• Account data: when you sign in (for example with GitHub), we receive your name, username, email address and profile picture.
• Content you create: chats, agents, memory entries, reports, files in Storage and Gallery, forum posts, settings and anything else you enter into the platform.
• Provider API keys: if you connect your own AI provider keys, we store them encrypted and use them only to send your requests to that provider.
• Technical data: IP address, browser and device type, logs and basic usage and performance statistics needed to run and secure the service.
• Analytics data: if you allow analytics cookies, Google Analytics collects information about how you use the site (pages visited, approximate location, device and browser) so we can improve AstroCore.

3. Why we use it (legal basis)

• To provide the service — create your account, run your agents, store your content (performance of a contract, GDPR Art. 6(1)(b)).
• To keep the platform secure and working — prevent abuse and fix bugs (legitimate interest, Art. 6(1)(f)).
• To understand how the site is used through Google Analytics — only if you accept analytics cookies (consent, Art. 6(1)(a)).
• To contact you about important changes to the service or these terms (legitimate interest / contract).
• To meet legal obligations, including future billing and accounting once paid plans are introduced (Art. 6(1)(c)).

We do not sell your personal data and do not use it for advertising.

4. AI providers

When you use an agent or chat, the content of your request is sent to the AI provider you selected (for example Anthropic, OpenAI or others) so it can generate a response. That provider processes your data under its own terms and privacy policy. Please do not submit sensitive personal data (health, financial, ID numbers, etc.) unless you are comfortable with it being processed by that provider.

5. Service providers we use

• Vercel — hosting, domain and performance analytics.
• Supabase — database, authentication and file storage.
• GitHub — sign-in (OAuth).
• Google Analytics (Google Ireland Ltd.) — website usage statistics, only with your consent.
• The AI providers you connect (see section 4).

Some of these providers are located in the United States. Where data is transferred outside the EU/EEA, it is protected by the providers' safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

6. Cookies

We use cookies that are strictly necessary for the platform to work, such as keeping you signed in. Analytics cookies from Google Analytics are used only if you allow them in the cookie banner, and you can change your choice at any time via Cookie Settings. We do not use advertising cookies.

7. How long we keep data

We keep your account and content while your account is active. If you delete your account or ask us to delete your data, we delete it within 30 days, except where we must keep certain records by law. Technical logs are kept only for a limited period.

8. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• have your data deleted;
• receive your data in a portable format;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent.

To use any of these rights, email astrocore.one@outlook.cz. You can also file a complaint with the Czech data protection authority, the Office for Personal Data Protection (ÚOOÚ, uoou.gov.cz), or the authority in your own country.

9. Security

We use encryption in transit (HTTPS), encrypt stored provider API keys and limit access to data. No system is 100% secure, so please use a strong password for your sign-in account and enable two-factor authentication.

10. Children

AstroCore is not intended for anyone under 16. We do not knowingly collect data from children.

11. Changes

We may update this policy as the platform grows. If changes are significant, we will notify you in the app or by email. The date at the top shows the latest version.