Legal
Last updated 22 October 2026
This policy explains what personal data AstraCloud (Astra Cloud, Kathmandu, Nepal) collects when you use our website at astracloud.host, the AstraCloud control panel, and the AstraCloud Android app, why we collect it, and the choices you have. The Android app opens the same control panel, so everything here applies to it equally.
Account details you give us when you sign up or order: name, email address, phone number, and billing address where an invoice needs one.
Billing records: orders, invoices and payment status. Card and wallet payments are handled by the payment provider you choose (for example eSewa, Khalti, Fonepay, Stripe or PayPal). We never see or store your full card number or wallet password.
Service data: the websites, files, databases, email accounts, domains and settings you create in the panel. This is your content; we store and process it only to run the service for you.
Security and usage logs: IP address, browser or device type, sign-in times, and actions taken in the panel. We keep these to protect your account, detect abuse and fix problems.
Support messages you send us by email, chat or the community.
To provide and secure the service; to bill you and send invoices; to send service email such as account alerts, password resets, expiry reminders and security notices; to answer support requests; and to meet legal and tax obligations in Nepal.
We do not sell your personal data, and we do not use it for third-party advertising.
We use cookies and browser storage only for things the service needs: keeping you signed in, remembering your theme and preferences, and protecting forms. We do not run advertising or cross-site tracking cookies.
The AstraCloud Android app displays the control panel at astracloud.host using Chrome on your device. The app itself does not collect contacts, location, photos or other device data. If you allow notifications, they are used only for messages about your account. Files are uploaded only when you choose them.
We share data only with providers that help us run the service, and only as much as they need: payment providers to process payments, domain registries and registrars to register your domains, DNS and network providers, and email delivery. We also disclose data when Nepali law requires it.
Connections are encrypted with TLS, passwords are stored hashed, and two-step sign-in is available on every account. We keep account and billing records for as long as your account is open and afterwards as long as tax law requires. When you close your account, your hosted content is deleted after any backup retention period ends.
You can view and update your details in the panel at any time. You can ask us for a copy of your data, to correct it, or to delete your account by emailing info@astracloud.host. We reply within 30 days.
Our services are not directed at children under 16, and we do not knowingly collect their data.
If we change this policy we will update the date above, and we will notify account holders by email of any significant change. Questions about privacy can be sent to info@astracloud.host.