Astra Google-data privacy policy

Last updated: October 28, 2026

This policy describes Astra's optional Google Calendar and Gmail integrations. The public information website is separate from the private Astra application.

Data accessed and purposes

With the user's separate permission, Astra reads calendar lists and event information to answer calendar-related requests. With Gmail permission, Astra searches for and processes relevant Amazon order and delivery messages to create and update order records. Gmail read-only authorization technically permits reading mailbox content; Astra's intended use is limited to the order and delivery features described here.

Authorization credentials are used to maintain the connection and request updated information. Calendar and Gmail authorizations are separate. Astra does not use these permissions to send or modify email or to create, change or delete calendar events.

Storage and retention

The private Astra installation stores connection credentials, cached calendar information and derived order records needed for these features. Authorization expiry or revocation stops further authorized refreshes but does not automatically erase previously stored information. Cached information can remain available until it is removed and may be stale. To request deletion of stored Google-derived information and connection credentials, use the existing contact route in the private Astra application. Revoking Google access and deleting already stored information are separate actions.

Use and disclosure

Google-derived information is used to provide the user-facing features described in this policy. It is not sold, used for advertising or used to train generalized AI or machine-learning models. Any processing or disclosure must be limited to providing these features, the user's explicit permission, necessary security purposes or legal obligations, consistent with Google's requirements. Astra's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Public website

The public information pages do not receive Google credentials, calendar information, Gmail messages or order records. They contain no sign-in form, analytics or tracking cookies. The hosting provider necessarily processes technical request information to deliver the pages and protect the service.

Your choices

You can decline either integration, revoke Astra's access through your Google Account's third-party connections controls, and request deletion through the existing contact route in your private Astra application. Reconnecting is your choice and requires your participation in Google's authorization flow.

Questions

Use the existing contact route in your private Astra application for privacy questions and deletion requests.