Last updated: April 3, 2026
1. Data Controller
Astral AI LLC, registered in Dubai, UAE, is the data controller for personal data processed through Nyx Intelligence.
2. Data We Collect
Account Data
- Email address (for authentication)
- Subscription tier and payment status (via Stripe)
- Account creation date
Usage Data
- Pages viewed and features used (via Vercel Analytics)
- Browser type, device, and approximate location (country level)
- Performance metrics (Core Web Vitals via Vercel Speed Insights)
Data We Do NOT Collect
- We do not track individual user searches or country selections
- We do not sell personal data to third parties
- We do not use personal data for advertising
3. How We Use Your Data
- Authentication and account management
- Subscription billing via Stripe
- Platform performance monitoring
- Security and fraud prevention
4. Third-Party Services
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication, database | Email, user ID |
| Stripe | Payment processing | Email, payment method |
| Vercel | Hosting, analytics | Anonymous usage metrics |
5. Data Retention
- Account data: retained while account is active, deleted within 30 days of account closure
- Usage analytics: anonymized, retained for 12 months
- Payment records: retained as required by tax law (typically 7 years)
6. Your Rights (GDPR / UAE PDPL)
If you are in the EU or UAE, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate data
- Erasure: Request deletion of your data ("right to be forgotten")
- Portability: Receive your data in a structured format
- Objection: Object to processing of your data
- Restriction: Request limited processing
To exercise these rights, email privacy@nyx-intelligence.com
7. Cookies
We use essential cookies for authentication. See our Cookie Policy for details.
8. Security
We implement industry-standard security measures including:
- TLS encryption for all data in transit
- Row-level security in Supabase database
- No plaintext password storage (Supabase Auth handles this)
- Regular security audits
9. International Transfers
Data may be processed in the United States (Vercel), EU (Supabase), and UAE (Astral AI). We ensure appropriate safeguards for cross-border transfers.
10. Contact
Data Protection Officer: privacy@nyx-intelligence.com
Astral AI LLC, Dubai, United Arab Emirates