Privacy Policy

1. Introduction

At Astrovion Ltd. ("we", "our", or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services.

By using our services, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Give Us

Our contact form collects only what it asks for:

• Your name
• Your email address
• The topics you select
• The message you write

If you go on to work with us, we also process the contract and billing details needed for that engagement. Those are collected directly, not through this website.

2.2 Information Collected Automatically

• Server logs kept by our hosting provider, including IP address, requested URL, and user agent
• Aggregated page views and performance metrics (Vercel Analytics and Speed Insights), collected without cookies and without identifying you
• If you accept analytics cookies: page views, clicks on calls to action, clicks on links that lead to other websites, article scroll depth, form interactions and submissions, and page performance metrics, recorded by Google Analytics 4

We do not use tracking pixels, session recording, heat maps, or advertising networks.

3. How We Use Your Information

We use your information for the following purposes:

• To provide and improve our software development services
• To communicate with you about projects and services
• To process payments and manage billing
• To send important updates and technical notifications
• To analyze website usage and improve user experience
• To comply with legal obligations and protect our rights

4. Legal Bases for Processing

Where the GDPR applies, we rely on the following bases:

• Consent (Art. 6(1)(a)) for analytics cookies. You give it in the cookie banner and can withdraw it at any time.
• Steps prior to a contract (Art. 6(1)(b)) for handling your contact request and any engagement that follows.
• Legitimate interests (Art. 6(1)(f)) for keeping the site secure and available, and for cookieless aggregate measurement of traffic and page performance.
• Legal obligation (Art. 6(1)(c)) for accounting and tax records.

5. Who Receives Your Data

We do not sell, trade, or rent your personal information. It reaches only these processors, each acting on our instructions:

• Vercel Inc. (United States) hosts the website and provides Vercel Analytics and Speed Insights. It processes server logs and aggregate, cookieless usage and performance data.
• Google Ireland Ltd. provides Google Analytics 4, active only after you accept analytics cookies.
• Brevo (Sendinblue SAS) (France) delivers the notification email from our contact form and stores the enquiry as a contact record in our CRM.

Blog articles may embed third-party video players. When an embedded video loads, the provider receives your IP address and may set its own cookies under its own privacy policy.

We may also disclose information when required by law or legal process, to protect our rights, property, or safety, or in connection with a business merger or acquisition.

6. International Data Transfers

Some of these providers process data outside the European Economic Area, including in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework. You can request details of the safeguards in place by writing to the address in the contact section.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure hosting and backup procedures
• Employee training on data protection

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data.

8. Cookies and Local Storage

Regardless of your choice, this site stores one thing in your browser: your cookie decision. It is not a cookie and it never leaves your device.

Analytics cookies are set by Google Analytics 4 only after you accept them. Until you do, the Google Analytics script is not loaded at all: no request reaches Google, no cookies are set, and nothing about your visit is sent, not even anonymised signals. Google Analytics 4 does not store IP addresses, and we do not use it for advertising, remarketing, or personalisation.

Vercel Analytics and Speed Insights run without cookies and without any identifier tied to you. They report aggregate page views and performance only, which is why they are not part of the cookie banner.

You can withdraw your consent at any time by clearing this site's data in your browser, which brings the cookie banner back. Declining costs you nothing: every part of the site works the same either way.

9. Your Rights

You have the following rights regarding your personal information:

• Right to access your personal data
• Right to correct inaccurate information
• Right to delete your personal data
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time, without affecting processing carried out before the withdrawal

To exercise these rights, contact us using the details below. We respond within one month.

If you are in the European Economic Area or the United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority.

10. Data Retention

• Contact enquiries and the CRM record created from them: up to 24 months after our last exchange, unless they become part of a client relationship
• Google Analytics event data: 14 months, then deleted automatically by Google
• Hosting server logs: retained by Vercel under its own retention schedule, typically no more than 30 days
• Contract, accounting, and tax records: as long as the applicable statutory retention period requires

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website with a new "Last updated" date.

12. Contact Information

Astrovion Ltd. is the controller of the data described here. For any question about this policy, or to exercise any of the rights in section 9, write to us: