Privacy Policy & Data Handling

Job descriptions submitted for analysis. When you download a report, we save your email and company name so we can follow up about your scan. We don't send newsletters, and we'll delete your information on request. We do not collect candidate personal data.

Job descriptions are processed by our AI analysis engine to identify compliance risks. We process only the job-description text you submit. Do not include applicant names, résumés or other personal data. Job-description text you submit is sent to our AI provider, Anthropic, to generate results.

We don't use your postings to train AI models, and our AI provider's commercial terms don't allow training on API data by default.

We use these providers to run AstraAudit. Each processes data only to provide its service to us:

• Vercel: hosts the website and its server functions.
• Railway: hosts the analysis service that scans the job-description text you submit.
• Supabase: database for accounts and for the email and company you give us.
• Anthropic: AI model that analyzes the job-description text you submit.
• Stripe: processes payments for paid reviews.
• Calendly: schedules calls you book with us.
• Google Analytics: site usage statistics; uses cookies, only if you accept them.

To opt out of Google Analytics, choose Decline under "Cookie settings" in the footer, block its cookies in your browser settings, or install Google's Google Analytics opt-out browser add-on.

Google Analytics sets these cookies only after you choose Accept in the cookie banner. Until then, and if you decline, the analytics script does not load at all.

• _ga: tells one visitor from another so visits can be counted. Expires after 2 years.
• _ga_<ID> (for this site, _ga_0CYRP0ST30): keeps the state of your current visit. Expires after 2 years.

Your choice is saved in your browser's local storage (astra_consent), not in a cookie. Change it at any time with "Cookie settings" in the footer; choosing Decline deletes the Google Analytics cookies.

Job-description text you scan: processed to produce your results and not stored. Do not include applicant names, résumés or other personal data.

Email and company (leads): kept with your scan's risk score and a one-way hash of your IP address (used only to limit repeat submissions), and deleted automatically after 24 months, or sooner on request.

Snapshot requests: the name, work email, company, posting count and postings you send for a free 5-posting snapshot are stored so Don can review them and reply, and deleted automatically after 12 months, or sooner on request.

Registered users: We do not currently store scan reports in your account.

You may request deletion at any time: info@astralbrain.ai

Data is encrypted in transit and at rest by our hosting providers.

Enterprise clients requiring a formal DPA for CCPA or GDPR compliance may request one at: info@astralbrain.ai

Astralis Ethics AI Inc.  |  info@astralbrain.ai