Privacy Policy

‍

Last updated: January 12, 2026

‍

Thank you for using Astra.com. Astra Space, Inc., together with its subsidiaries (collectively, "Astra Space," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you interact with our website, web-based applications, and any other online services that link to or reference this Privacy Policy (collectively, the "Services").

‍

‍

Additional Privacy Rights for U.S. State Residents

‍

Residents of certain U.S. states, including California, Virginia, Colorado, Connecticut, Utah, and Texas, may have additional rights under applicable state privacy laws. These rights are described in the "U.S. State Privacy Rights" section below. Where required by law, those notices supplement and prevail over this Privacy Policy.

This Privacy Policy applies to personal information that we collect from website visitors, customers, prospects, and other users of the Services. It does not apply to information collected from Astra employees, job applicants, independent contractors, or vendors acting in an employment or commercial capacity.

‍

This Privacy Policy describes, among other things:

‍

• Personal and other information we collect about you;
• How we use your information;
• How we may share your information with third parties; and
• Your choices regarding the personal information we collect about you.

‍

‍

Consent

‍

By accessing or using the Services, you consent to this Privacy Policy. If you do not agree with this Privacy Policy, please do not access or use the Services. Information gathered through the Services may be transferred, used, and stored in the United States or in other countries where our service providers, or we, are located. If you use the Services, you agree to the transfer, use, and storage of your personal information in those countries. The data protection and other laws of the United States and other countries might not be as comprehensive as those in your country. You agree that all transactions relating to the Services or Astra Space are deemed to occur in the United States, where our servers are located.

‍

‍

Collection of Personal Information

‍

When you register for or use our Services, we collect personal information. For purposes of this Privacy Policy, "personal information" means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular individual or household.

‍

Categories of personal information collected:

‍

You may choose not to provide personal information, but this may prevent you from receiving certain features of the Services.

‍

We may maintain and use de-identified or aggregated information that cannot reasonably be used to identify you.

‍

Such information is not subject to this Privacy Policy to the extent permitted by law.Information may be collected by us or by our Service Providers or Online Tool Providers.

‍

‍

Use of Your Information

‍

We may use personal information to:

‍

• Provide, maintain, secure, and improve the Services and underlying systems;
• Communicate with you regarding your account, inquiries, and transactions, including providing customer support;
• Send marketing communications and personalized content where permitted by law;
• Conduct analytics, audits, research, and service development activities;
• Detect security incidents, prevent fraud, and protect the integrity of the Services; and
• Comply with legal obligations and enforce our rights.

‍

‍

Legal Bases for Processing (International Users)

‍

Where required by applicable law (including the GDPR and UK GDPR), we process personal information based on one or more of the following legal bases: your consent, performance of a contract, compliance with legal obligations, or our legitimate business interests.

‍

‍

Disclosure of Your Information

‍

We do not sell your personal information but we may disclose your personal information to third parties as described below.

‍

Targeted Advertising and Analytics. We may permit third-party analytics and advertising partners to collect information about your interactions with the Services over time and across different websites. Where required by law, you may opt out of such sharing using available cookie controls or legally recognized opt-out preference signals such as Global Privacy Control (GPC).

‍

We may disclose personal information to provide the Services, or when you authorize or instruct us to do so, for example when you use the Services to submit content or profile information. We may also disclose your interactions with the Services to social media platforms, as described elsewhere in this Privacy Policy. Additionally, we may disclose personal information to Service Providers. By "Service Providers" we mean companies, agents, contractors, service providers, or others engaged to perform functions on our behalf (such as processing of payments, provision of data storage, hosting of our website, marketing of our products and services, and conducting audits). When we use a Service Provider, we require that the Service Provider use and disclose personal information received from us only to provide their services to us or as required by applicable law.

‍

We may also disclose personal information to Online Tool Providers. By "Online Tool Provider" we mean a licensor of software that we include in, or use with, the Services, including an API or SDK, that provides a specialized function or service to us and that requires the transmission of personal information to the Online Tool Provider. Online Tool Providers may have the right to use personal information about you for their own business purposes. Use and disclosure of personal information by an Online Tool Provider is described in its privacy policy.

‍

We may also disclose your personal information to third parties when we believe, in good faith and in our sole discretion, that such disclosure is reasonably necessary to (a) enforce or apply the terms and conditions of the Services, including investigation of potential violations thereof, (b) comply with legal or regulatory requirements or an enforceable governmental request, (c) protect the rights, property or safety of us, our users or other third parties, (d) prevent a crime or protect national security, or (e) detect, prevent or otherwise address fraud, security or technical issues.

‍

We reserve the right to transfer information (including your personal information) to a third party in the event of a sale, merger, or transfer of all or substantially all of the assets of our company relating to the Services, or in the unlikely event of a bankruptcy, liquidation, or receivership of our business. We will use commercially reasonable efforts to notify you of such transfer, for example via email or by posting notice on our website.

‍

We may disclose de-identified or aggregated information that cannot reasonably be used to identify you to our clients, business partners, merchants, advertisers, investors, potential buyers, and other third parties for legitimate business purposes.

‍

‍

Data Retention

‍

We retain personal information only as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

‍

‍

Cookies and Automatic Information Gathering Technologies

‍

Every time you use the Services (e.g., access a Service webpage), we collect personal information regarding that use. For example, to improve our Services, we collect how, when, and which parts of the Services or its features you use. Also, we may use your device's unique identifier (UDID) or other unique identifiers to assist us in collecting and analyzing this data.

‍

To assist us in collecting information through the Services, we may employ a variety of technologies, including cookies, local browser storage, and web beacons, pixels, or tags. A "cookie" is a small amount of data that a website operator or a third party whose content is embedded on the website may store in your web browser and access when you visit the website. A web beacon, pixel, or tag is a small, usually transparent image or script placed on a web page that allows the operator of that image or script, which may be the operator of the website you visit or a third party, to read or write a cookie.

‍

Your operating system and web browser may allow you to erase information stored in cookies and local browser storage. But if you do so, you may be forced to login to the Services again and you may lose some preferences or settings. You may also be able to set your browser to refuse all website storage or to indicate when it is permitted, but some features of our Services may not function properly without it.

‍

You may manage cookie preferences and opt out of certain tracking technologies using the cookie controls available on our website, your browser settings, or legally recognized opt-out preference signals such as Global Privacy Control (GPC). For general information about cookies and how to manage browser settings, please consult your browser's help documentation.

‍

We use third-party analytics tools, including Google Analytics, to help us understand how users interact with the Services. These providers may collect information about your online activities over time and across different websites. Where required by law, this may constitute "sharing" for purposes of targeted or cross-context behavioral advertising. You may opt out of such collection using the cookie controls available on our website, your browser settings, or by installing the Google Analytics opt-out browser add-on.

‍

‍

Transparency and Choice; Do Not Track Signals

‍

You may request access to your personal information by sending an email to compliance@astra.com. We will try to locate and provide you with your personal information and give you the opportunity to correct this data, if it is inaccurate, or to delete it, at your request. But, in either case, we may need to retain it for legal reasons or for legitimate business purposes. You may also remove any content that you post to the Services using the deletion or removal options within the Service. However, we (and you) are not able to control information that you have already shared with other users or made available to third parties through the Services.

‍

If you need further assistance with removing any content you posted through the Services, you can email us at compliance@astra.com. Removal of your posted content may not ensure complete or comprehensive removal from our computer systems.

‍

We ask individual users to identify themselves and the information requested to be accessed, corrected, or removed before processing such requests, and we may decline to process requests that are unreasonably repetitive or systematic, require disproportionate technical effort, jeopardize the privacy of others, would be extremely impractical (for instance, requests concerning information residing on backups), or relate to information that is not associated with your personal information. In any case, where we provide information access and correction, we perform this service free of charge, except if doing so would require a disproportionate effort.

‍

Please be aware that if you ask us to delete your personal information, you may not be able to continue to use the Services. Also, even if you request that we delete your personal information, we may need to retain certain information for a limited period of time to satisfy our legal, audit and/or dispute resolution requirements.

‍

We recognize legally required opt-out preference signals, including Global Privacy Control (GPC), where applicable.

You can opt out of receiving marketing e-mails from us by clicking on the "unsubscribe" link in the e-mails. Please note that it may take up to ten (10) business days for your opt-out request to be processed. Also, even if you opt out of marketing e-mails, we may continue to send you certain account-related e-mails, such as notices about your account and confirmations of transactions you have requested.

‍

U.S. State Privacy Rights

‍

‍

This section applies to residents of U.S. states that provide privacy rights under applicable law, including California, Virginia, Colorado, Connecticut, Utah, and Texas.

‍

Subject to verification, you may have the right to:

‍

• Know the categories and specific pieces of personal information we collect about you;
• Access and receive a copy of your personal information;
• Correct inaccurate personal information;
• Request deletion of your personal information;
• Opt out of targeted advertising and certain data sharing;
• Not be discriminated against for exercising your privacy rights.

‍

To exercise your rights, please email compliance@astra.com with "Privacy Request" in the subject line. We may verify your identity before fulfilling your request. You may also submit requests by calling us at a toll-free number posted on our website.

If we deny your request, you may appeal our decision by replying to our response email or contacting compliance@astra.com with the word "Appeal" in the subject line.

‍

‍

Canadian Residents

‍

If you are located in Canada and have a concern about our handling of your personal information, please contact compliance@astra.com. You may also contact the Office of the Privacy Commissioner of Canada.

‍

‍

Children's Privacy

‍

The Services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn that we have collected personal information from a child under 16, we will delete that information promptly. If you believe a child under 16 has provided us with personal information, please contact us at compliance@astra.com.

‍

‍

Security

‍

We take reasonable steps to protect the personal information provided via the Services from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. In particular, email sent to or from the Services may not be secure. Therefore, you should take special care in deciding what information you send to us via email. Please keep this in mind when disclosing any personal information to us via the Internet.

‍

‍

International Data Transfers

‍

Your personal information may be transferred to, stored in, and processed in the United States or other countries where we or our service providers operate. By using the Services, you consent to such transfers. Where required by applicable law, we implement appropriate safeguards for cross-border data transfers.

‍

‍

Changes to This Privacy Policy

‍

We reserve the right to update or change our Privacy Policy at any time and you should check this Privacy Policy periodically. Your continued use of the Service after we post any modifications to the Privacy Policy on this page will constitute your acknowledgment of the modifications and your consent to abide and be bound by the modified Privacy Policy.

‍

If we make any material changes to this Privacy Policy, we will notify you either through the email address you have provided us, or by placing a prominent notice on our website.

‍

‍

Contact Us

‍

If you have any questions about this Privacy Policy, please contact us at:

‍

Email: compliance@astra.com

‍