Privacy Policy

Last Updated: February 6, 2026

This Privacy Policy describes how AstralGuard collects, uses, discloses, and protects your personal information when you use our cybersecurity services and platform. We are committed to maintaining the highest standards of data protection and transparency in accordance with international privacy regulations including GDPR, CCPA, and applicable data protection laws.

1. Interpretation and Definitions

Interpretation

The words in which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or plural form.

Definitions

For the purposes of this Privacy Policy:

  • Account means a unique account created for you to access our Service or parts of our Service.
  • Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
  • Company (referred to as either "the Company", "We", "Us" or "Our" in this Agreement) refers to AstralGuard, Enterprise Security Center, Kampala, Uganda.
  • Cookies are small files that are placed on your computer, mobile device, or any other device by a website, containing the details of your browsing history on that website among its many uses.
  • Country refers to Uganda.
  • Data Controller means the natural or legal person who (either alone or jointly or in common with other persons) determines the purposes for which and the manner in which any personal information are, or are to be, processed.
  • Data Processor means any natural or legal person who processes the data on behalf of the Data Controller.
  • Device means any device that can access the Service such as a computer, a cellphone, or a digital tablet.
  • Personal Data is any information that relates to an identified or identifiable individual.
  • Service refers to the AstralGuard platform, website, and all cybersecurity services we provide.
  • Service Provider means any natural or legal person who processes the data on behalf of the Company.
  • Third-party Social Media Service refers to any website or social network website through which a User can log in or create an account to use the Service.
  • Usage Data refers to data collected automatically, either generated by the use of the Service or from the Service infrastructure itself.
  • Website refers to AstralGuard, accessible from https://astralguard.online
  • You means the individual accessing or using the Service, or the company, or other legal entity on behalf of which such individual is accessing or using the Service, as applicable.

2. Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:

  • Email address
  • First name and last name
  • Phone number
  • Address, State, Province, ZIP/Postal code, City
  • Company name and business information
  • Job title and role
  • Payment and billing information
  • Usage Data

Usage Data

Usage Data is collected automatically when using the Service. Usage Data may include information such as:

  • Your Device's Internet Protocol address (IP address)
  • Browser type and version
  • Pages of our Service that you visit
  • Time and date of your visit
  • Time spent on those pages
  • Unique device identifiers
  • Operating system and version
  • Diagnostic data and crash reports
  • Security event logs and threat detection data

Security Monitoring Data

As a cybersecurity company, we collect additional security-related data to protect our clients and infrastructure, including network traffic patterns, threat indicators, vulnerability scan results, and security incident details. This data is essential for delivering our core security services.

Information from Third-Party Social Media Services

We may allow you to create an account and log in through the following Third-party Social Media Services:

  • Google
  • LinkedIn
  • Microsoft

If you choose to register through or grant access to a Third-Party Social Media Service, we may collect Personal data already associated with your account, such as your name, email address, and profile picture.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track activity on our Service and store certain information. Tracking technologies used include beacons, tags, and scripts to collect and track information and to improve and analyze our Service.

The technologies we use may include:

Technology Type Purpose Duration
Session Cookies Operate and secure our Service Expire when browser closes
Persistent Cookies Remember preferences and settings Up to 2 years
Security Cookies Authenticate users and prevent fraud Up to 30 days
Functionality Cookies Enable specific features Up to 1 year
Analytics Cookies Understand user behavior Up to 2 years

For more information about the cookies we use and your choices regarding cookies, please visit our Cookie Policy.

3. Use of Your Personal Data

The Company may use Personal Data for the following purposes:

Service Provision and Improvement

  • To provide and maintain our Service: Including monitoring usage and detecting security threats
  • To manage your Account: Manage your registration and access to different functionalities
  • Contract performance: Development, compliance, and undertaking of purchase contracts for services
  • Service optimization: Analyze usage patterns to improve security features and user experience

Communication and Support

  • To contact you: Via email, telephone, SMS, or push notifications regarding updates, security alerts, and service information
  • Customer support: Respond to inquiries, provide technical assistance, and resolve issues
  • Marketing communications: Send news, special offers, and information about new services (with opt-out option)

Security and Compliance

  • Threat detection and prevention: Monitor for security threats, malicious activity, and policy violations
  • Incident response: Investigate security incidents and implement protective measures
  • Legal compliance: Meet regulatory requirements and legal obligations
  • Fraud prevention: Detect and prevent fraudulent transactions and unauthorized access

Business Operations

  • Business transfers: Evaluate or conduct mergers, acquisitions, or asset sales
  • Analytics and research: Conduct data analysis to improve our services and develop new features
  • Internal operations: Manage business relationships and improve operational efficiency

Sharing Your Personal Data

We may share your personal information in the following situations:

  • With Service Providers: We share information with third parties to monitor, analyze, and improve our Service, process payments, and provide customer support.
  • For business transfers: In connection with or during negotiation of any merger, sale of Company assets, financing, or acquisition of all or a portion of our business.
  • With Affiliates: We may share information with our affiliates, requiring them to honor this Privacy Policy.
  • With business partners: To offer certain products, services, or promotions.
  • With other users: When you share personal information in public areas, it may be viewed by all users.
  • With your consent: We may disclose your information for any other purpose with your consent.

4. Third-Party Service Providers

We employ third-party companies and individuals to facilitate our Service, provide the Service on our behalf, perform Service-related services, or assist us in analyzing how our Service is used.

