AstraeaTech Dev / Legal

Privacy Policy

Last updated: 27 October 2026

AstraeaTech Dev is a software and freelance services business based in the Philippines. This policy explains how we handle information on our company website, shared Astraea Account service, project inquiries, and engagements. You can browse our services, product catalog, talent profiles, and demo previews without signing in.

1. Information we process

• Inquiries and services. If you email us or contact a listed freelancer, we receive the contact details, correspondence, project requirements, files, and other information you choose to share. For agreed work, we may also handle client-provided business records and access permissions needed for that scope. Please share only what is needed and avoid sending passwords in ordinary messages.
• Account identity. If you use Google sign-in, we receive your Google account ID, email address, name, and avatar and store an Astraea account record. We do not receive your Google password. Sign-in requests basic identity scopes, not access to your Gmail messages, Drive files, or Calendar.
• Sessions. A random session token is placed in an HttpOnly cookie scoped to .astraeatech.dev, valid for up to 30 days. The database stores a hash of the token. Signing out invalidates that session. Short-lived OAuth state and return-address cookies support the sign-in flow and last up to 10 minutes.
• Product billing. Where a product uses our shared billing service, we store linked account and product identifiers, payment-provider customer, transaction and subscription identifiers, payment status, plan entitlements, and delivery/retry records needed to apply the plan. Checkout security controls may use IP-based counters. Payment details are handled by the checkout provider; the hub does not store full card details.
• Technical records. Our hosting and security providers process request information such as IP address, browser details, requested resource, timing, and errors to deliver and protect the site. Operational logs and traces may record request and error details.

2. Why we use information

We use information to respond to inquiries, discuss and deliver agreed services, maintain accounts and product access, process billing events, provide support, investigate errors and abuse, and meet applicable legal and accounting obligations. Depending on the activity and applicable law, processing is necessary to take requested steps before a contract, perform an agreement, meet a legal obligation, pursue legitimate operational and security interests, or follow your consent where required.

3. Products, portfolios, and live demos

Proofito and SilentKit have their own policies describing rendering inputs, files, API keys, usage records, retention, and subscriptions. Read the Proofito privacy policy and SilentKit privacy policy before using them. Products you visit can validate your shared session and receive your account identity.

Our live demonstrations at demos.astraeatech.dev use a separate, cookie-scoped workspace with fictional business records. Workspace data may be retained for up to 30 days. Clearing its cookie removes that browser's access; it does not itself erase the server record. Use invented names, contact details, and files. If you choose integrated QR or PDF tools, the selected inputs may be sent to SilentKit; document generation may use Proofito. The demo's delivery walkthrough explains its operating boundaries.

Linked portfolios, Upwork, and other external destinations handle information under their own notices. Contacting a freelancer through their portfolio or platform sends your message to the contact channel you choose.

4. Cookies, fonts, and tracking

This company site does not add advertising trackers or an analytics script. Account cookies are used when you sign in; demo workspaces have their own functional cookie. You can block or remove cookies in your browser, though sign-in or workspace persistence may stop working. We load fonts from Google Fonts, so your browser sends Google the requests and technical information needed to retrieve those fonts.

5. Sharing and international processing

We use Cloudflare for hosting, security, storage, and operations; Google for optional sign-in and font delivery; and Paddle where it is the product checkout provider. We also use the email or freelance platform through which you contact us. These providers may process information outside the Philippines. Their privacy notices describe their own processing: Cloudflare, Google, Paddle, and Upwork.

Project information is shared with the team members and service providers who need it for the agreed work, subject to the relevant agreement. We may disclose information to meet legal obligations or protect rights and security. We do not sell personal information.

6. Retention and security

We keep inquiry and project records for as long as reasonably needed for the discussion, engagement, support, dispute resolution, and applicable recordkeeping duties. Account records are kept while needed to operate the account; expired sessions are rejected and may be removed during validation. Billing records may need to remain after an account closes for legal or accounting reasons. Product and demo retention follows the specific service described above.

We use HTTPS, hashed session tokens, and access controls to protect information. No service can promise absolute security. For client systems, access, confidentiality, return of materials, and any processing of customer data should be agreed in the project scope or a separate data-processing agreement.

7. Your choices and rights

Email admin@astraeatech.dev to ask about access, correction, deletion, objection, withdrawal of consent, or a copy of your information, as applicable under the Philippine Data Privacy Act and other laws that apply. Identify the product, project, or demo workspace involved, without sending credentials. We may need to verify your identity and explain any legal retention limits. Closing a shared account does not by itself cancel a paid product subscription; use that product's billing controls or contact support.

You may also raise a privacy concern with the Philippine National Privacy Commission or another competent regulator.

8. Changes and contact

We will update this page when our practices change and take additional notice or consent steps where required. Privacy questions and requests: admin@astraeatech.dev.