Legal

Privacy notice

Version domain-privacy-v2

Astra Devs Cloud is an Astra brand within Northstar Technology Holdings Inc. For purchases, the contracting seller is the operator identified in this notice and at checkout.

1. Who is responsible

Jeramy Ratelle, sole proprietor of North Star Holdings, operating as Astra Devs Cloud, is responsible for the personal information described here. Address: 3161 Diamondview Rd, Ottawa, Ontario. Privacy contact: ratelle.ja@gmail.com.

2. Information we process

We process account identity and email, account membership, domain searches and quote snapshots, order and invoice records, accepted legal-policy versions, support messages, security/activity logs, and external Stripe and Namecheap identifiers. Stripe processes payment credentials; Astra does not store full card data. Registration contact collected by Stripe, including international address and phone fields, is passed to Namecheap during fulfilment and is not retained in Astra's domain read model. Registry-specific identifiers and transfer authorization codes, when required, are stored encrypted for the quote and fulfilment process. Website hosting setup uses the account and package identifiers needed to provide a separate reseller hosting account. An optional legacy provider connection, if you authorize one, uses repository identifiers and an encrypted authorization token; it is not required for domain registration or conventional hosting. Provider tokens and authorization codes are never included in customer-visible order records.

3. Why we use it

We use this information to authenticate you, provide quotes, collect and reconcile payment, register and support the domain, issue invoices and refunds, investigate fraud or disputes, secure the service, meet tax and accounting duties, and comply with registrar, registry and legal requirements.

4. Service providers

Supabase provides identity and application data storage; Stripe provides Checkout, payment and refund processing; Namecheap and the relevant registry/ICANN ecosystem provide domain registration; Namecheap provides reseller hosting for website files, databases and mail when ordered; Vercel hosts the Astra application; an optional legacy connection may also involve a customer deployment; Resend delivers transactional notices when configured; and an approved fixed-egress arrangement routes registrar API traffic. These providers process information under their own service and privacy terms and may process it outside your province or Canada.

5. Retention

Account data is kept while the account is active and for a reasonable closure period. Quote, order, invoice, refund, tax and supplier-operation evidence is retained for at least six years or longer where law, a dispute or registry obligations require it. Security logs are kept only as long as reasonably needed for detection, investigation and evidence. Data is then deleted or de-identified where feasible. Encrypted registry data and transfer authorization codes are purged after quote expiry or terminal fulfilment. Connected provider credentials are retained only while needed for the authorized connection.

6. Your choices and rights

You may ask to access or correct your information, withdraw optional consent, or request deletion subject to tax, payment, fraud, dispute and domain-registration retention duties. Registrar data may need to be corrected through the registrar and cannot always be erased while a registration exists. Contact ratelle.ja@gmail.com.

7. Security and incidents

Astra uses access controls, row-level database policies, encrypted provider secrets, signed webhooks, idempotent supplier operations and operational monitoring. No system is risk-free. We investigate incidents and provide legally required notices.

8. Cookies and changes

Essential cookies maintain authentication. If you allow optional measurement, a first-party cookie links the category of your referral source and landing page to purchase outcomes for up to 30 days. Measurement records do not include searched domain names, full referring URLs or payment credentials. You can decline or withdraw this choice using Measurement settings. Aggregate review snapshots contain counts and totals without visitor identifiers and are retained for up to one year. Checkout does not require advertising cookies. The notice version accepted with an order remains part of that order's record; a materially changed notice is published with a new version before future checkout.

Privacy notice version domain-privacy-v2.

Choose the Astra service for your project.

One team, three distinct offers. For a business website, visit Astra Web Dev. Hosting included in a Web Dev plan does not require an extra Cloud subscription. Accounts, billing and support follow the service you choose.

Astra Web Dev