# Privacy Policy
**App Name:** Astra Catalyst
**Company:** Spider Branch Tech
**Website:** https://www.spiderbranchtech.com
**Effective Date:** May 11, 2026
**Last Updated:** May 11, 2026
---
## 1. Introduction
Spider Branch Tech ("we," "us," or "our") operates the Astra web application ("Astra Catalyst," "Astra Ai," "Astra," "the App," or "the Service"). This Privacy Policy explains how we collect, use, store, and share information — including Google user data — when you use Astra.
By using Astra, you agree to the practices described in this Privacy Policy. If you do not agree, please discontinue use of the App.
---
## 2. Information We Collect
### 2.1 Google Account Information
When you sign in to Astra using your Google account via OAuth 2.0, we collect the following information from Google:
- **Basic profile data**: Your name, email address, and profile picture
- **Gmail data**: Email messages, metadata, labels, and related content, to the extent required by the features you use
- **Google Workspace data**: Files, documents, and data stored in your Google Drive and associated Google Workspace applications, to the extent required by the features you use
We only request access to the specific Google data scopes necessary to provide Astra's core functionality. We do not request broader access than what is needed.
### 2.2 Information You Provide
We may also collect information you provide directly, such as:
- Account preferences and settings
- Support requests or feedback you submit to us
### 2.3 Usage and Technical Data
We may automatically collect certain technical information when you use Astra, including:
- Browser type and version
- Operating system
- IP address (used for security and fraud prevention only)
- Pages accessed and actions taken within the App
- Timestamps of activity
---
## 3. How We Use Your Information
We use the information we collect — including Google user data — solely for the following purposes:
- **To provide the Service**: To operate, maintain, and deliver the features and functionality of Astra
- **To personalize your experience**: To display your name, email, and relevant account information within the App
- **To process Gmail data**: To enable email-related features within Astra, such as reading, organizing, or acting on emails, based on features you actively use
- **To process Google Workspace data**: To enable document, file, and collaboration features within Astra, based on features you actively use
- **To communicate with you**: To send service-related notices, updates, or respond to your support requests
- **To improve the Service**: To analyze usage patterns and improve Astra's functionality and user experience
- **For security purposes**: To detect, investigate, and prevent fraudulent or unauthorized activity
**We do not use your Google data to serve advertisements.** We do not allow third parties to use your Google data for advertising purposes.
---
## 4. How We Share Your Information
We do not sell your personal information or Google user data to third parties.
We may share your information only in the following limited circumstances:
- **Service providers**: We may share data with trusted third-party vendors who assist us in operating Astra (e.g., cloud hosting, analytics), subject to strict confidentiality obligations. These providers are not permitted to use your data for their own purposes.
- **Legal compliance**: We may disclose information if required to do so by law, court order, or governmental authority.
- **Business transfers**: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity. We will notify you prior to any such transfer and provide you the option to delete your data.
- **With your consent**: We may share your information for any other purpose with your explicit prior consent.
---
## 5. Google API Services — Limited Use Disclosure
Astra's use of information received from Google APIs adheres to the [Google API Services User Data Policy](https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Specifically:
- Google user data is only used to provide or improve user-facing features that are visible and prominent within Astra
- Google user data is not used for any purpose unrelated to the App's core functionality
- Google user data is not transferred to third parties except as necessary to provide the Service, or as required by law
- Google user data is not used for serving ads or for data brokers, or any other purposes not expressly described in this Privacy Policy
---
## 6. Data Storage and Security
Your data, including any Google user data accessed by Astra, is stored on secure servers. We implement industry-standard security measures to protect your information, including:
- Encryption of data in transit (TLS/HTTPS)
- Encryption of sensitive data at rest
- Access controls limiting who within Spider Branch Tech can access user data
- Regular security assessments and monitoring
While we take reasonable precautions, no method of transmission or storage is 100% secure. We encourage you to use strong passwords and protect your Google account credentials.
---
## 7. Data Retention and Deletion
We retain your personal information and Google user data for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.
- **Account data**: Retained for the duration of your active account
- **Google user data**: Retained only as long as necessary to deliver the features of Astra; cached or stored Google data is deleted promptly when no longer needed
- **Upon account deletion**: When you delete your Astra account, we will delete or anonymize your personal data within 30 days, unless retention is required by law
You may request deletion of your data at any time by contacting us at the address below.
---
## 8. Your Rights and Choices
You have the following rights regarding your personal information:
- **Access**: You may request a copy of the personal data we hold about you
- **Correction**: You may request that we correct inaccurate or incomplete data
- **Deletion**: You may request deletion of your personal data
- **Revoke Google access**: You may revoke Astra's access to your Google account at any time through your [Google Account permissions page](https://myaccount.google.com/permissions). Revoking access will disable Google-connected features within Astra.
- **Data portability**: You may request a portable copy of your data in a structured, machine-readable format
To exercise any of these rights, please contact us at: **privacy@spiderbranchtech.com**
---
## 9. Children's Privacy
Astra is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will promptly delete it.
---
## 10. Third-Party Links and Services
Astra may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review the privacy policies of any third-party services you access through or in connection with Astra.
---
## 11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, where appropriate, notify you by email or through the App. We encourage you to review this policy periodically.
Your continued use of Astra after any changes constitutes your acceptance of the updated policy.
---
## 12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
**Spider Branch Tech**
Email: info@spiderbranchtech.com
Website: https://www.spiderbranchtech.com
