# Privacy Policy
**App Name:** Astra Catalyst
**Company:** Spider Branch Tech
**Website:** https://www.spiderbranchtech.com
**Effective Date:** May 11, 2026
**Last Updated:** May 11, 2026
---
## 1. Introduction
Spider Branch Tech ("we," "us," or "our") operates the Astra application ("Astra Catalyst," "Astra Ai," "Astra," "the App," or "the Service"), available through our web application, desktop application, and as a Discord application ("Astra's Discord Bot"). This Privacy Policy explains how we collect, use, store, and share information — including Google user data and Discord user data — when you use Astra.
By using Astra, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App.
---
## 2. Information We Collect
### 2.1 Google Account Information
When you sign in to Astra using your Google account via OAuth 2.0, we collect the following information from Google:
- **Basic profile data**: Your name, email address, and profile picture
- **Gmail data**: Email messages, metadata, labels, and related content, to the extent required by the features you use
- **Google Workspace data**: Files, documents, and data stored in your Google Drive and associated Google Workspace applications, to the extent required by the features you use
We only request access to the specific Google data scopes necessary to provide Astra's core functionality. We do not request broader access than what is needed.
### 2.2 Information You Provide
We may also collect information you provide directly, such as:
- Account preferences and settings
- Support requests or feedback you submit to us
### 2.3 Usage and Technical Data
We may automatically collect certain technical information when you use Astra, including:
- Browser type and version
- Operating system
- IP address (used for security and fraud prevention only)
- Pages accessed and actions taken within the App
- Timestamps of activity
### 2.4 Discord Account Information
When you link your Astra account to Discord, or interact with Astra's Discord Bot, we may collect:
Discord identifiers: your Discord user ID and Discord display name
Message content: the content of messages you send to Astra's Discord Bot — via direct message, @mention, reply, or by saying her name in a channel where she's active — processed to generate a response
Server (Guild) and channel identifiers: the Discord server and channel IDs where Astra's Discord Bot is active
Server administrator-configured data: if a server administrator configures Astra's Discord Bot, we store what they provide — a welcome channel, active-channel list, FAQ entries, and event/roster information submitted by server members
If you interact with Astra's Discord Bot without linking your Discord account to an Astra account, your message content is processed only to generate that reply and is not retained afterward.
---
## 3. How We Use Your Information
We use the information we collect — including Google user data — solely for the following purposes:
- **To provide the Service**: To operate, maintain, and deliver the features and functionality of Astra
- **To personalize your experience**: To display your name, email, and relevant account information within the App
- **To process Gmail data**: To enable email-related features within Astra, such as reading, organizing, or acting on emails, based on features you actively use
- **To process Google Workspace data**: To enable document, file, and collaboration features within Astra, based on features you actively use
- **To communicate with you**: To send service-related notices, updates, or respond to your support requests
- **To improve the Service**: To analyze usage patterns and improve Astra's functionality and user experience
- **For security purposes**: To detect, investigate, and prevent fraudulent or unauthorized activity
- **To provide Discord features: to generate conversational replies, maintain cross-platform memory continuity for linked accounts, and operate community features such as channel summarization, event/roster tracking, welcome messages, and FAQ responses
- **To send opted-in notifications: to send proactive or scheduled messages through Discord, but only to users or channels that have opted in
**We do not use your Google data to serve advertisements.** We do not allow third parties to use your Google data for advertising purposes.
**Discord as platform operator: Because Astra's Discord Bot operates on Discord's platform, messages you send are also subject to Discord's own Privacy Policy, independent of how Astra retains that data.
---
## 4. How We Share Your Information
We do not sell your personal information or Google user data to third parties.
We may share your information only in the following limited circumstances:
- **Service providers**: We may share data with trusted third-party vendors who assist us in operating Astra (e.g., cloud hosting, analytics), subject to strict confidentiality obligations. These providers are not permitted to use your data for their own purposes.
- **Legal compliance**: We may disclose information if required to do so by law, court order, or governmental authority.
