Privacy Policy

Effective Date: June 11, 2026

Astra POS LLC ("Astra POS," "Company," "we," "our," or "us") respects your privacy and is committed to protecting the information entrusted to us. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you visit our website, use our software, payment processing services, owner portal, technician portal, appointment booking tools, loyalty programs, gift card services, inventory management tools, payroll features, and related products and services.

By accessing or using our services, you agree to the practices described in this Privacy Policy.

1. Company Information

Astra POS LLC
3675 Crestwood Pkwy, Suite 310
Duluth, GA 30096
Phone: 770-680-4075
Email: info@myastrapos.com
Website: www.myastrapos.com

2. Information We Collect

We may collect information from business owners, employees, technicians, customers, website visitors, and other users of our services.

Business Information

• Business name
• Business address
• Business phone number
• Business email address
• Tax identification information
• Merchant account information
• Banking information
• Business licensing information

Account Information

• Username
• Password
• Security credentials
• User permissions
• Account preferences

Customer Information Entered by Merchants

Merchants may store information about their customers, including:

• Name
• Email address
• Phone number
• Appointment history
• Service history
• Purchase history
• Loyalty rewards information
• Gift card balances
• Customer notes

Employee & Technician Information

Merchants may store information relating to employees, technicians, and contractors, including:

• Names
• Contact information
• Schedule information
• Commission information
• Payroll information
• Performance information

Transaction Information

We may collect information related to transactions processed through our platform, including:

• Transaction amounts
• Dates and times
• Payment method information
• Authorization results
• Merchant information

We do not store complete payment card information except as permitted by applicable law and PCI requirements.

Website Information

When you visit our website, we may collect:

• IP address
• Browser type
• Device information
• Operating system
• Pages viewed
• Time spent on pages
• Referring websites
• Analytics information

3. How We Use Information

We use collected information to:

• Provide software services
• Process transactions
• Deliver customer support
• Manage user accounts
• Generate reports
• Operate appointment booking systems
• Manage loyalty programs
• Manage gift card programs
• Manage inventory systems
• Provide payroll tools
• Improve our products and services
• Detect fraud and unauthorized activity
• Comply with legal obligations
• Communicate with users
• Send service-related notices
• Send marketing communications where permitted by law

4. Payment Processing

Astra POS may provide payment processing services directly or through third-party payment processing partners. Payment processing may involve:

• Card authorization
• Settlement processing
• Risk management
• Fraud detection
• Chargeback handling
• PCI compliance activities

Payment card information is processed through secure systems designed to meet applicable security standards. Astra POS does not guarantee approval of payment transactions.

5. Customer Data Ownership

Merchants retain ownership of their business data, including:

• Customer records
• Appointment records
• Employee records
• Inventory records
• Sales history
• Loyalty data
• Gift card data

Astra POS acts as a service provider and may access such data solely for purposes of operating, supporting, maintaining, securing, and improving the services.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Operate our website
• Improve user experience
• Remember preferences
• Analyze website traffic
• Improve marketing effectiveness

Users may disable cookies through browser settings; however, certain website features may not function properly.

7. Third-Party Services

We may use third-party providers, including:

• Payment processors
• AWS (Amazon Web Services)
• Analytics providers
• Email providers
• SMS providers
• Customer support providers
• Marketing tools

These providers may process information on our behalf subject to contractual obligations and applicable laws.

8. Data Storage and Security

We use commercially reasonable safeguards to protect information. Security measures may include:

• Encryption
• Access controls
• User authentication
• Network security protections
• Monitoring and logging
• Data backups

Data may be stored on infrastructure provided by Amazon Web Services (AWS) and other reputable service providers. While we take reasonable measures to protect information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

9. Data Retention

We retain information for as long as necessary to:

• Provide services
• Fulfill contractual obligations
• Comply with legal requirements
• Resolve disputes
• Enforce agreements

Retention periods may vary depending on the type of information and applicable legal requirements.

10. User Rights

Subject to applicable law, users may have rights to:

• Access information
• Correct inaccurate information
• Request deletion of information
• Object to certain processing activities
• Restrict certain processing activities
• Request data portability

Requests may be submitted to info@myastrapos.com. We may require identity verification before fulfilling requests.

11. California Privacy Rights (CCPA)

California residents may have rights under the California Consumer Privacy Act (CCPA), including:

• Right to know what information is collected
• Right to request deletion
• Right to request correction
• Right to non-discrimination

Requests may be submitted to info@myastrapos.com.

12. GDPR Disclosures

Where applicable, users located in the European Economic Area may have rights under the General Data Protection Regulation (GDPR), including:

• Right of access
• Right of correction
• Right of erasure
• Right of restriction
• Right of portability
• Right to object

Users may contact us regarding GDPR-related requests at info@myastrapos.com.

13. Children's Privacy

Our services are intended for business use and are not directed toward children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will take reasonable steps to delete it.

14. Marketing Communications

Users may receive marketing communications from Astra POS. Recipients may opt out of marketing emails by following unsubscribe instructions included in such communications. Service-related communications may continue even if marketing communications are declined.

15. International Data Transfers

Information may be processed and stored in the United States. By using our services, users consent to the transfer of information to the United States and other locations where our service providers operate.

16. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time. Updated versions will be posted on our website. Continued use of our services following changes constitutes acceptance of the revised Privacy Policy.

17. Contact Us

For questions regarding this Privacy Policy, contact:

Astra POS LLC
3675 Crestwood Pkwy, Suite 310
Duluth, GA 30096
Phone: 770-680-4075
Email: info@myastrapos.com
Website: www.myastrapos.com