Privacy Policy

1. Who We Are

This privacy policy explains how MSL Productions Ltd. t/a Astartes App ("we", "us", "our") collects, uses, and protects your personal data when you use the Astartes platform ("Service").

2. Data We Collect

We collect the following types of data:

• Account data: name, email address, and password hash when you register
• Usage data: events, session reports, asset records, and other content you create
• Technical data: IP address, browser type, and access logs for security and diagnostics
• Files: images, documents, and telemetry data you upload

3. How We Use Your Data

We use your data to:

• Provide and maintain the Service
• Authenticate your identity and manage your account
• Generate reports and analytics within your organisation
• Send transactional emails (password resets, invitations)
• Monitor for security threats and abuse
• Improve the Service based on usage patterns

4. Data Sharing

We do not sell your personal data. We may share data with:

• Infrastructure providers: cloud hosting, storage, and email delivery services that process data on our behalf
• AI providers: when you use AI summary features, report content is sent to the configured AI provider (e.g. OpenAI) for processing
• Legal requirements: when required by law or to protect our rights

5. Data Storage and Security

Your data is stored on secure cloud infrastructure. We implement appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), access controls, and regular security reviews.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. When an account is deleted, we will remove your personal data within a reasonable timeframe, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data
• Object to or restrict processing of your data
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent

To exercise these rights, please contact your organisation administrator or reach out to us directly.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes through the Service or by email.

10. Contact

For privacy-related questions or requests, please contact us at the address provided on our website.