- **Business transfers**: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity. We will notify you prior to any such transfer and provide you the option to delete your data.
- **With your consent**: We may share your information for any other purpose with your explicit prior consent.
---
## 5. Google and Discord API Services — Limited Use Disclosure
Astra's use of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Specifically:
- Google user data is only used to provide or improve user-facing features that are visible and prominent within Astra
- Google user data is not used for any purpose unrelated to the App's core functionality
- Google user data is not transferred to third parties except as necessary to provide the Service, or as required by law
- Google user data is not used for serving ads or for data brokers, or any other purposes not expressly described in this Privacy Policy
### 5.1 Discord API Services
Astra's use of information received from the Discord API adheres to Discord's Developer Policy and Developer Terms of Service. Specifically: Discord user data is only used to provide or improve Astra's Discord Bot; it is not sold, and is not shared with third parties except as described in Section 4; it is not used for advertising or any purpose unrelated to the Service; and we do not contact users by direct message unless they've opted in.
---
## 6. Data Storage and Security
Your data, including any Google user data accessed by Astra, is stored on secure servers. We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit (TLS/HTTPS)
- Encryption of sensitive data at rest
- Access controls limiting who within Spider Branch Tech can access user data
- Regular security assessments and monitoring
While we take reasonable precautions, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and protect your Google account credentials.
---
## 7. Data Retention and Deletion
We retain your personal information and Google user data for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
- **Account data**: Retained for the duration of your active account
- **Google user data**: Retained only as long as necessary to deliver the features of Astra; cached or stored Google data is deleted promptly when no longer needed
- **Upon account deletion**: When you delete your Astra account, we will delete or anonymize your personal data within 30 days, unless retention is required by law
- **Discord message content (unlinked users): processed only to generate a reply; not retained afterward
- **Discord message content (linked users): retained as part of your Astra memory, the same as web/desktop conversations, until you request deletion
- **Server (Guild) configuration data: retained while Astra's Discord Bot remains active in that server, or until an administrator removes it or requests deletion
You may request deletion of your data at any time by contacting us at the address below.
---
## 8. Your Rights and Choices
You have the following rights regarding your personal information:
- **Access**: You may request a copy of the personal data we hold about you
- **Correction**: You may request that we correct inaccurate or incomplete data
- **Deletion**: You may request deletion of your personal data
- **Revoke Google access**: You may revoke Astra's access to your Google account at any time through your [Google Account permissions page](https://myaccount.google.com/permissions). Revoking access will disable Google-connected features within Astra.
- **Data portability**: You may request a portable copy of your data in a structured, machine-readable format
- **Revoke Discord access: you may unlink your Discord account from Astra, or revoke Astra's access through Discord's own Authorized Apps settings, at any time.
### 8.1 Additional Rights for EEA, UK, and Swiss Residents (GDPR) — right to object to or restrict processing; right to withdraw consent at any time; right to lodge a complaint with your local supervisory authority. Spider Branch Tech acts as the data controller for personal data described in this Policy. Spider Branch Tech is based in the United States, and your personal data may be transferred to and processed in the United States; where required by applicable law, we implement appropriate safeguards for such transfers.
### 8.2 Additional Rights for California Residents (CCPA/CPRA) — right to know what personal information we collect, use, and disclose; right to request deletion; right to correct inaccurate information; right to opt out of sale or sharing (we do not sell or share personal information); right to non-discrimination for exercising these rights.
To exercise any of these rights, please contact us at: **privacy@spiderbranchtech.com**
---
## 9. Children's Privacy
Astra is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will promptly delete it.
---
## 10. Third-Party Links and Services
Astra may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through or in connection with Astra.
---
## 11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through the App. We encourage you to review this policy periodically.
Your continued use of Astra after any changes constitutes your acceptance of the updated policy.
---
## 12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
**Spider Branch Tech**
Email: info@spiderbranchtech.com
Website: https://www.spiderbranchtech.com
