Privacy Policy
Your data protection is our top priority
Introduction
Welcome to Astr, the leading AI-powered resume builder platform. At Cushk Websites Trading Est. (Commercial Registration: 1010645520), we are committed to protecting your privacy and personal data in accordance with the Saudi Personal Data Protection Law (PDPL).
This policy explains how we collect, use, process, and protect the information you provide when using our platform at astrsa.com.
Important Note: By using Astr, you agree to the terms outlined in this policy. If you do not agree with any of these terms, please do not use our services.
Information We Collect
We collect different types of information to provide and improve our services:
1. Account Information
- Phone number (for identity verification)
- Full name
- Email address (optional)
- Profile picture (optional)
2. Resume Data
- Personal information (name, address, contact details)
- Work and professional experience
- Educational qualifications and certificates
- Skills and languages
- Professional profile and career objectives
3. Usage and Technical Data
- IP address and browser type
- Device type and operating system
- Pages visited and visit duration
- Visit source (Referrer)
4. Subscription and Payment Information
- Astr offers free features within usage limits and paid subscriptions for additional features.
- Subscription payments are processed by a payment provider; Astr does not store your full card details or card verification code.
- We retain subscription and transaction records, such as amount, currency, payment status, and transaction reference, to activate subscriptions, follow up on payments, and provide customer support.
How We Use Your Information
We use the information we collect for the following purposes only:
✅ Providing Services
Creating, storing, and exporting your resume as PDF
✅ Content Improvement
Providing smart suggestions to improve your resume
✅ Service Improvement
Analyzing usage patterns to develop and improve user experience
✅ Communication
Sending important notifications about your account
✅ Platform Improvement
Analyzing usage to enhance user experience
✅ Security
Protecting the platform from unauthorized use
❌ What We Don't Do With Your Data
- • We don't sell your personal data to any third party
- • We don't share your resume with employers without your permission
- • We don't use your data for third-party targeted advertising
Data Protection & Security
We implement strict security measures to protect your information following global best practices:
SSL/TLS Encryption
All data is encrypted during transfer via HTTPS
Secure Servers
Data stored with trusted providers with advanced protection
Secure Authentication
Sign in with Google or a one-time code sent to your email or phone, with accounts and sessions managed using BetterAuth
Data Storage
The editor uses browser storage, and resumes linked to your account are saved in the cloud when you are signed in
Free Features and Paid Subscriptions
Astr lets you start free within account limits, with optional paid subscriptions. When subscribing:
- ✓Payment processing: You enter payment details with the payment provider to complete the transaction.
- ✓Clear costs: Review the displayed plan price, duration, and terms before confirming payment.
- ✓Subscriptions: Duration, benefits, and renewal terms depend on the selected plan.
- ✓Transaction records: Astr retains the information needed to link payments to your account, manage subscriptions, and provide support, without full card details or the verification code.
Note: Free access does not mean unlimited use of every feature. Service pages explain free-account limits and features that require a subscription.
Use of Artificial Intelligence
We use AI to improve, translate and analyze content and organize teacher portfolios when you request these features. Here's what you should know:
What We Send to AI
Depending on the feature, we may send the text you enter and the resume data needed for your request to an AI provider. When you organize a teacher portfolio with AI, after your consent, inputs include your notes, filenames, extracted text, page images and uploaded images prepared for analysis. Original evidence files stay in your browser and are not sent in their original format through the organization service
Trusted Providers
We work with global AI service providers that adhere to the highest privacy and security standards
Data Sharing with Third Parties
We only share your data with the following parties to provide our services:
| Service | Purpose | Data Shared |
|---|---|---|
| Google and verification-code delivery providers | Authentication and login | Phone number, email |
| DataFast and PostHog when enabled | Usage analytics, feature performance and error monitoring | Device and browsing data, usage events and errors; signed-in events may be linked to an account identifier in PostHog, so not all analytics data is anonymous |
| noon payments and Polar | Payment processing and subscription management | Payment information required by the provider; transaction reference, amount, currency and payment status held by Astr |
| AI Services | Content improvement, translation, analysis and teacher portfolio organization | Text and resume data depending on the request; for portfolio organization after consent: notes, filenames, extracted text, page images and images prepared for analysis |
Cookies
We use cookies for the following purposes:
Essential
To operate the platform and remember your login
Analytical
To understand how the platform is used and improve it
Functional
To remember your preferences and settings
You can control cookies through your browser settings. Disabling some cookies may affect your experience. When you open an invitation link, we use a random browser identifier and a 30-day cookie to attribute the signup and reward. We do not disclose the invited friend’s personal details to the inviter.
Browser Storage and Cloud Saving
Storage depends on the tool and whether you are signed in:
- •The resume editor uses browser storage while you work. Changes to resumes linked to your account are automatically saved on our servers when you are signed in, so you can retrieve them from your account
- •You can clear local data in your browser settings; this does not delete cloud copies saved in your account. Local drafts may be lost when browsing data is cleared or removed by the browser
- •Your teacher portfolio and original attachments are saved in your browser after you accept the draft; the portfolio is not synced with your Astr account. AI organization sends the analysis inputs described above after your consent, but does not enable cloud saving for the portfolio
Your Rights (Under PDPL)
Under the Saudi Personal Data Protection Law, you have the following rights:
🔍 Right of Access
Request a copy of your personal data that we hold
✏️ Right of Rectification
Update or correct your inaccurate data
🗑️ Right of Erasure
Request permanent deletion of your personal data
📤 Right of Data Portability
Obtain your data in a readable format
🚫 Right to Object
Object to the processing of your data for certain purposes
⏸️ Right to Restrict Processing
Request restriction on how we use your data
How to exercise your rights: Send your request to support@cushk.sa and we will respond within 30 days maximum.
Data Retention Period
We retain your data for the following periods:
- •Account data: While the account is active. A deletion request starts a 30-day recovery period; signing in during this period cancels the request. After that, the account and linked data are deleted, subject to the exceptions below. To prevent repeat invitation rewards after account deletion and re-registration, we retain a keyed one-way digest of the verified contact identifier used to qualify for a reward. This digest contains no name or CV and is not used to contact you.
- •Resumes: While the account is active unless you delete them. Account-linked data and files are removed as part of permanent deletion after the 30-day recovery period.
- •Financial transaction records: Retained for accounting and statutory purposes for 7 years, with account links removed upon deletion. Deleting an account does not delete these records.
- •Analytics data: Maximum 24 months
Policy Updates
We may update this policy from time to time. When making significant changes:
- •We will update the "Last updated" date at the top of the page
- •We will send an email notification for important changes
- •We will display a clear notice on the platform
Contact Us
If you have any questions or inquiries about our privacy policy or data practices:
Cushk Websites Trading Est.
Commercial Registration: 1010645520
Riyadh - Jeddah, Saudi Arabia