Our Service Providers Include

  • Cloud Infrastructure: AWS, Azure, Google Cloud Platform
  • Analytics: Google Analytics, Mixpanel, Hotjar
  • Communication: SendGrid, Twilio, Intercom
  • Payment Processing: Stripe, PayPal
  • Security Tools: Cloudflare, DataDog, Sentry
  • Customer Support: Zendesk, Zoho

These third parties have access to your Personal Data only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose.

5. Security of Your Personal Data

The security of your Personal Data is paramount to us. We implement industry-leading security measures to protect your information:

Technical Security Measures

  • Encryption: All data in transit is encrypted using TLS 1.3 or higher. Data at rest is encrypted using AES-256 encryption.
  • Access Controls: Role-based access control (RBAC) and multi-factor authentication (MFA) for all system access.
  • Network Security: Firewalls, intrusion detection systems (IDS), and intrusion prevention systems (IPS).
  • Secure Development: Secure coding practices, regular code reviews, and automated security testing.
  • Vulnerability Management: Regular penetration testing, vulnerability scanning, and security audits.

Organizational Security Measures

  • Security Training: Regular security awareness training for all employees.
  • Background Checks: Comprehensive background verification for personnel with data access.
  • Incident Response: 24/7 security operations center (SOC) and documented incident response procedures.
  • Compliance Certifications: SOC 2 Type II, ISO 27001, and regular third-party audits.
  • Data Minimization: We collect only the data necessary for specific purposes.

Security Disclaimer

While we strive to use commercially acceptable means to protect your Personal Data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we maintain security measures that meet or exceed industry standards.

6. Retention of Your Personal Data

The Company will retain your Personal Data only for as long as necessary for the purposes set out in this Privacy Policy. We will retain and use your Personal Data to the extent necessary to:

  • Comply with legal obligations (for example, if we are required to retain your data to comply with applicable laws)
  • Resolve disputes and enforce legal agreements and policies
  • Maintain security and prevent fraud
  • Provide ongoing services you have requested

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period, except when this data is used to strengthen security, improve functionality, or when we are legally obligated to retain this data for longer periods.

Data Type Retention Period Basis for Retention
Account Information Duration of account + 90 days Service provision
Payment Records 7 years Legal requirement
Security Logs 2 years Security and compliance
Marketing Consent 3 years from last interaction Legitimate interest
Support Tickets 3 years Customer service improvement

7. Your Data Protection Rights

Depending on your location, you may have certain rights regarding your personal information. AstralGuard respects these rights and provides mechanisms to exercise them:

Right to Access

Request copies of your personal data. We may charge a reasonable fee for additional copies beyond the first request.

Right to Rectification

Request correction of inaccurate or incomplete personal information we hold about you.

Right to Erasure

Request deletion of your personal data under certain conditions, subject to legal retention requirements.

Right to Restrict Processing

Request that we restrict the processing of your personal data under certain circumstances.

Right to Object

Object to our processing of your personal data, particularly for direct marketing purposes.

Right to Data Portability

Request transfer of your data to another organization or directly to you in a structured, commonly used format.

Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in the Contact section. We will respond to your request within 30 days. We may need to verify your identity before processing your request to protect your privacy and security.

California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA). You have the right to request information about the categories and specific pieces of personal information we have collected, the sources of that information, our purposes for collecting it, and the categories of third parties with whom we share it. You also have the right to request deletion of your personal information and to opt-out of the sale of your personal information. AstralGuard does not sell personal information.

8. International Data Transfers

Your information, including Personal Data, may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ from those in your jurisdiction.

If you are located outside Uganda and choose to provide information to us, please note that we transfer the data, including Personal Data, to Uganda and process it there.

Data Transfer Safeguards

When transferring data internationally, we implement appropriate safeguards including:

  • Standard Contractual Clauses: We use European Commission-approved Standard Contractual Clauses (SCCs) for transfers from the EU/EEA.
  • Adequacy Decisions: We rely on adequacy decisions where available.
  • Data Processing Agreements: All processors handling EU data sign comprehensive Data Processing Agreements.
  • Privacy Shield Successor: We monitor and comply with any successor frameworks to Privacy Shield.

Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

9. Children's Privacy

Our Service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Data, please contact us immediately.

If we become aware that we have collected Personal Data from anyone under the age of 13 without verification of parental consent, we take steps to remove that information from our servers within 48 hours of discovery.

Enterprise Focus

AstralGuard's services are designed for enterprise and business use. Our platform is not intended for use by individuals under 18 years of age, and we do not knowingly market to or collect data from minors.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. We will notify you of any material changes by:

  • Posting the new Privacy Policy on this page with an updated "Last Updated" date
  • Sending an email notification to registered users at least 30 days before the effective date
  • Displaying a prominent notice on our website and within the Service
  • Requiring acceptance of updated terms for continued service access (for material changes)

We encourage you to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page unless otherwise stated.

Version History

You can request previous versions of this Privacy Policy by contacting us. We maintain an archive of all versions for transparency and compliance purposes.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through any of the following channels:

Data Protection Office

Our dedicated data protection team is available to assist you with any privacy-related inquiries.

Postal Address:
AstralGuard Data Protection Office
Enterprise Security Center
Kampala, Uganda

Related Policies and Documentation

For comprehensive information about our practices, please also review: