Last updated: 2 November 2026
Astralune is a trading name of X.H. Noctuer Holdings Pty Ltd (ACN 687 835 570, ABN 73 687 835 570). In this policy, "Astralune", "we" and "us" mean that company.
This policy covers:
- our website, astralune.ai, including the chat window on it
- the Astralune app for shop owners at my.astralune.ai
- emails and messages you send us
We follow the Australian Privacy Principles in the Privacy Act 1988 (Cth).
1. The short version
- To use the app, you give us your email address, your name and your business name. We use them to sign you in and run your account.
- Your workshop progress and your policy stay in the browser on your device. We don't upload them.
- Workshop update emails are off unless you turn them on. You can turn them off at any time in Account in the app, and every email has an unsubscribe link.
- The tools in the app don't save anything, and what you type isn't sent to us.
- This version of the app doesn't use AI.
- We don't sell or rent your information, and we don't use advertising trackers.
- Email hello@astralune.ai to see, correct or delete what we hold about you.
2. What we collect
When you sign up for and sign in to the app
- To sign you in, we send a 6-digit code or a sign-in link to your email address.
- Your email address, and the name and business name you enter.
- Sign-in records: when you signed in, and the IP address and browser that made the request. Our sign-in provider keeps these to protect your account.
If you turn on workshop update emails
- They are off by default. You can turn them off at any time in Account in the app.
- We record whether they are on. Each time you turn them on or off, we record the time and how you did it (in Account, when signing in, or through the unsubscribe link).
- Each account also has a random code that goes into the unsubscribe link in these emails (my.astralune.ai/#unsubscribe=…). The code lets the link find your account.
When you use the app
- Your workshop progress and your policy are saved only in the browser on your device. We don't upload them and we can't see them. Clearing your browser data removes them.
- If we add a feature that saves more to your account, we will update this policy before it goes live.
When you use the tools in the app
- The tools don't save anything. What you type stays in the open page until you close or leave it, and it isn't sent to us. Download, copy or print your work to keep it.
When you use the chat window on our website
- The questions you type. They are sent to OpenAI to write the replies. We don't store chat questions on our servers. Your browser keeps the last few messages until you close the tab.
- If you leave a message with your name, email and what you need, we store it together with the last few chat messages and email it to our team.
- To stop abuse, we count requests per visitor using a scrambled, one-way version of your IP address that changes every day. We don't store your IP address itself.
When you contact us
- Whatever you send us by email, WeChat or other messages.
When you visit our website
- Cloudflare, which runs our website, processes your IP address and browser details to deliver pages and block attacks.
- We count website visits with Cloudflare Web Analytics. It doesn't use cookies and only shows us totals.
- Our website loads fonts from Google Fonts, so Google receives your IP address when the fonts load.
- We save your light or dark theme choice in your browser. See our Cookie Policy.
When you open the app
- Cloudflare delivers the app and processes your IP address and browser details to do that.
- The app has no analytics and no cookies, and it doesn't load fonts or scripts from other companies.
- To keep you signed in, the app saves your sign-in session in your browser.
3. Why we use it
- to sign you in and keep your account secure
- to answer your questions and deliver the work you asked for
- to send you emails about your account
- to send you workshop updates, only if you turned them on
- to stop spam and abuse, and to fix problems
- to meet our legal obligations
4. Who handles it for us
We use these service providers. Each one gets only what it needs to do its job.
| Provider | What it does for us | What it handles | Where |
|---|---|---|---|
| Supabase | App sign-in, accounts and email preferences | Email address, name, business name, sign-in records, workshop email choice | Stored in Sydney, Australia. Supabase is a US company |
| Resend | Sends app sign-in emails and website notifications | Email address, email content | US company. Our emails are sent through Tokyo, Japan |
| Cloudflare | Runs the website and app; stores website messages | IP address, request details, website messages | US company, global network |
| OpenAI | Replies in the website chat | Your chat questions | United States |
| Google Workspace | Our team email (hello@astralune.ai) | Emails you send us | US company, global |
| Google Fonts | Fonts on our website (not the app) | IP address | US company, global |
This means your information may be stored or accessed outside Australia, including in the United States and Japan.
5. AI in the app
This version of the app doesn't send anything to an AI service.
If we add AI features later, we will update this policy before any AI feature goes live, including what is sent, to which provider, and what that provider may do with it.
6. How long we keep it
- App account: until you ask us to delete it. Email hello@astralune.ai.
- Workshop email choice: for as long as you have an account. You can turn workshop updates off at any time in Account in the app. We keep the record of each time they were turned on or off (the time and how) so we can show that you agreed and make sure we stop after you unsubscribe. This record is deleted together with your account.
