ASTRASoftware · Systems · Trust

Privacy Policy

How we collect, use, and protect personal data across Astra's website and products.

Effective date: August 31, 2026

1. Introduction

Astra (operated by AstraCorporate Limited, RC 9813397, together with its affiliated entities in the United States and Canada, "Astra", "we", "us", or "our") is committed to protecting the privacy of everyone whose personal data we handle, whether you are a visitor to our website, a customer using one of our products, a job applicant, or a business contact.

This Privacy Policy explains what personal data we collect, why we collect it, how it is used and shared, and the rights available to you. It applies across our website, our marketing and sales activity, our products (OneBook, OneBilling, HB, DotGovBook, and OneBanking / POS), and our IT consulting services.

2. Definitions

  • "Personal Data" means any information relating to an identified or identifiable individual.
  • "Data Subject" means the individual to whom Personal Data relates, including website visitors, product users, job applicants, and business contacts.
  • "Processing" means any operation performed on Personal Data, such as collection, storage, use, disclosure, or deletion.
  • "Customer Data" means data that our customers or their end users submit into an Astra product in the course of using that product; Astra processes Customer Data as a processor on behalf of the customer, under the terms of the applicable customer contract, and this section of our Privacy Policy addresses our role as controller of data collected directly through our own website and business operations.

3. Who we are — the data controller

For personal data collected through our marketing website, sales process, careers page, and general business operations, the data controller is AstraCorporate Limited (RC 9813397).

4. Whose data this policy covers

  • Website visitors — anyone who browses astracorporate.com or interacts with our marketing content;
  • Prospective and existing customers — individuals who request a demo, contact our sales team, or administer an Astra product on behalf of their organization;
  • Job applicants — candidates who apply for a role at Astra;
  • Business contacts — vendors, partners, and other professionals we correspond with in the ordinary course of business.

5. Personal data we collect

5.1 Website visitors and prospective customers

  • Contact details you provide, such as name, work email, phone number, and company name, when you submit a contact form or request a demo;
  • The content of any message or enquiry you send us;
  • Technical data such as IP address, browser type, device information, and general usage data collected automatically as you browse our site.

5.2 Product administrators and end users

  • Account details such as name, work email, and role, used to provision and manage access to an Astra product;
  • Authentication and activity logs necessary to secure and support the product;
  • Any other data described in the specific customer contract governing that product, which may include Customer Data submitted by your organization.

5.3 Job applicants

  • Name, contact details, CV/résumé, and any information you choose to include in your application;
  • Interview notes and reference information, where applicable, collected as part of our recruitment process.

6. How we collect personal data

  • Directly from you, through our website forms, careers page, email, or phone correspondence;
  • Automatically, through cookies and similar technologies described in Section 8;
  • From third parties, such as a customer organization that administers Astra products for its own employees, or a professional referral in the recruitment process.

7. Purposes and legal basis for processing

We process personal data only where we have a valid legal basis to do so, which may include your consent, the performance of a contract with you or your organization, our legitimate business interests, or compliance with a legal obligation.

  • Responding to enquiries and providing product demonstrations — performance of a contract, legitimate interest;
  • Operating, securing, and improving our website and products — legitimate interest;
  • Sending product updates or marketing communications — consent, where required, and always with an option to opt out;
  • Recruitment and hiring — performance of pre-contractual steps at your request;
  • Complying with tax, accounting, or regulatory obligations — compliance with a legal obligation.

8. Cookies and tracking technologies

Our website uses essential cookies required for the site to function, and may use analytics cookies to help us understand how visitors use our site. Where analytics or non-essential cookies are used, we will request your consent in line with applicable law. You can control cookies through your browser settings at any time.

9. Disclosure and sharing of personal data

We do not sell personal data. We may share personal data with:

  • Service providers who support our website, email, and business operations under appropriate confidentiality and data protection obligations;
  • Professional advisers, auditors, and legal counsel, where necessary for compliance or governance;
  • Regulators or law enforcement agencies, where required by a valid legal request;
  • A successor entity in the event of a merger, acquisition, or restructuring of Astra's business, subject to equivalent privacy protections.

10. International data transfers

As a company operating across the United States, Nigeria, and Canada, personal data we handle may be transferred between these jurisdictions. Where we transfer personal data internationally, we take steps to ensure an appropriate level of protection is maintained, consistent with applicable data protection law, including the use of contractual safeguards where required.

11. Data retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, including to satisfy any applicable legal, accounting, or reporting requirement. Contact and sales enquiry data is generally retained for the duration of an active business relationship and a reasonable period thereafter; recruitment data for unsuccessful applicants is generally retained for a limited period to allow us to consider candidates for future roles, unless you ask us to delete it sooner.

12. Data security

We maintain administrative, technical, and physical safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or destruction, including access controls, encryption in transit, and regular review of our security practices. No system can be guaranteed completely secure, and we encourage you to contact us promptly if you believe your data may have been compromised.

13. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate or incomplete data;
  • Request deletion of your personal data, subject to applicable legal exceptions;
  • Object to or restrict certain processing, including direct marketing;
  • Request a copy of your data in a portable format;
  • Withdraw consent at any time, where processing is based on consent.

14. Children's privacy

Astra's website and products are intended for business use and are not directed at children. We do not knowingly collect personal data from individuals under the age of 16. If you believe a child has provided us with personal data, please contact us so we can address it.

15. Third-party links

Our website may link to third-party sites, including the live applications for products such as OneBook and OneBilling. This Privacy Policy does not apply to those third-party or product-specific destinations, which may have their own privacy notices.

16. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will update the effective date at the top of this page when we do, and encourage you to review it periodically.

17. Contact us

If you have questions about this Privacy Policy or wish to exercise any of your rights, please contact us at [email protected].