AstrolinksSecurity, in plain words
What Astrolinks keeps, where, what can leave your computer and when, and how to tell us about a problem.
Where your data lives
Your activity log, notes, tasks, clients and reports are kept in files on your own computer. There is no Astrolinks account that holds them, and no copy on our servers. We never receive your log.
The log is plain files in the app’s data folder, which you can open from Settings. Your Anthropic key, your license and your clients’ Slack links are encrypted with your computer’s own keychain. Days are deleted after 14 days by default; you choose from 1 to 365.
What never gets recorded
- Keystrokes
- Screenshots or screen video
- Your clipboard
- Sound or camera
What can leave your computer, and when
| What | Where to | When |
|---|---|---|
| A summary of your day, masked | Anthropic’s Claude (through Astrolinks AI, or straight there with your own key) | Only when you press Write with AI or send a chat message, after you said yes once |
| A report | That client’s Slack | Only when you press Send to Slack and confirm |
| A report draft | Your own email app | Only when you press Email draft. You send it. |
| A report, and hours if you include them | Your company’s Team inbox | Only when you send it there |
| That a team task is done, and your note | Your company’s Team inbox | Only when you mark a task from your manager done |
| Your license key, to check your plan | Our license service | When you save it, open Plan, and at most once a day. Never your log or reports. |
| An AI answer you report | Your own email app, to us | Only when you press Report an AI answer. You send it. |
Clients marked Private never go to AI. The app has no analytics, crash reporting or ads, and does not check for updates by itself. While you are in a team, the app asks the Team inbox for your tasks every 15 minutes; that request says who you are in the team and nothing about your day.
Astrolinks AI
With Pro, the trial and Free’s 5 AI reports a month, requests pass through our small AI service, which checks your license and passes the request to Anthropic. It does not store or log what you send or what Claude writes. With your own key, the app talks to Anthropic directly and we are not involved.
The Team inbox
Manager passwords need 12 characters or more, and common ones are turned away. They are stored only as strong one-way hashes. Two-step sign-in works with any authenticator app and comes with ten recovery codes; Business can require it for every manager. Managers see every browser signed in to their account and can sign any of them out, or all at once. An activity log keeps sign-ins, invites, tasks and deletions for 180 days, never a report’s text.
This website
No analytics, no tracking, no cookies of our own. Fonts are served from this site. Only the pricing page loads Paddle’s script, to show prices and open checkout, and only once checkout is set up.
What we don’t claim
We have no security certifications or outside audits, and we won’t show badges we haven’t earned. If that changes, this page will say so, with dates.
Report a security problem
If you think you have found a security problem in the app, the Team service or this website, write to info@astrolinks.org. Please tell us what you found and how to see it, and give us a fair chance to fix it before telling others. We will reply, keep you posted, and thank you. Our security.txt has the same details.