Privacy notice (pre-release).

This notice describes how Astvyr Software Inc. handles information in connection with the Astvyr editor, the Astvyr CLI, and this website.

The product has not been released, so no account, billing or usage data exists yet. Until release, the only personal data we process is what you choose to send us through this website — the contact form or email — and ordinary server logs.

It does not describe the processing your own organization performs when it self-hosts Astvyr. In a self-hosted Enterprise deployment we operate no service that receives your code, so this notice is limited to licensing and support correspondence.

Contact form: the name, work email, organization, team size, deployment preference and message you type, plus the time of submission. We use it only to answer you and keep a record of the conversation.

Server logs: standard request data (IP address, user agent, path, timestamp) retained for security and abuse prevention.

After release, the following will additionally apply. Account data: the email address used to license the product, the organization it belongs to, and billing details handled by our payment processor. We never store full card numbers.

Aggregate usage counters: the number of routed cloud requests per billing period, so an invoice can be produced. Counters are numeric totals — they contain no prompt text, no file names, and no repository identifiers.

Support correspondence: whatever you choose to send us, retained for 24 months.

Your source code, in any tier, on either the local or the routed path. Routed prompts are processed in volatile memory and discarded once a response is returned; they are not written to disk and not used to train any model.

Keystroke content, cursor telemetry, file paths, or repository metadata. Completion, indexing and analysis run entirely on your device and report nothing upstream.

Crash data, unless you explicitly opt in. The opt-in is per machine, off by default, and can be revoked at any time.

The repository index and any retained embeddings live in an encrypted store on your own device. Deleting a workspace removes them; deleting the application removes the store entirely.

You can inspect the store at any time with `astvyr index --inspect`, which prints the file list and sizes without printing contents.

For account and billing data we rely on contract performance; for support correspondence, legitimate interest. Aggregate counters are retained for 13 months to cover annual billing disputes.

We do not sell personal data and do not share it with advertising networks, because we run no advertising.

Cloud model providers are engaged as sub-processors only when a workspace enables the routed path, and each operates under a zero-retention agreement. The current list is published to customers on request and changes are announced 30 days in advance.

You can request access, correction, export, or erasure of any personal data we hold by writing to privacy@astvyr.com. We respond within 30 days, and in practice usually within five.

Where the GDPR applies, you also have the right to lodge a complaint with your supervisory authority.