Privacy Policy

1. Scope and Controller Information

This Privacy Policy explains how AstraSky AI handles data when you visit our website, contact us, request institutional credentials, or engage our defense platforms and engineering services. The primary Data Controller for this website, sovereign defense platforms, and aerospace technologies is AstraSky AI Tech Private Limited (India). Regional commercial IT and software services are delivered through independent operating entities in their respective jurisdictions: AstraSky AI FZE (Sharjah, UAE), AstraSky AI LLC (Sheridan, USA), and AstraSkyTech Inc. (Abbotsford, Canada). All sovereign defense programs, intellectual property, and aerospace manufacturing remain strictly ring-fenced under AstraSky AI Tech Private Limited (India).

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identity and contact data such as your name, business email address, phone number, company, job title, and country.
• Inquiry and communications data such as messages you send to us, meeting requests, project details, and support history.
• Institutional clearance and briefing data such as defense command or agency, organizational title, verified institutional email, and bilateral NDA records.
• Technical and usage data such as IP address, browser type, device information, pages viewed, referrer, timestamps, and diagnostic logs.
• Commercial and engagement data such as proposals, statements of work, service history, and business relationship records.

3. Sources of Data

We collect personal data directly from you, automatically from your browser or device, and in some cases from business partners, publicly available professional sources, or client representatives acting on behalf of their organization.

4. How We Use Personal Data

We use personal data to:

• operate, secure, and improve our website, accounts, and services;
• respond to inquiries, schedule meetings, and provide requested information;
• prepare proposals, deliver projects, and manage client relationships;
• authenticate users, protect against fraud, abuse, and unauthorized access;
• comply with legal, regulatory, tax, accounting, export-control, and contractual obligations; and
• send business updates or marketing communications where permitted by law and, where required, with your consent.

5. Legal Bases for EU and EEA Visitors

Where EU or EEA data protection law applies, we process personal data on one or more of these legal bases: performance of a contract or pre-contractual steps you request, compliance with legal obligations, your consent, and our legitimate interests in operating, securing, and improving our business where those interests are not overridden by your rights.

6. How We Share Personal Data

We do not sell personal data. We may disclose personal data to:

• AstraSky AI group entities involved in the relevant relationship or service delivery;
• hosting, cloud, security, communications, and IT support providers working under appropriate contractual obligations;
• professional advisers, auditors, insurers, and legal counsel where needed;
• courts, regulators, law enforcement, or other competent authorities where disclosure is required by law or necessary to protect rights and security; and
• a purchaser, investor, or successor in connection with a merger, financing, acquisition, or asset transfer.

7. International Transfers

Because AstraSky AI operates across multiple countries, personal data may be transferred to and processed outside your home jurisdiction, including in the UAE, United States, and Canada. Where EU or EEA transfer rules apply, we use appropriate safeguards such as adequacy decisions, Standard Contractual Clauses, or another lawful transfer mechanism.

8. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this policy, including to maintain accounts, respond to requests, deliver services, resolve disputes, enforce agreements, and comply with legal obligations. As a general guide, inquiry records may be kept for up to 24 months after our last meaningful interaction, account records for the life of the account plus a reasonable retention period, and contract or compliance records for longer where required by law or legitimate business need.

9. Your Privacy Rights

Depending on where you live, you may have privacy rights that include:

• access to the personal data we hold about you;
• correction of inaccurate or incomplete data;
• deletion of personal data, subject to lawful exceptions;
• restriction of processing or objection to certain processing;
• data portability in a usable format where applicable;
• withdrawal of consent where processing is based on consent; and
• the right to complain to a supervisory authority or regulator where applicable.

10. Additional U.S. State Privacy Rights

Residents of certain U.S. states may also have rights to know, access, correct, delete, and obtain a portable copy of personal data, as well as rights to opt out of the sale of personal data, targeted advertising, or certain profiling where applicable. At the time of this notice, AstraSky AI does not sell personal data and does not share personal data for cross-context behavioral advertising on this website. We will not discriminate against you for exercising applicable privacy rights.

11. Exercising Your Rights

To submit a privacy request, contact us at contact@astrasky.ai. We may need to verify your identity before completing a request. You may also use an authorized agent where local law allows it. If U.S. state law gives you a right to appeal a request decision, you may do so by replying to our response within 30 days.

12. Cookies and Similar Technologies

We use limited cookies and similar technologies for account security, session continuity, and core site operation. Please review our Cookie Policy for more detail. If we introduce non-essential cookies that require consent under applicable law, we will update our notice, ask for consent where required, and provide a way to revisit those preferences.

13. Security and Children

We use reasonable technical and organizational safeguards to protect personal data, but no internet transmission or storage system can be guaranteed completely secure. Our website and services are intended for professional and business audiences and are not directed to children under 16.

14. Changes and Contact

We may update this Privacy Policy from time to time to reflect changes in law, our practices, or our services. Any updated version will be posted on this page with a revised effective date.

AstraSky AI
Email: contact@astrasky.ai