Privacy Policy

1. Information We Collect

ASTAN INC. ("we," "our," or "us") collects information you provide directly to us when using our cross-platform social media safety reporting services. This includes:

• Account information and authentication credentials
• Incident reports and safety concern details
• Supporting documentation (screenshots, evidence files)
• Contact information for communication purposes
• Usage data and audit logs for security and compliance

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our cross-platform reporting services
• Process and route incident reports to appropriate social media platforms
• Maintain comprehensive audit trails for compliance and security purposes
• Communicate with you about your reports and service updates
• Verify identity and prevent fraudulent reporting
• Analyze trends to improve platform safety measures

3. Information Sharing and Disclosure

We share your information only in the following circumstances:

• With Social Media Platforms: We share incident reports with relevant platforms for resolution, following strict authentication protocols
• With Your Consent: We may share information when you explicitly authorize us to do so
• Legal Requirements: We may disclose information when required by law, court order, or government request
• Service Providers: We may share data with trusted third-party service providers who assist in our operations under strict confidentiality agreements

We never sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Security and Protection

We implement enterprise-grade security measures to protect your information:

• End-to-end encryption for all data transmission
• Secure authentication protocols and multi-factor authentication
• Regular security audits and penetration testing
• Compliance with industry standards (SOC 2, ISO 27001)
• Secure cloud infrastructure with access controls
• Employee training on data protection and privacy

5. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations. Specifically:

• Incident reports: Retained for 7 years for audit and compliance purposes
• Account information: Retained while your account is active and for 2 years after closure
• Audit logs: Retained for 5 years for security and compliance monitoring

6. Your Privacy Rights

You have the following rights regarding your personal information:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Receive your data in a structured, machine-readable format
• Consent Withdrawal: Withdraw consent for data processing where applicable
• Objection: Object to certain types of data processing

To exercise these rights, please contact us using the information provided below.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for international transfers, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions by regulatory bodies
• Certification under recognized privacy frameworks

8. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

9. Contact Information

If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us:

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by:

• Posting the updated policy on this page
• Updating the "Last Updated" date
• Sending email notifications for significant changes
• Providing prominent notice on our website

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Last Updated: September 12, 2025