Privacy Policy
Last updated: August 14, 2026
UAB SROKAS, company code 305710644, Vilnius, V. Nagevičiaus g. 3, LT-08237, Lithuania ("Astriq", "we", "us") is the data controller for personal data processed through https://astriq.app (the "Service"). This Policy follows the EU GDPR.
1. Data we collect
- Account: name, email, password (hashed).
- Billing: plan and transactions (card details are handled by our payment providers, not us).
- Content: your prompts and files (Input) and the AI Output generated.
- Usage & technical: tools used, tokens spent, IP address, device and browser data.
- Cookies: see our Cookie Policy.
Please don't submit sensitive personal data as Input.
2. Why we use it (legal bases)
- Provide the Service and process your Input into Output — *contract*.
- Process payments and keep accounting records — *contract / legal obligation*.
- Support, security, fraud prevention, service improvement — *legitimate interests*.
- Marketing and non-essential cookies — *your consent*.
We do not use your Input or Output to train our own AI models.
3. AI models and sharing
To generate Output, we send your Input to third-party AI model providers (e.g. GPT, Gemini, Claude, Flux, Suno, Llama). We also share data with hosting, analytics, support and payment providers acting for us. We do not sell your data. We may disclose data where required by law.
4. International transfers
If data is transferred outside the EEA, we use appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy decision.
5. Retention
We keep data only as long as needed: account data for the life of your account, billing/accounting records as required by Lithuanian law (up to 10 years), and logs for a limited period.
6. Security
We use appropriate measures including encryption in transit and at rest and access controls. No system is fully secure, but we work to protect your data and to notify breaches where legally required.
7. Your rights
Under the GDPR you can access, correct, delete, restrict or port your data, object to processing, and withdraw consent. Contact [email protected] to exercise these rights; we respond within one month. You may complain to the Lithuanian State Data Protection Inspectorate (VDAI, https://vdai.lrv.lt) or the authority in your country.
8. Children
The Service is not for under-18s and we don't knowingly collect their data.
9. Changes
We may update this Policy and will note the "Last updated" date; material changes will be notified.
Contact
UAB SROKAS · Company code 305710644 · Vilnius, V. Nagevičiaus g. 3, LT-08237, Lithuania · +370 661 08302 · [email protected]