Privacy Policy
Last updated 17 September 2026
Astral is a product of Mistiq LLC ("Astral", "we", "us"), an Illinois limited liability company based in Chicago. This policy explains what information the Astral app and website collect, why we collect it, who we share it with, and what you can do about it. It describes the product as it works today.
Information you give us
| Category | What it includes | Why |
|---|---|---|
| Account | Email address, and either a password (stored only as a salted hash) or an identifier from Google or Apple if you use their sign in. An optional display name. | To create your account, sign you in, and contact you about it. |
| Identity and tax | Legal first and last name, date of birth, phone number, US mailing address, country of citizenship, immigration or visa status, country of tax residence, whether you hold a Social Security number or an ITIN, and your confirmation of a W-8BEN where one applies. We do not ask for the number itself. | To work out your tax treatment and any treaty rate, and to tell you which accounts you are eligible for. |
| Brokerage connection | If you connect a brokerage account, you sign in at your brokerage through SnapTrade, never in Astral. We never see or store your brokerage login. We receive the institution name, a masked account number, and the holdings, orders and transactions of the accounts you connect, and we hold the SnapTrade credential that identifies you encrypted with AES-256-GCM. | To show your real positions and activity, and to send an order you place to your own brokerage. |
| Payment | Subscriptions are handled by Stripe, or by Apple or Google if you subscribe inside a mobile app. We receive your subscription status, not your card number. | To sell and manage Astral Premium. |
| What you do in the app | Orders, positions and activity history, watchlists, baskets, goals, the automation rules you write and the record of when they ran, recurring investments, round up settings, price alerts, notifications, lesson progress, and paper trading. | To run the features you asked for and show you your own history. |
| Coach conversations | The messages you send to the AI coach, and a short summary of your portfolio that we attach as context. | To answer your question with something relevant to your situation. |
| Technical | Standard request information such as IP address and browser or device type. | To operate and secure the service. |
Your Social Security number or ITIN
We do not collect it. Astral asks which kind of identifier you hold, a Social Security number or an ITIN or neither, because that changes which accounts you are eligible for and how you are taxed. The number itself is never requested, never stored, and never written to our logs. Astral does not open or maintain brokerage accounts, so there is nothing we would need it for. Your brokerage collects it directly from you, under its own policy.
Who we share information with
We do not sell your personal information, and we do not share it with advertising networks. Astral runs no third party advertising or analytics trackers. We share information only with the providers that make the product work:
- The brokerage you connect receives the orders you place through Astral. It is a separately regulated entity, it holds your money and your securities, and its own privacy policy governs what it does with your information.
- SnapTrade (Passiv Technologies Inc.) makes that connection. You sign in at your brokerage on their page, and they pass us the holdings, orders and transactions you authorise.
- OpenAI receives your AI coach messages and the portfolio summary attached to them, in order to generate a reply. Do not put anything in the coach that you would not want sent to a third party. If you would rather not use it, simply do not use the coach; the rest of Astral works without it.
- Stripe, and Apple or Google for purchases made inside a mobile app, handle payments.
- OVH hosts the service on dedicated hardware in Beauharnois, Quebec, Canada, which means your information is stored in Canada, and Google Workspace sends our transactional email.
- Legal and safety disclosures where the law requires them, or to investigate fraud and protect people and property.
- A successor if Mistiq LLC is involved in a merger, acquisition, or sale of assets. We would tell you before your information became subject to a different policy.
How we protect it
Traffic runs over TLS. Passwords are stored as salted hashes and session tokens only as hashes, so neither can be read back from our database. Sensitive stored credentials, such as the SnapTrade credential that identifies your brokerage connection, are encrypted with AES-256-GCM. Access to production data is limited to those who need it. No system is perfectly secure, and we do not claim otherwise, but we design around these limits rather than ignore them.
How long we keep it
We keep account and identity information for as long as your Astral account is open. Disconnecting a brokerage deletes the credential for it and stops us pulling anything further; the brokerage keeps its own records under its own obligations, which financial recordkeeping rules can require for several years. Coach conversations and product activity are kept while they are useful to you and deleted with your account.
Deleting your account
You can delete your account yourself: open Profile in Astral, tap Delete account, and confirm. It happens immediately and cannot be undone. If you cannot sign in, email [email protected] from the address on your account and we will do it for you within 30 days. Full details, including exactly what is removed and what we must keep, are on the account deletion page. Two honest limits: we cannot delete records we are legally required to retain, and information already sent to our brokerage partner is subject to their retention rules, so the brokerage account itself is closed with them separately.
Your rights
You can ask us to access, correct, or delete your personal information, and you can opt out of marketing email at any time. Depending on where you live you may have further rights, including under the California Consumer Privacy Act and, if you are in the European Economic Area or the United Kingdom, the GDPR. We do not sell or share personal information as those laws define the terms, and we will not discriminate against you for exercising a right. Email [email protected] to make a request.
Where your information is handled
Astral is operated from the United States and your information is processed there. If you use Astral from outside the United States, you are sending your information to the United States, where privacy law differs from your own.
Children
Astral is for adults. It is not directed to anyone under 18, we do not knowingly collect information from anyone under 18, and a brokerage account cannot be opened by a minor. If you believe a minor has given us information, email us and we will delete it.
Changes to this policy
We will update this policy as the product changes, and the move from test accounts to real money trading will be one of those updates. When we make a material change we will revise the date above and give notice in the app before the change takes effect.
Contact us
Privacy questions go to [email protected]. General support is [email protected]. Our postal address is Mistiq LLC, 1357 W Roosevelt Rd, Unit 608, Chicago, IL 60607, United States.