Privacy notice

Who operates the service

ASTROUNAUT.AI PRIVATE LIMITED, India, operates Astronaut, AdOS and BidGuard. Contact support@astrounaut.com for privacy questions or requests. This notice covers our website, account administration, support and available product features. When your organization controls personal data in its workspace, we process it under its instructions and the applicable service agreement.

Data and development status

We process account details such as name, email, provider identity, workspace membership, roles and sessions; information supplied in workspaces and support requests; and technical, access and audit records needed to operate and protect the service. Connected-provider data includes authorization identifiers, tokens, permissions, selected business assets, advertising accounts, campaigns and performance reports, within the access granted.

Google Ads monitoring is available in our private alpha. Meta customer connections and management features remain under development. We use authorized Meta test credentials and test-asset data to validate the integration. A development permission request does not mean a customer feature is live.

When an available Meta feature is authorized, it may use the authorizing profile identifier, selected business, ad-account or Page identifiers and metadata, campaign configuration and advertising performance. Separate Instagram, Threads or WhatsApp features may use professional profile information, content, business phone or account identifiers, templates or messages only when enabled and separately authorized. Provider authorization does not give us your Facebook, Instagram or Google password.

Purposes and legal bases

We use data to provide requested connections and reporting, administer accounts and workspace access, support users, protect the service and maintain audit evidence. Available provider changes require the authorization and approval controls applicable to that operation.

Where applicable, our legal bases are performing a contract, legitimate interests in operation, security and support balanced against individual rights, legal obligations, and consent where required for optional processing. Required account information or provider authorization is necessary for the corresponding feature. Provider consent does not authorize unrelated uses.

Connected-provider data

We use provider data for the features you request and authorize. We do not sell it or use it to train general-purpose AI models. Personnel access is limited to authorized service, support, security and legal purposes. Workspace operators can access data according to their permissions.

Astronaut's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

You can revoke Google access in Google account permissions. For Meta, remove the app in Facebook Business Integrations or the relevant connected-app settings. Revocation stops future access under that authorization; it does not erase retained data. See deletion instructions below.

Recipients and international processing

Service providers process information needed for their roles, including WorkOS for hosted sign-in and Google Cloud for infrastructure and credential storage where used. Connecting Google or Meta also involves that provider's processing under its policies. Authorized support personnel and professional advisers may receive limited information for their roles. We may disclose information when required by law or necessary to protect people or the service.

We operate from India, and providers may process information internationally. Where applicable law requires transfer safeguards, they must form part of the relevant service and data-processing arrangements. Contact us for information about recipients, processing locations and safeguards applicable to your service.

Browser storage and measurement

Essential browser storage supports sessions and security. Website analytics and advertising-measurement tools, where configured, process browser, device and page-visit information. Browser settings can control or clear stored information; this may affect sign-in. Contact us with questions about measurement or your privacy choices.

Retention and safeguards

We retain data for as long as needed for its service, security, support and legal purposes. Duration depends on data type and applicable obligations. Disconnecting a provider does not automatically erase historical reports, audit evidence or backups. Access controls and technical safeguards, including protection of provider credentials, help secure data. No online service can guarantee absolute security.

Data deletion and privacy requests

Email support@astrounaut.com with the subject “AdOS privacy or data deletion request”. Identify your account email, workspace and connected provider or asset so we can locate the data. Do not send passwords, tokens or unnecessary identity documents. We may verify your identity and authority.

You can request deletion of connected Meta or Google data, provider disconnection, or closure of your service access. We will delete data that can be erased, explain information that must remain for a lawful reason, and address backup copies through our retention process. If your organization controls the data, we will direct the request to it or assist under its instructions.

Depending on applicable law, you may request access, correction, restriction or portability, object to processing, withdraw consent without affecting prior lawful processing, and complain to the relevant data-protection authority. We handle requests within the deadlines required by applicable law.

Children and changes

This business service is intended for adults. Contact us if a child has supplied personal data. We update this notice when practices change and provide appropriate notice of materially different uses.