Privacy Policy

1. Operator and contact

Project operator: Viktoria Mosentsova, Germany. For privacy questions, access or deletion requests, contact [email protected].

2. What data Astra can access

Depending on the features the user enables, Astra may process voice commands and task context, selected local information, and Google account data. For optional Gmail functionality Astra requests the following Google OAuth scopes:

• gmail.readonly — view messages and relevant Gmail account information.
• gmail.compose — manage drafts and technically send emails. The application is designed to send only following a deliberate user instruction, subject to safeguards.

Gmail access is not activated merely by viewing this website. The account owner must connect Gmail and authorize the requested scopes in Google's consent interface.

3. How Gmail data is used

When Gmail is connected and the user requests an email task, Astra can retrieve the relevant messages or conversation, display or read them, summarize or translate selected content, prepare a draft, and send a prepared message only upon an explicit user command. Optional background checking of incoming mail is enabled only by the user's settings. The application is not designed to automatically upload the entire mailbox for AI analysis.

Gmail data is not sold, used for advertising or used by the project to train general-purpose AI models. Instructions contained in received email are treated as untrusted content, not as authorization to take actions.

4. OpenAI processing

To provide AI summaries, translations and drafted replies, Astra may transmit the content of a message or thread selected by the user for processing, together with the minimum necessary context, to the OpenAI API. This is separate from Google's OAuth authorization and is performed for the user-requested function. Content is subject to the provider's applicable processing, security and retention terms. The project does not use Gmail information to train its own general-purpose models.

Where possible, users should avoid including unnecessary confidential or third-party personal details in AI-processing requests. A user may choose to work with Gmail features that do not require external AI analysis.

5. Storage and retention

When Gmail integration is enabled, OAuth credentials and refresh tokens are intended to be stored separately from other projects in Windows-protected storage, using system encryption and access controls. Email message bodies are not automatically copied into the separate Victoria Core memory system. Astra may keep limited local technical state needed for task execution and safety (for example operation status and account linkage), without putting email contents or tokens into diagnostic logs. User-selected drafts can remain in the user's Google Gmail account until the user deletes them.

Google and OpenAI may independently retain information in accordance with their own terms. The exact retention of any local task data depends on the deployed Astra version and user configuration; users can request details via the contact above.

6. Sharing and external services

Google provides Gmail and OAuth authorization; OpenAI provides AI processing of selected content when requested; Cloudflare hosts this informational site and may process connection metadata needed to deliver and secure it. No sale of Google user data takes place. This website itself does not require a Gmail login and has no visitor accounts.

7. Your choices and rights

• Do not connect Gmail, or disconnect it later.
• Revoke Astra's Google access using your Google Account third-party connections settings.
• Request access to or deletion of locally stored project data, where applicable, via the contact above.
• Do not request OpenAI analysis of content you do not wish to send to that service.

Depending on applicable data-protection law, you may have rights of access, rectification, erasure, restriction, portability and objection. You may also contact an appropriate data protection supervisory authority.

8. This website

This site is a public information page. It does not itself read Gmail, set up OAuth tokens or place advertising/tracking cookies through the page code. Hosting and network security providers may process essential technical logs, such as IP address and request metadata.

9. Updates

This policy may be updated when Astra's capabilities or data-processing practices change. The date above identifies the current published text. Changes to Gmail access and processing will be reflected here before they are introduced for users.