Privacy Notice

AstroPlum is a project operated by Dimitri Adamakos, an individual based in Greece, who is responsible for the personal information described here. Contact him at founder@astroplum.world for privacy questions or requests.

Information and purposes

Our Contact and Private Alpha forms collect your name, email, organization and message or application answers, plus professional details and an optional phone number. Applications may describe your organization's work, needs, participants and timing. Required information lets us respond or assess fit; optional fields may be left blank. Please do not include passwords, sensitive personal information or unnecessary information about others.

We use your information to handle your enquiry, review your application and conduct the relationship you request. We rely on legitimate interests in responding to professional enquiries, assessing fit and protecting the service from abuse. Where you personally request steps toward a contract with us, we rely on that basis for the relevant processing. The Founder reviews applications; we do not make automated admission decisions.

Providers and access

The Founder has access to submissions. Vercel hosts the website and processes form requests and operational metadata. Upstash supports abuse prevention using pseudonymous network identifiers, request identifiers and timestamps, without storing your message or email in the limiter. Namecheap Private Email delivers and stores correspondence. Providers may also process network and request metadata, including IP addresses, for operation, support and security.

Some of our service providers may process personal information outside the European Economic Area, including in the United States. Where required by applicable data-protection law, we rely on appropriate safeguards for those transfers, such as the European Commission’s Standard Contractual Clauses or another recognized transfer mechanism. Our providers’ data-processing terms describe the safeguards they use. You may contact us at founder@astroplum.world if you would like more information about the safeguards relevant to your information.

Retention

We retain Contact and Private Alpha correspondence for 180 days after the last meaningful interaction or closure. Ongoing relationships move to their appropriate later retention regime rather than being deleted mid-relationship.

We retain DMARC aggregate reports for 30 days, raw incident/security extracts for 30 days after closure, minimal incident/breach accountability records for 12 months after closure where required for accountability, and minimal privacy-request records for 12 months after request closure.

A documented legal/dispute hold can extend retention only for the affected records and necessary duration. Our abuse-control data uses short rolling windows and expiry; repeated activity can refresh expiry. Provider backups, security logs and other residual copies follow separate provider-controlled retention. Deletion from our live records does not mean immediate deletion from every provider system.

Your privacy rights

You can contact us at founder@astroplum.world to ask about the personal information we hold about you, or to request access, correction, deletion or restriction. In some circumstances, you may also have the right to receive your information or object to how we use it.

We’ll respond without undue delay and, where the GDPR applies, no later than one month after receiving your request. If an unusually complex request needs more time, we’ll let you know.

If you have any concern about how we handle your information, please contact us and we’ll try to resolve it. You also have the right to raise a concern with the Hellenic Data Protection Authority or another competent supervisory authority.