Legal

Privacy Statement

This describes how AstralGen AI collects, uses, and protects your information.

Last updated: August 2026

1. Overview

AstralGen AI ("AstralGen", "we", "us") provides an AI-powered workspace for creating and managing documents. This statement explains what information we collect when you use our website and product, why we collect it, and the choices you have.

2. Information we collect

• Account information: name, email address, and password when you create a new account. In case you used your existing Google and Facebook account, we never even store your password.
• Content you create: voice recordings, transcripts, documents, notes, and prompts you generate or upload within AstralGen. The voice recoding files are automatically deleted from AstralGen's Servers after 24 hours.
• Usage data: how you interact with the product, including features used and session activity.
• Device & log data: IP address, browser type, and similar technical information.

3. How we use information

We use your information to provide and improve the AstralGen service, personalize your experience, generate the documents and outputs you request, communicate with you about your account, and maintain the security of our platform. AstralGen never uses the content you create — including voice recordings, transcripts, documents, notes, or prompts — to train AI models, whether operated by AstralGen or by our third-party AI providers.

4. AI providers & sub-processors

When you use AstralGen's AI features, including document generation and the chat function, your prompts and related content may be processed by industry-standard third-party AI model providers on our behalf, currently including OpenAI (ChatGPT), Anthropic (Claude), Google (Gemini), and xAI (Grok). These providers are contractually prohibited from using your content to train their own models, and are bound by data processing agreements consistent with applicable data protection law. For customers on our blackbox solution, AstralGen instead provides a locally hosted LLM within the customer's own environment, giving those customers enhanced data isolation by keeping AI processing inside their environment rather than sending content to external AI providers. A current list of our sub-processors is available on request.

5. Cookies & tracking

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the product is used. You can control cookies through your browser settings.

6. How we share information

We do not sell your personal information. We may share information with service providers who help us operate AstralGen (such as hosting, analytics, and AI model providers), or when required by law. Where we share information with service providers or sub-processors, we enter into data processing agreements (DPAs) consistent with applicable data protection laws, such as the New Zealand Privacy Act 2020 and, where relevant, the GDPR.

7. Data storage & security

We use industry-standard safeguards to protect your information, including:
• Encryption in transit and at rest for stored content.
• End-to-end encryption for [confirm scope, e.g., voice recordings and documents], so content is encrypted before it leaves your device and can only be decrypted by you.
• Access controls restricting internal access to your data to authorised personnel on a need-to-know basis.
• AstralGen does not currently hold formal independent security certifications; we are working towards ISO 27001 certification.
All AstralGen cloud servers are currently located in New Zealand. We encourage you to use a strong, unique password and also use Multi-Factor Authentication (MFA).

8. Data retention & backups

Voice recording files are automatically deleted from AstralGen's servers within 24 hours of upload, regardless of whether a transcript has been generated. We take automatic backups of your data multiple times per day, which are stored with a second independent public cloud provider, Microsoft, in addition to our primary New Zealand infrastructure, for disaster-recovery purposes. When you delete content or your account, backup copies are retained for 30 days and are then permanently deleted.

9. Business continuity

In the event that AstralGen ceases operations or is acquired, we will provide advance notice to account holders where reasonably possible, along with a reasonable opportunity to export your data before any account or content deletion.

10. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal information. To make a request, contact us using the details below. Currently our all Cloud Servers are located in New Zealand.

11. Children's privacy

AstralGen is not directed to children under 16, and we do not knowingly collect personal information from them.

12. Changes to this statement

We may update this statement from time to time. We'll post the updated version here with a new "last updated" date.

13. Contact us

For questions regarding this Privacy Statement, please use the form on our Contact Page.