TL;DR: We collect minimal data necessary to provide our service. We never sell your data. You have full control over your information. We are GDPR, CCPA, and India DPDPA compliant.
What We Collect
Account Information: Name, email, company name, billing address
Payment Information: Billing data processed through PayPal and other payment providers
Brand Data: Brand names, products, competitors you track
Tracked Prompts: Queries you create to monitor across AI platforms
Usage Data: Pages visited, features used, device information, approximate location
How We Use Your Information
Monitor AI platforms for your brand mentions across 10 platforms
Generate analytics, reports, and competitive intelligence
Send alerts, billing notifications, and service communications
Produce anonymous, aggregated industry reports (never identifiable to any user or brand)
Comply with legal obligations (GDPR Art. 6(1)(b)(c)(f))
We Never Sell Your Data
Astiva Technologies Private Limited does not sell, trade, or rent your personal information to third parties. Data is shared only with sub-processors required to operate the service: OpenAI, Perplexity AI, Anthropic, Google (Gemini), Brevo (email), PayPal (payments), DigitalOcean (hosting), and Sentry (error monitoring).
Data Retention
Account data: retained while active + 30 days after deletion
Billing records: 7 years (tax requirements)
Usage logs: 90 days
Free Analysis tier data: 90 days after prompt quota exhausted
Your Rights
All users may access, correct, delete, or export their data. EU/UK users have full GDPR rights including the right to object and data portability. California residents have CCPA rights. Indian residents have DPDPA rights. Contact [email protected] to exercise any right. We respond within 30 days.
Security
Data encrypted in transit (TLS 1.2+) and at rest (Fernet symmetric encryption). JWT authentication, role-based access, daily backups with 30-day retention. SOC 2 Type II controls implemented with formal audit in progress.