Astro Arena – Privacy Policy

This Privacy Policy explains how Astro Animation Studio ("we", "us", "our") collects, uses, stores and protects information when you use the Astro Arena mobile app and web services (the "App"). Astro Arena was formerly called "Astro Universal Work App".

Astro Arena is an all-in-one workforce app for businesses. It covers attendance, work reports, projects, safety (HSE), store and materials, leave, payroll and performance. By using the App you agree to this policy.

1. Who is responsible for your data

Astro Arena is used by companies (the "Company") to manage their employees.

• Company data: when a business registers on Astro Arena, the Company decides what employee information is entered and how it is used. For that data the Company is the data controller, and we process it on the Company's behalf.
• Platform data: we are responsible for the data needed to run the platform itself, such as company registration details, login and security records.

Employees with questions about how their employer uses their data should contact their Company administrator first. You can also contact us at any time.

2. Information we collect

We do not collect your contacts, SMS, call logs or browsing history, and we do not track your location in the background.

3. App permissions

• Location (only while using the app): to record where attendance is marked, if your Company uses location-based attendance.
• Camera: to take attendance selfies and photos for work, HSE and store reports.
• Photos/files: to attach images or documents you choose.
• Notifications: to alert you about approvals, tasks, announcements and reminders.
• Internet: to sync your data with the Astro Arena server.

You can turn permissions off at any time in your phone's settings. Some features may then stop working.

4. How we use information

• To create and manage accounts, and to verify and approve new company registrations and employee join requests
• To provide the App's features: attendance, reports, projects, HSE, store, leave, payroll, performance and analytics
• To send notifications and service messages, such as approvals, password resets and security alerts
• To keep the platform secure, prevent fraud and misuse, and investigate problems
• To fix bugs and improve the App
• To comply with legal obligations

We do not sell your personal data, and we do not use it for advertising.

5. Sharing of information

• Within your Company: your administrators, managers and approvers can see the data needed for their role.
• Service providers: we use trusted providers that process data only for us, such as our server hosting provider, our email delivery service and our push notification service (such as Google Firebase Cloud Messaging).
• Legal reasons: we may share information when required by law, court order or a government authority, or to protect the rights and safety of users and the public.
• Business transfer: if the App is merged or sold, data may move to the new owner under this same policy.

6. Storage and security

Your data is stored on secure servers operated for Astro Animation Studio (currently located in Singapore). We protect it with:

• HTTPS (TLS) encryption for all data in transit
• Hashed passwords, access tokens that expire, and login rate limits
• Role-based access, so users see only what their role allows
• Separation of each Company's data from every other Company
• Regular backups and server updates

No system is 100% secure. If a data breach is likely to affect you, we will inform you and the relevant authorities as required by law.

7. Data retention

We keep data while the Company's account is active, or as long as needed to provide the App.

After an account is deleted, we delete or anonymise the personal data within 90 days. The exceptions are records the law requires us or the Company to keep longer, such as payroll and statutory records, and backups, which are overwritten on a rolling cycle.

8. Account and data deletion

• Employees: ask your Company administrator to remove your account, or email us at the address below from your registered email with the subject "Delete my Astro Arena account".
• Companies: the Company owner can request deletion of the whole company account and all its data by emailing us.

We will confirm your identity and complete the request within 30 days. We will also tell you about any data we must keep for legal reasons.

9. Your rights

Under applicable law, including India's Digital Personal Data Protection Act, 2023, you may:

• access a summary of your personal data
• ask us to correct or update inaccurate data
• ask us to erase your data, subject to legal limits
• withdraw consent where processing is based on consent
• nominate another person to act for you in case of death or incapacity
• raise a grievance with us, and then with the Data Protection Board of India

Data controlled by your Company may need to be requested through your Company. We will help pass such requests on.

10. Children

Astro Arena is a workplace app for adults. It is not meant for anyone under 18. We do not knowingly collect data from children. If you believe a child's data has been entered, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. The new version will be posted on this page with a new effective date. If the changes are important, we will notify you in the App.

12. Contact and grievance officer

We aim to reply within 7 days and to resolve grievances within 30 days.