Our privacy policy, in plain words

• AstraOBP, Inc. is responsible

  As the controller, AstraOBP, Inc. decides how your personal data is used, unless another notice says otherwise.

• Who it covers

  Website visitors, platform and Chrome Extension users, customers, partners, prospects, and people identified through our brand-protection monitoring.

• Changes are announced (In your favour)

  When we make material changes, we post a prominent notice on our website. The latest version is always on this page.

Why this exists. Brand protection touches the personal data of several groups of people, so one policy explains it for all of them. The Chrome Extension has its own, more detailed notice.

• What you give us

  When you create an account, fill in a form, email us or our support, or sign a service agreement.

• What we collect automatically

  Through cookies when you visit the website, through your use of the platform and Chrome Extension, and when our monitoring scans public online sources.

• What we find in public sources

  Domain registries and WHOIS, marketplaces, social media, professional networks and domain-name dispute providers.

Why this exists. Detecting infringement means finding out who is behind a domain, listing or account, and those details usually come from public sources rather than from the person themselves.

• Delivering the service

  Monitoring channels, detecting infringements, building evidence packages, managing cases and sending enforcement communications, under our contract with the customer.

• Accounts, billing and support

  Creating accounts, signing users in, managing permissions, processing payments and answering support requests.

• Keeping the service secure

  Maintaining, troubleshooting and improving the platform and Chrome Extension, and preventing misuse, fraud and security incidents.

• Improving our AI

  Data from delivering the service may be used to improve our models, anonymised and aggregated where feasible.

• Marketing you can stop (In your favour)

  We may send marketing to customers and prospects. You can opt out at any time.

• Legal duties and claims (Limit or obligation)

  We process data to meet tax and accounting duties and to defend legal claims, which can mean keeping it after the service ends.

Why this exists. The GDPR only allows processing with a legal basis. Most of ours are the contract with the customer or our legitimate interest in running a secure, useful service.

• We don't sell your data (In your favour)

  And we don't share it for advertising.

• 

  Service providers

  Hosting, infrastructure, security, AI and other providers, who may only use it for our purposes and on our instructions. The sub-processor list is available on request.

• Our group companies

  For centralised IT, service delivery, product development and internal reporting.

• Our customers

  Brand owners receive evidence packages, which can include data about suspected infringers.

• Advisers and authorities

  Lawyers, auditors and insurers, authorities where the law requires it, and the other party in a merger, acquisition or sale of assets.

Why this exists. Running the service takes specialist providers, and enforcement only works if brand owners receive the evidence.

• Outside the EEA

  We're based in the United States, so your data may be processed outside the European Economic Area.

• Protected by safeguards (In your favour)

  Transfers rely on European Commission adequacy decisions, Standard Contractual Clauses, the UK transfer addendum or other valid safeguards.

• Ask us for details (In your favour)

  We can tell you which countries and safeguards apply, and share our intra-group agreement on request.

Why this exists. European data protection rules travel with your data: any transfer outside the EEA needs a legal safeguard.

• See your data (In your favour)

  Ask what we hold about you and get a copy.

• Correct, erase or restrict it (In your favour)

  Have incorrect data fixed, and in some cases have it deleted or its use restricted.

• Say no (In your favour)

  Withdraw your consent at any time, and object to processing based on our legitimate interest. Object to direct marketing and we stop straight away.

• Take it with you (In your favour)

  Get your data in a structured, machine-readable format.

• A human decision (In your favour)

  Ask for a person to review any decision made solely by automated means that significantly affects you.

• Complain (In your favour)

  If you're not satisfied with our answer, you can complain to a data protection supervisory authority.

Why this exists. Data protection law gives you control over your personal data, including when a company like ours finds it in public sources.

• Only as long as needed (In your favour)

  We keep data for as long as its purpose or the law requires, then delete or anonymise it.

• Billing records

  Kept for as long as tax and accounting law requires.

• Monitoring data

  Data we process for customers is kept as their agreement and Data Processing Agreement set out.

• Marketing data (In your favour)

  Kept until you opt out, then promptly deleted or removed from marketing lists.

• Longer when necessary (Limit or obligation)

  Data needed by law or for legal claims can be kept longer, set apart from everyday use and deleted when the purpose ends.

Why this exists. Keeping data longer than needed only adds risk, for you and for us.

• Encryption and access control (In your favour)

  Encryption in transit and at rest, role-based permissions and multi-factor authentication, where appropriate.

• Tested and trained (In your favour)

  Vulnerability assessments, data protection training for our staff and procedures for handling incidents.

• Breaches are reported (In your favour)

  If a breach affects personal data, we notify the people affected and the authorities where the law requires it.

Why this exists. Brand protection data includes evidence and account details that have to stay confidential.

• Necessary cookies

  Needed for the website to work, so they can't be switched off and don't need your consent.

• Analytics and functional cookies

  Show us how visitors use the website and remember your preferences. They're non-essential, so you choose.

• Your choice, any time (In your favour)

  Accept or reject non-essential cookies on your first visit, and change your mind in the cookie settings.

Why this exists. The website works without optional cookies, so nothing optional loads until you choose.

• Email

  privacy@astraobp.com

• Post

  AstraOBP, Inc., 1111B S Governors Ave STE 53266, Dover, DE 19904, USA

• EU representative

  Marc Olivier Meunier, COO