Legal
Privacy Policy
Last updated: 9 September 2026
This policy explains what astradevs.io collects, why, where it is stored, and how to have it removed. It is written to be read, not skimmed.
1. Who this covers
This website is operated by Astra Devs, a division of North Star Holdings(“Astra Devs”, “we”), based in Ottawa, Canada. It applies to astradevs.io and its subdomains that link to this policy. Sibling sites such as astrawebdev.com and product sites such as cyberlensai.com publish their own policies.
2. What we collect
Contact form. Name, email address, optional company and website, the project details you type, and your preferred contact method. We also record the submission time and a hashed form of your IP address for rate limiting and abuse prevention.
Server logs. Our hosting provider records standard request data (IP address, user agent, requested URL, timestamp) for security and operations. These logs are retained by the provider for a short period and are not used to build profiles.
Analytics. No analytics or tracking scripts are loaded on this site.
Cookies. The public site sets no cookies. The private operations area at /hub, used only by Astra Devs staff, sets session cookies required for sign-in.
3. How we use it
- To reply to your inquiry and, if you engage us, to scope and deliver the work.
- To keep the site secure, prevent spam and enforce rate limits.
- To understand, in aggregate, which pages are useful.
We do not sell personal information, and we do not use it for advertising.
4. Where it is stored and who processes it
- Vercel hosts the site and serves it from a global edge network.
- Resend delivers contact-form submissions to us by email.
- Supabase stores contact-form submissions in a database located in Canada (ca-central-1) so we can track replies.
Each provider acts as a processor under a written agreement and may store data outside Canada.
5. Retention
Contact-form submissions are kept for up to 24 months after our last exchange, or longer only where an engagement requires it. Rate-limit records expire within one hour. You may ask us to delete your submission at any time.
6. Your rights
Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law, you may ask what personal information we hold about you, request a correction, withdraw consent, or ask for deletion. Contact us through info@astradevs.io. We respond within 30 days.
7. Security
The site is served over HTTPS with strict transport security, a content security policy and hardened headers. Access to submissions is limited to authorised Astra Devs staff behind authentication with multi-factor support. No method of transmission is perfectly secure, and we will notify affected individuals of any breach as the law requires.
8. Children
This site is intended for businesses and adults. We do not knowingly collect information from anyone under 16.
9. Changes
We will update this page when our practices change and revise the date above. Material changes will be noted on the page for at least 30 days.
10. Contact
Privacy questions and requests: info@astradevs.io. Postal address available on request.