Privacy Policy

Last updated: September 7, 2026

This policy explains what personal information Astragal collects, how it is used, and the choices you have. Astragal is operated from London, Ontario, Canada, and handles personal information in line with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

What we collect

Account details you give us (name, email, company name), the business data you enter into your workspace (clients, jobs, quotes, invoices, messages), payment information handled by our payment processor (we do not store full card numbers ourselves), and technical logs (IP address, device/browser info, usage activity) needed to run and secure the service.

How it is used

We use your information only to provide and improve the service for you: running your workspace, processing payments, sending service notifications, and providing support. We do not sell your data or your customers’ data. Messages you send through the platform (email, text, calls) are delivered on your behalf using third-party providers such as our email, SMS, and calling infrastructure — those providers process message content only to deliver it.

Who we share it with

We share information only with service providers that help us run Astragal — such as our hosting provider, payment processor, and messaging/communications providers — under agreements that limit their use of it to providing that service. We do not share your data with third parties for their own marketing purposes. We may disclose information if required by law.

Calls answered by the AI receptionist

Where you have switched the AI receptionist on, calls it answers are handled by our calling provider and by a voice-AI provider (ElevenLabs, which supplies the speech and the conversation). Those providers process what the caller says only to run the call. What the caller told the AI — for example a name, an address, a phone number, an email address, or the problem they described — is stored in your workspace, and the copy held by the voice-AI provider is deleted as soon as ours is saved, and in any case within their short retention window. Where you have the recording notice switched on, the caller is told at the start of the call that it is recorded; a caller who says they do not want to be recorded has the recording stopped and deleted.

Cookies

We use essential cookies to keep you signed in and to remember your workspace preferences. We do not use third-party advertising cookies.

Retention and deletion

Data is retained while your account is active. After you close your account, it is retained for 30 days (so an accidental closure can be reversed) and then permanently deleted.

Your rights

You can access, correct, or request deletion of your personal information at any time by contacting us. If you are the owner of a workspace, you can ask us to export or delete your whole workspace and we will do it for you; deleting a client from your account also deletes their call transcripts from our voice-AI provider.

Contact

Astragal, 190 Pine Valley Drive, London, ON N6J 4N6, Canada. Privacy questions? Email [email protected].