Privacy Policy

Effective date: August 6, 2026
Version: 2026-08-06

This Privacy Policy explains how AstraVortex processes personal data when you visit astravortex.art, create an account, purchase or download digital assets, contact support, or otherwise use the store services.

AstraVortex is the operator responsible for the website data described in this Policy. Privacy questions and requests may be sent to asset-support@astravortex.art.

1. Data we process

Depending on how you use the services, AstraVortex may process:

• account information, including your email address;
• a securely derived password hash rather than your readable password;
• email-verification, password-reset, session, and account-security records;
• order details, selected product and license tier, price, currency, payment status, transaction reference, refund status, and delivery records;
• country or region information supplied by hosting, fraud-prevention, or payment infrastructure;
• download and security records, such as timestamps, IP-related data, browser or device information, user-agent data, and access logs;
• messages, screenshots, and files you send to support;
• promo-code usage, abuse-prevention information, and records needed to investigate fraud, chargebacks, or license violations; and
• cookies or similar technical data required to keep you signed in and operate account functions.

Payment-card details, bank credentials, and cryptocurrency processing are normally handled by the selected payment provider. AstraVortex does not ask for card passwords, wallet seed phrases, or private keys.

2. Why we process data

AstraVortex processes data to:

• create, verify, secure, and maintain accounts;
• accept, verify, and administer orders and payments;
• issue licenses and provide downloads;
• send transactional emails, purchase confirmations, verification links, and security notices;
• provide support and resolve delivery, refund, compatibility, or technical issues;
• prevent fraud, abuse, unauthorized access, payment disputes, and license violations;
• maintain accounting, tax, legal, and compliance records;
• operate, troubleshoot, protect, and improve the website and store; and
• establish, exercise, or defend legal claims.

Where applicable, processing is based on performing a contract, taking steps requested before a contract, complying with legal obligations, protecting legitimate security and business interests, or consent where the law requires consent.

3. Cookies and similar technologies

AstraVortex may use necessary cookies or similar storage to maintain sessions, remember security state, operate checkout and account functions, and protect the Services against abuse.

Optional analytics or similar technologies, if introduced, will be handled in accordance with applicable consent requirements. You may block cookies through your browser, but necessary account or checkout functions may stop working.

4. Service providers and recipients

AstraVortex may share only the data reasonably necessary with providers that support:

• website hosting and content delivery;
• database, backup, and file storage;
• account and transactional email delivery;
• card, local-payment, and cryptocurrency processing;
• fraud prevention, identity or compliance checks, security, logging, and technical support; and
• accounting, legal, or regulatory compliance.

A payment provider may receive order, customer, device, location, and transaction data under its own privacy notice. Where a payment provider acts as merchant of record, it may independently determine how it processes data required for the payment, tax, refund, or compliance process.

Data may also be disclosed where required by law, to protect legal rights or users, investigate fraud or security incidents, or in connection with a lawful transfer of the store or its assets. AstraVortex does not sell personal data to advertisers.

5. International processing

Service providers may process data in countries other than your own. Where required, AstraVortex and its providers use legally recognized safeguards for international transfers.

6. Retention

Data is retained only as long as reasonably necessary for the purposes described in this Policy, including account operation, delivery, support, fraud prevention, dispute handling, and legal or accounting obligations.

Session, verification, and password-reset records may expire automatically. Order, license, payment, refund, consent, security, and tax records may be retained longer where required for legal, accounting, compliance, fraud-prevention, or dispute purposes.

When data is no longer needed, it may be deleted, anonymized, or securely archived where continued storage is legally required.

7. Security

AstraVortex uses reasonable technical and organizational measures intended to protect personal data, including access controls and secure password hashing. No online service can guarantee absolute security.

You are responsible for keeping your password and account access confidential and for notifying us promptly if you suspect unauthorized access.

8. Your choices and rights

Depending on applicable law, you may have rights to request access, correction, deletion, restriction, portability, or objection, and to withdraw consent where processing is based on consent.

Some records may need to be retained despite a deletion request where required by law or reasonably necessary to establish, exercise, or defend legal claims, prevent fraud, maintain transaction records, or document completed purchases and licenses.

To submit a request, email asset-support@astravortex.art from the address associated with your account where possible. We may ask for information reasonably necessary to verify the request and protect the account.

You may also have the right to complain to the data-protection authority that applies to your location.

9. Children

The services are not intended for a person who cannot legally enter into the applicable agreements without authorization from a parent or legal guardian. AstraVortex does not knowingly request unnecessary personal data from children.

10. Third-party services and links

Payment providers, external marketplaces, social platforms, embedded media, and other linked services operate under their own privacy notices. AstraVortex is not responsible for privacy practices outside its reasonable control.

11. Changes to this Policy

AstraVortex may update this Policy to reflect changes in the Services, providers, security practices, or legal requirements. The effective date and version at the top identify the current version.

Material changes will be communicated where required by applicable law.

12. Contact

Privacy questions and requests may be sent to:

asset-support@astravortex.art