- What you type in the tools: we don't keep it. It is cleared when you close or leave the page.
- Website messages and emails: for as long as we need them to reply and follow up on your request. Then we delete them.
- Records the law requires us to keep, such as invoices: for the period the law sets.
7. How we protect it
- All connections to our website and app use HTTPS.
- Only the people who need your information can access it, and each service is locked with its own keys.
- Our app database blocks all access unless a rule allows it.
- If a data breach is likely to cause you serious harm, we will tell you and the Office of the Australian Information Commissioner (OAIC).
8. Your choices
- See or correct your information: email hello@astralune.ai. We reply within 30 days.
- Delete it: email hello@astralune.ai to ask us to delete your account or your messages. We'll tell you when it's done.
- Stop workshop updates: turn them off in Account in the app at any time, use the unsubscribe link in any update email, or email us.
- To check it's you, we reply to the email address on your account.
- You can use our website without giving us your name or email. The app needs an email address so you can sign in.
9. Complaints
Email hello@astralune.ai. We reply within 30 days. If you're not happy with our answer, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.
10. Children
Our website and app are made for businesses. They aren't meant for children under 16.
11. Changes to this policy
When we change this policy, we update the date at the top. If a change affects how we use app account data, we email app users before it takes effect.
12. Contact us
Astralune (X.H. Noctuer Holdings Pty Ltd)
Email: hello@astralune.ai
隐私政策（中文）
最后更新：2026 年 11 月 2 日
Astralune 是 X.H. Noctuer Holdings Pty Ltd（ACN 687 835 570，ABN 73 687 835 570）的商号。本政策里的「Astralune」「我们」都指这家公司。如中英文版本有出入，以英文版为准。
本政策适用于：
- 我们的网站 astralune.ai，包括网站上的聊天窗
- 给店主用的 Astralune app（my.astralune.ai）
- 您通过邮件或其他渠道发给我们的消息
我们遵守澳大利亚《1988 年隐私法》（Privacy Act 1988）中的澳大利亚隐私原则。
1. 简要说明
- 使用 app 时，您会给我们邮箱、称呼和店名。我们用这些让您登录、管理您的账户。
- 您的 workshop 进度和您的政策只存在您设备上的浏览器里，我们不上传。
- workshop 最新消息邮件默认关闭，您打开了才发。您可以随时在 app 的「账户」里关掉，每封邮件里也都有退订链接。
- app 里的工具不保存任何内容，您输入的内容也不会发给我们。
- 这一版 app 不使用 AI。
- 我们不出售、不出租您的信息，也不用广告追踪。
- 想查看、更正或删除我们存的关于您的信息，发邮件到 hello@astralune.ai。
2. 我们收集什么
注册和登录 app 时
- 登录时，我们会发一个 6 位验证码或登录链接到您的邮箱。
- 您的邮箱地址，以及您填的称呼和店名。
- 登录记录：登录时间，以及发起请求的 IP 地址和浏览器信息。登录服务商保存这些记录，用来保护您的账户。
打开 workshop 最新消息邮件时
- 这类邮件默认关闭，您可以随时在 app 的「账户」里关掉。
- 我们记录它是开还是关。每次打开或关掉，我们都会记下时间和方式（在「账户」里、登录时，或通过退订链接）。
