Privacy Policy

1. Introduction This Website Privacy Policy describes how Astra Intelligence S.A.S. (“Astra”, “we”, “us”, or “our”) collects,
uses, stores, and protects personal data obtained through its public website (the “Website”). Astra processes personal data
in accordance with applicable data protection laws and recognized international best practices.

2. Company Identification Legal entity name: Astra Intelligence S.A.S. Jurisdiction of incorporation: Republic of Colombia.
Registered office: Bogotá D.C., Colombia. Contact email: juanpabloporto@gmail.com.

3. Scope of This Policy This Privacy Policy applies exclusively to information collected through the Website. It does not apply
to Astra’s platform, applications, voice-based services, APIs, or integrations, which are governed by separate contractual
documents.

4. Categories of Personal Data Business contact information such as name, company, professional role, email address, and
phone number. Information voluntarily provided through forms, applications, or direct communications. Technical and
usage data, including IP address, browser type, device identifiers, and access logs.

5. Purposes of Processing Responding to inquiries and requests. Evaluating potential business relationships. Providing
business communications and updates. Ensuring security and operational integrity of the Website. Complying with legal and
regulatory obligations.

6. Legal Basis for Processing Processing is based on legitimate interest, consent where applicable, and pre-contractual
measures requested by the data subject.

7. Data Disclosure Astra does not sell personal data. Personal data may be shared with trusted service providers acting under
confidentiality obligations. Disclosure may occur when required by law or competent authorities.

8. International Transfers Personal data may be processed outside Colombia where Astra or its providers operate.
Appropriate safeguards are implemented to protect such data.

9. Data Retention Personal data is retained only for as long as necessary for the stated purposes or legal requirements.
Anonymized or aggregated data may be retained indefinitely.

10. Security Measures Astra applies reasonable technical and organizational measures to safeguard personal data.

11. Data Subject Rights Data subjects may request access, correction, update, or deletion of their personal data. Requests
may be submitted using the contact details above.

12. Third-Party Websites The Website may link to third-party sites. Astra is not responsible for their privacy practices.

13. Amendments Astra may update this Privacy Policy at any time by publishing a revised version on the Website.