How Astra POS LLC collects, uses, discloses, stores, and protects information across our software and services.
Effective Date: June 11, 2026 · Last Updated: November 3, 2026
Astra POS LLC ("Astra POS," "Company," "we," "our," or "us") respects your privacy and is committed to protecting the information entrusted to us. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you visit our website, use our software, payment processing services, owner portal, technician portal, appointment booking tools, text messaging (SMS) tools, loyalty programs, gift card services, inventory management tools, payroll features, and related products and services.
By accessing or using our services, you agree to the practices described in this Privacy Policy.
Astra POS LLC
3675 Crestwood Pkwy, Suite 310
Duluth, GA 30096
Phone: 470-406-8485
Email: info@astraposonline.com
Website: www.astraposonline.com
We may collect information from business owners, employees, technicians, customers, website visitors, and other users of our services.
Merchants may store information about their customers, including:
When merchants use our text messaging tools, or when you give us your mobile number, we may collect and process:
We collect and use this information only as reasonably necessary for the purposes described in this Privacy Policy and our agreements, subject to applicable law.
Merchants may store information relating to employees, technicians, and contractors, including:
We may collect information related to transactions processed through our platform, including:
We do not store complete payment card information except as permitted by applicable law and PCI requirements.
When you visit our website, we may collect:
When you book an appointment or check in with a merchant through an Astra POS booking page or check-in device, we collect the information you provide on behalf of that merchant, including:
This information is used to create and manage your appointment with that merchant and is handled as described in Sections 5 and 6.
When someone buys a gift card for another person, the purchaser may give us the recipient's name, mobile number, or email address. We use that information only to deliver the gift card and related notices, and not to send the recipient marketing unless the recipient separately agrees.
Providing information is generally voluntary. However, some services cannot be provided without certain information. For example, a merchant account requires business and banking details, and an online booking requires a name and mobile number so the merchant can confirm the appointment. You can choose not to accept non-essential cookies, as described in Section 7.
We use collected information to:
Astra POS may provide payment processing services directly or through third-party payment processing partners. Payment processing may involve:
Payment card information is processed through secure systems designed to meet applicable security standards. Astra POS does not guarantee approval of payment transactions.
Merchants retain ownership of their business data, including:
When Astra POS collects information directly from merchants, account administrators, prospective customers, or website visitors for its own business purposes, Astra POS decides how that information is used.
When a merchant uses Astra POS to keep customer records, manage appointments, or send messages to its own customers, the merchant decides the purposes and recipients of that information and those messages. Astra POS acts as the merchant's service provider and processes that information on the merchant's behalf, solely to operate, support, maintain, secure, and improve the services, under our agreements and applicable law. Each merchant is responsible for its own privacy disclosures and for obtaining any customer permissions the law requires.
Astra POS gives merchants, such as nail salons, hair salons, barbershops, spas, and other businesses, optional tools to send text messages to their own customers. Messages are sent from the merchant's business number, with Astra POS as the merchant's messaging provider.
Messages sent through Astra POS on behalf of a merchant are communications from that merchant. The merchant is responsible for deciding the lawful recipients, purposes, content, and timing of its messages, including marketing campaigns, and for getting and keeping each customer's consent as required by law, including the Telephone Consumer Protection Act (TCPA) and mobile carrier rules. Astra POS provides tools to help merchants manage consent and messaging preferences, but does not independently verify every customer relationship or guarantee that consent records supplied by a merchant are legally sufficient. Merchant obligations for Astra Text Messaging are set out in the Merchant SMS Services Addendum.
We keep suppression records so that messages are not sent after consent has been withdrawn. A merchant cannot override a recorded opt-out by editing a customer profile, importing a customer list, or creating a new campaign.
Mobile phone numbers and text messaging opt-in information will not be sold, rented, or shared with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent are not shared with any third parties for purposes unrelated to delivering the messaging services the person subscribed to. We disclose only the minimum information reasonably necessary to the carriers, messaging platforms, hosting providers, and other service providers that help us deliver, secure, and administer those messages, and as required by law.
Astra POS does not gain permission to market its own products to a merchant's customers just because their information is processed through the Astra POS platform.
Astra POS may restrict, suspend, or refuse messaging that appears unauthorized, unlawful, deceptive, abusive, or inconsistent with mobile carrier requirements. Merchants must not use the messaging service to collect or send sensitive personal information, payment card security codes, or confidential medical details unless Astra POS has expressly authorized it and appropriate legal and technical safeguards are in place.
Astra POS may also text business owners and prospective customers who give us their mobile number (for example, when requesting a demo or setting up an account) about their account, support requests, or demos, and send marketing texts only to those who have agreed to receive them. The same opt-out, frequency, and cost terms above apply.
We use cookies and similar technologies to:
Some cookies are session cookies, which are deleted when you close your browser, and some are persistent cookies, which remain until they expire or you delete them. We may also use similar technologies, such as browser local storage and small tracking pixels in emails, to remember preferences and to know whether an email was opened.
Our website currently uses the following third-party tools, which may set their own cookies or collect device and usage information such as IP address, browser type, and pages viewed:
These providers process information under their own privacy policies.
We do not currently allow third-party advertising networks to place advertising cookies or tracking pixels on our website, and we do not sell personal information or share it for cross-context behavioral advertising. If that changes, we will update this Privacy Policy before doing so and describe how to opt out, including through the Network Advertising Initiative and Digital Advertising Alliance opt-out tools.
Most browsers let you block or delete cookies through their settings. If you block cookies, certain website features may not function properly, and you may not be able to sign in to our software. Some browsers send “Do Not Track” signals. Because there is no common standard for these signals, our website does not currently respond to them; you can still limit tracking using the cookie and opt-out options above.
We may use third-party providers, including:
These providers may process information on our behalf subject to contractual obligations and applicable laws. Mobile phone numbers and text message consent are shared with messaging providers and carriers only to deliver messages, and we do not authorize providers to use them for unrelated marketing purposes (see Section 6).
We may also disclose information when required by law, to respond to valid legal process, to protect the rights, property, or safety of Astra POS, our merchants, or others, to investigate fraud or abuse, or as part of a merger, acquisition, or sale of assets, subject to applicable privacy obligations.
We use commercially reasonable safeguards to protect information. Security measures may include:
Access to message content and consent records is limited to authorized personnel and service providers with a legitimate operational need.
Data may be stored on infrastructure provided by Amazon Web Services (AWS) and other reputable service providers. While we take reasonable measures to protect information, no method of transmission or storage is completely secure. We cannot guarantee absolute security.
We retain information for as long as necessary to:
Retention periods may vary depending on the type of information and applicable legal requirements. Consent evidence, suppression records, registration information, billing records, and message delivery logs may be kept for different periods according to their purpose. Records of text message consent and opt-outs are kept for at least four (4) years. When information is no longer needed, we delete it, anonymize it, or restrict access to it.
A request to delete customer information may not remove records we must keep for legal compliance, fraud prevention, or to make sure unwanted messages are not sent (for example, an opt-out record).
Subject to applicable law, users may have rights to:
Requests may be submitted to info@astraposonline.com. We may require identity verification before fulfilling requests. Where we hold information on behalf of a merchant, we may forward your request to that merchant to complete.
We respond to requests within the time required by applicable law (for example, within 45 days for California requests) and will tell you if we need more time. We do not charge a fee unless a request is clearly unfounded or excessive, and we will tell you before charging one. We will not discriminate against you for exercising your rights.
We do not make decisions about individuals based solely on automated processing that produce legal or similarly significant effects, except for automated fraud, security, and risk screening that we or our payment processing partners use to protect transactions and accounts. If you believe you have been affected by such a decision, contact us and we will arrange a human review where required by law.
California residents may have rights under the California Consumer Privacy Act (CCPA), including:
Requests may be submitted to info@astraposonline.com.
Astra POS does not sell personal information and does not share personal information for cross-context behavioral advertising. When we process customer information on behalf of a merchant, we act as that merchant’s service provider, and requests about that information may be forwarded to the merchant.
Where applicable, users located in the European Economic Area may have rights under the General Data Protection Regulation (GDPR), including:
Users may contact us regarding GDPR-related requests at info@astraposonline.com.
Where the GDPR applies, we process personal data on one or more of these legal bases: to perform a contract with you or take steps you request before entering one; to comply with a legal obligation; for our legitimate interests (such as operating, securing, and improving our services and preventing fraud), where those interests are not overridden by your rights; and with your consent, such as for marketing messages and non-essential cookies. Where we rely on consent, you may withdraw it at any time without affecting processing that took place before withdrawal.
When we process customer data on behalf of a merchant, the merchant is the data controller and Astra POS acts as its processor. You also have the right to lodge a complaint with the data protection authority in the country where you live or work.
Our services are intended for business use and are not directed toward children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that such information has been collected, we will take reasonable steps to delete it.
Users may receive marketing communications from Astra POS. Recipients may opt out of marketing emails by following unsubscribe instructions included in such communications, and may opt out of text messages at any time by replying STOP. Service-related communications may continue even if marketing communications are declined.
Information may be processed and stored in the United States. By using our services, users consent to the transfer of information to the United States and other locations where our service providers operate.
We reserve the right to modify this Privacy Policy at any time. Updated versions will be posted on our website, and material changes will be communicated as required by applicable law. Continued use of our services following changes constitutes acceptance of the revised Privacy Policy.
For questions regarding this Privacy Policy, contact:
Astra POS LLC
3675 Crestwood Pkwy, Suite 310
Duluth, GA 30096
Phone: 470-406-8485
Email: info@astraposonline.com
Website: www.astraposonline.com