- 每个账户还有一串随机码，放在这类邮件的退订链接里（my.astralune.ai/#unsubscribe=…），退订链接靠它找到您的账户。
使用 app 时
- 您的 workshop 进度和您的政策只保存在您设备上的浏览器里。我们不上传，也看不到。清除浏览器数据就会删掉它们。
- 以后如果增加把更多内容存进账户的功能，我们会在上线前先更新本政策。
使用 app 里的工具时
- 工具不会保存任何内容。您输入的内容只留在打开的页面里，关闭或离开页面后就会清除，也不会发给我们。如需保留，请下载、复制或打印。
使用网站聊天窗时
- 您输入的问题会发给 OpenAI 生成回答。我们的服务器不保存聊天问题。您的浏览器会保留最近几条对话，关掉标签页就没了。
- 如果您留言（称呼、邮箱、需求），我们会把留言和最近几条对话一起保存，并发邮件给我们团队。
- 为了防止滥用，我们按访客统计请求次数，用的是把 IP 地址打乱后的单向值，每天更换，不保存 IP 地址本身。
联系我们时
- 您通过邮件、微信或其他渠道发给我们的内容。
访问网站时
- 承载网站的 Cloudflare 会处理您的 IP 地址和浏览器信息，用来传送页面、拦截攻击。
- 我们用 Cloudflare Web Analytics 统计网站访问量。它不用 cookie，我们只看得到总数。
- 网站从 Google Fonts 加载字体，加载时 Google 会收到您的 IP 地址。
- 您选的深色或浅色主题保存在您的浏览器里。详见 Cookie 政策。
打开 app 时
- app 由 Cloudflare 传送，传送时会处理您的 IP 地址和浏览器信息。
- app 没有访问统计，不用 cookie，也不从别的公司加载字体或脚本。
- 为了让您保持登录，app 会把登录状态保存在您的浏览器里。
3. 我们用这些信息做什么
- 让您登录，保护账户安全
- 回答您的问题，交付您委托的事
- 给您发和账户有关的邮件
- 给您发 workshop 最新消息，只在您打开之后
- 防止垃圾信息和滥用，排查问题
- 履行法律义务
4. 谁替我们处理
我们用下面这些服务商，每家只拿到它干活需要的信息。
| 服务商 | 替我们做什么 | 处理哪些信息 | 在哪里 |
|---|---|---|---|
| Supabase | app 登录、账户和邮件偏好 | 邮箱、称呼、店名、登录记录、workshop 最新消息的开关 | 存在澳大利亚悉尼。Supabase 是美国公司 |
| Resend | 发 app 登录邮件和网站通知 | 邮箱、邮件内容 | 美国公司。我们的邮件经日本东京发出 |
| Cloudflare | 承载网站和 app，保存网站留言 | IP 地址、请求信息、网站留言 | 美国公司，全球网络 |
| OpenAI | 网站聊天窗的回答 | 您的聊天问题 | 美国 |
| Google Workspace | 团队邮箱（hello@astralune.ai） | 您发给我们的邮件 | 美国公司，全球 |
| Google Fonts | 网站字体（app 不用） | IP 地址 | 美国公司，全球 |
所以您的信息可能存放在澳大利亚境外，或在境外被访问，包括美国和日本。
5. app 里的 AI
这一版 app 不往任何 AI 服务发送内容。
以后如果加 AI 功能，任何 AI 功能上线前，我们会先更新本政策，写明会发送什么、发给哪家服务商，以及这家服务商会怎么处理。
6. 保存多久
- app 账户：保存到您发邮件到 hello@astralune.ai 要求我们删除为止。
- workshop 最新消息的开关记录：账户在就一直保存。您可以随时在 app 的「账户」里关掉 workshop 最新消息。我们保存每次打开和关掉的记录（时间和方式），这样能证明您同意过，也能确保您退订后不再发。这份记录会随账户一起删除。
- 您在工具里输入的内容：我们不保存，关闭或离开页面后就会清除。
- 网站留言和邮件：回复和跟进您的需求期间保存，之后删除。
- 法律要求保存的记录（比如发票）：按法律规定的期限保存。
7. 怎么保护
- 网站和 app 的所有连接都走 HTTPS 加密。
- 只有需要的人能接触您的信息，每个服务都用各自的密钥锁着。
- app 的数据库默认拒绝一切访问，只有规则允许的才放行。
- 如果发生可能对您造成严重伤害的数据泄露，我们会通知您和澳大利亚信息专员办公室（OAIC）。
8. 您可以做什么
- 查看或更正：发邮件到 hello@astralune.ai，我们 30 天内回复。
- 删除：发邮件到 hello@astralune.ai，要求我们删除您的账户或留言，删完会告诉您。
- 不再收 workshop 最新消息：随时在 app 的「账户」里关掉，点任何一封最新消息邮件里的退订链接，或者发邮件给我们。
- 为了确认是您本人，我们会回复到账户登记的邮箱。
- 不留姓名和邮箱也能浏览我们的网站；app 需要邮箱才能登录。
9. 投诉
发邮件到 hello@astralune.ai，我们 30 天内回复。对答复不满意的，可以向 OAIC 投诉：oaic.gov.au，电话 1300 363 992。
10. 未成年人
我们的网站和 app 是给商家用的，不面向 16 岁以下的未成年人。
11. 政策更新
政策有改动时，我们会更新顶部的日期。改动影响 app 账户数据的用法时，我们会在生效前发邮件通知 app 用户。
12. 联系我们
Astralune（X.H. Noctuer Holdings Pty Ltd）
邮箱：hello@astralune.ai
Astralune is a trading name of X.H. Noctuer Holdings Pty Ltd · ACN 687 835 570 · ABN 73 687 835 570.
