Privacy Policy

This Privacy Policy explains how Astraflare Limited (“Astraflare”, “we”, “us”) collects, uses, shares and protects personal data when you visit a3ihub.com or use any app published by Astraflare Limited, including apps that let you sign in with your Google account under the name “Astraflare”.

Each app may also publish its own privacy notice with app-specific details. Those notices supplement this policy and must not contradict it. If they differ, this policy applies to any data received through Sign in with Google.

1. Who we are

The data controller is Astraflare Limited, a private company limited by shares incorporated in Hong Kong (Company No. / BRN 77639707). For any privacy question or request, email privacy@a3ihub.com.

2. Data we collect

Sign in with Google. When you choose to sign in with Google, we request only the basic scopes openid, email and profile. Google then shares with us your name, email address, profile picture and a Google account identifier. We do not request or access your Gmail, Google Drive, contacts, calendar or any other Google data.

Account and purchase data. Your account settings, the plan or items you buy, transaction references and billing country. Payments are processed by established payment processors such as Stripe, which handle your card details.

Content you provide. Images, video, audio, text or questionnaire answers you upload or enter in an app, and the results the app returns to you.

Support messages. Emails you send us and our replies.

Technical data. IP address, device and browser type, pages and features used, and error logs, collected to keep the services secure and working.

a3ihub.com itself has no account system and no sign-in. The analytics it uses, and the cookies they set, are described in section 6.

3. How we use data

We use personal data to:

sign you in, keep your account secure and show your profile in our apps;
provide the features you ask for, including processing the content you submit;
process payments, link purchases to your account, handle cancellations and refunds;
send service emails about your account, purchases and important changes;
send marketing emails, only if you have agreed to receive them; each one includes an unsubscribe link;
answer support, billing and privacy requests;
prevent fraud and abuse, and comply with legal obligations.

Legal bases (EEA, UK and Switzerland). Where the GDPR or a similar law applies, we rely on: contract — to create your account, provide the features you ask for, process payments and send service emails; legal obligation — to keep transaction records and answer lawful requests; legitimate interests — to keep our services secure, prevent fraud and abuse, and measure use of a3ihub.com in aggregate with Plausible; and consent — for Google Analytics, Microsoft Clarity and marketing emails. You can withdraw consent at any time without affecting processing that happened before.

4. Google user data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google user data only to provide and improve the sign-in and account features described above.
We do not sell Google user data and do not use it for advertising, retargeting or credit decisions.
We do not transfer Google user data to others except as needed to provide our services (for example, our hosting provider), to comply with law, or as part of a merger or acquisition with notice to you.
No person reads your Google user data unless you ask us to (for example, in a support request), it is needed for security or abuse investigations, or the law requires it.
We do not use Google user data to train machine-learning models.

We share personal data only with service providers that process it on our behalf, under contracts that limit their use of it:

cloud hosting, databases and storage;
payment processors (such as Stripe);
email delivery and customer support tools;
error monitoring and analytics (Plausible, Google Analytics, Microsoft Clarity — see section 6);
AI service providers that process the content you submit to an app in order to return results to you. They may not use your content to train their models where we can contractually prevent it.

We may also disclose data if required by law or to protect the rights and safety of our users. We do not sell your personal data.

6. Cookies and analytics

Our apps use cookies or similar storage that are strictly necessary to keep you signed in and remember your settings. We do not use cookies for our own advertising. On a3ihub.com we use:

Plausible Analytics, which we host ourselves at plausible.a3i.ai. It sets no cookies and stores no personal data; it counts page views, referring sites, outbound link clicks and a few button clicks in aggregate. It is always on.
Google Analytics 4 (Google LLC), to measure visits and how the site is used. It uses cookies and processes your IP address and device information. Data is kept for Google’s default retention period (currently up to 14 months for event data).
Microsoft Clarity (Microsoft Corporation), which records pseudonymised sessions and heatmaps (clicks, scrolling, mouse movement) to show us where the site is confusing. Clarity masks text that visitors type by default, and this site has no forms. Recordings are kept for Microsoft’s default period (currently about 30 days; heatmap data longer). Clarity may also set Microsoft’s MUID cookie (through c.bing.com), which Microsoft uses for its own purposes, including advertising.

Consent. If you appear to be in the European Economic Area, the United Kingdom or Switzerland, Google Analytics and Microsoft Clarity stay off (Google Analytics runs in a cookieless, consent-denied mode) until you click Accept in the cookie bar. Elsewhere they are on by default. You can change or withdraw your choice at any time with Cookie settings at the bottom of every page; you can also block cookies in your browser.

7. Retention

We keep account data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except records we must keep for tax, accounting or legal reasons (typically up to 7 years for transaction records), and short-lived backups that expire on their normal schedule. Content you upload is kept only as long as needed to provide the feature, or as described in the app.

8. Your choices and rights

Remove Google access: you can revoke our access at any time at myaccount.google.com/permissions.
Delete your account: use the option in the app, or email privacy@a3ihub.com from the address on your account.
Access and correction: under the Hong Kong Personal Data (Privacy) Ordinance (Cap. 486) you may request access to, and correction of, your personal data. We respond within 40 days. A reasonable fee may apply to data access requests, as permitted by law.
EEA, UK and Switzerland: you also have the right to access, correct and erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time (for analytics, use Cookie settings at the bottom of every page).
Complaints: you can complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong, or to the data protection authority where you live or work. We would appreciate the chance to resolve your concern first at privacy@a3ihub.com.
If the law requires us to appoint a representative in the European Union or the United Kingdom, we will do so and name them in this policy.

9. Security

We use encryption in transit, access controls and least-privilege practices to protect personal data. No system is perfectly secure; if a breach affects your data, we will notify you and the relevant authorities where required.

10. Children

Our services are not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

11. International transfers

We operate from Hong Kong and our service providers may process data in other countries, including the United States and the European Union. When we transfer data, we take steps to ensure it remains protected as described in this policy.

12. Changes to this policy

We will post any changes on this page and update the date above. If a change is material, we will notify you by email or in the app before it takes effect.

13. Contact

Astraflare Limited · privacy@a3ihub.com