Legal
Privacy Policy
How Astraea collects, uses, and safeguards personal information.
Last updated: October 7, 2026
Overview
Astraea Inc. ("Astraea", "we", "us") is committed to protecting the privacy of individuals who interact with our website and clinical trial automation platform. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
Information We Collect
We collect information you provide directly (such as name, email, and company when you request a demo or contact us), technical information automatically logged by our systems (such as IP address, browser, and device data), and clinical trial data processed on behalf of our sponsor and CRO customers strictly under contract.
How We Use Information
We use information to provide and improve the Astraea platform, respond to inquiries, maintain security, meet our regulatory and contractual obligations, and communicate with customers and prospects. Clinical trial data is processed only for the purposes defined by the customer agreement governing that engagement.
Website analytics
On tryastraea.com and www.tryastraea.com, PostHog automatically measures visits and records masked browsing sessions when no analytics preference has been saved. Collection stays off if you previously disabled analytics or your browser sends a Do Not Track or Global Privacy Control signal. It receives page visits, browser and device metadata, an anonymous visitor identifier, and masked browsing-session recordings to help us understand website use. Data is sent to PostHog's US Cloud service. Inputs, contact forms, assistant drafts and summaries are blocked from recordings; other replay text is masked. We exclude page query strings and fragments, message bodies and study details from PostHog. Console, network payload and canvas recording are disabled. If you successfully submit the contact form while analytics is enabled, we use your normalized submitted email as an identifier and send your submitted name and email to associate your visits with that lead. We also record a lead_submitted event. We do not identify you while you type or after a failed submission.
Analytics choices
Use Analytics preferences in the footer to choose Disable analytics or Enable analytics at any time. The panel opens only when you select this control and shows the current tracking status. Disable analytics stops further PostHog collection and removes its stored visitor identity from this browser; it does not erase data already received by PostHog. We honor Do Not Track and Global Privacy Control signals by keeping PostHog off. Analytics is on by default unless you disable it. We save an essential local preference only when you explicitly choose Enable analytics or Disable analytics; automatic collection does not save an accepted preference. When analytics is enabled, PostHog uses browser storage to recognize visits. If browser storage is blocked, your choice may last only for the current page. This preference controls PostHog, not the existing Google Ads tag. Sending the contact form and choosing a calendar time work with PostHog disabled. Please do not enter patient data or confidential study information into website forms.
Compliance & Security
Astraea is designed to align with HIPAA, GDPR, 21 CFR Part 11, and applicable FDA guidance. We maintain governed execution controls, data desensitization, role-based access, and full audit trails for regulated workloads.
Your Choices
You may request access to, correction of, or deletion of personal information we hold about you, subject to applicable law and contractual obligations with our customers. To exercise a request, or for any question about this policy, contact us at the address below.
Contact
Astraea Inc. — privacy@tryastraea.com. For customer-specific data requests, please reach out through your account contact and reference the applicable data processing agreement.