Privacy Policy

1. Who we are

Astratos is a product developed by XcaleOS, a technology company based in LATAM. We operate the website astratos.io and the AI-powered CRM platform for sales teams.

This policy describes how we collect, use and protect your personal information when you visit our site or sign up for our early access waitlist.

2. Information we collect

We collect information in two ways:

2.1 Data you provide us

When you register for the early access waitlist through our form, we collect:

• Full name
• Email address
• WhatsApp number (including country code)
• Company name
• Team size
• CRM you currently use (optional)

2.2 Browsing data

When you visit our site, we automatically collect technical information such as: IP address (anonymized), browser type, operating system, pages visited, time on site and referral source. This is done via Google Analytics 4.

3. How we use your information

We use the collected data to:

• Contact you to coordinate your onboarding and early access to Astratos.
• Send you communications related to the product launch, updates and news.
• Improve our website and user experience through browsing data analysis.
• Understand what tools our target market uses to develop relevant integrations.

We do not sell, rent or transfer your personal information to third parties for commercial purposes.

4. Service providers

To operate our services, we share information with the following trusted providers who act as data processors under our instructions:

5. Cookies and tracking technologies

Our site uses cookies and similar technologies to improve your experience and analyze traffic.

You can control or disable cookies from your browser settings. Please note that disabling some cookies may affect the functionality of the site.

6. Data security

We adopt reasonable technical and organizational measures to protect your personal information against unauthorized access, loss or disclosure, including:

• Encrypted transmission via HTTPS/TLS in all communications.
• Restricted access to form data, available only in the private Resend dashboard.
• Environment variables and API keys never exposed in public source code.
• API rate limiting to prevent abuse and spam.

No internet data transmission system is 100% secure. If you detect a vulnerability, please contact us immediately at privacidad@astratos.io.

7. Data retention

We retain your personal data while you maintain your place on the early access waitlist or until you request deletion. Once Astratos officially launches, waitlist data will be migrated to the platform or deleted, according to your preference.

Navigation analytics data (Google Analytics) is retained for 14 months per the standard GA4 configuration.

8. Your rights

Depending on your country of residence, you may have the following rights over your personal data:

• Access: request a copy of the data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request that we delete your personal data from our database.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to the processing of your data for marketing purposes.

To exercise any of these rights, write to us at privacidad@astratos.io. We will respond within a maximum of 30 business days.

9. Changes to this policy

We may update this policy occasionally to reflect changes in our practices or for legal reasons. When we do, we will update the date at the top of this page and, if the changes are significant, we will notify you by email.

10. Contact

If you have questions, concerns or requests related to this policy or the processing of your personal data, you can contact us at: