Privacy Policy

1. Who we are

Astravale Holdings (Pty) Ltd, CIPC registration AFJSPW, operates the Astravale Venture Manager platform ("Platform"). Contact: support@astravale.co.za.

2. Data we collect

• → Account data: email address, encrypted password hash, passkey credentials
• → Venture data: business information, financial records, contacts you create within the Platform
• → Integration credentials: third-party API tokens (Vercel, Cloudflare, Resend, LinkedIn) stored encrypted at rest
• → Usage data: page visits, feature interactions, error logs — used solely for platform improvement

3. How we use it

• → To provide and operate the Platform
• → To authenticate users and secure accounts
• → To call third-party APIs on your behalf (Vercel, Cloudflare, etc.) using credentials you supply
• → We do not sell, rent, or share your data with advertisers

4. Third-party services

The Platform integrates with Supabase (database and auth), Vercel (deployment infrastructure), Resend (email delivery), and LinkedIn (OAuth publishing). Each provider's own privacy policy governs their use of data.

5. Data security

All data is encrypted in transit (TLS 1.2+). Sensitive credentials are encrypted at rest using AES-256-GCM. Access is restricted to authenticated venture members with appropriate roles.

6. Your rights

You may request access to, correction of, or deletion of your personal data at any time by contacting support@astravale.co.za. We will respond within 30 days.

7. Governing law

This policy is governed by the laws of the Republic of South Africa, including POPIA (Protection of Personal Information Act, Act 4 of 2013).

8. Changes

Material changes will be communicated via the Platform. Continued use after changes constitutes acceptance.