Last Updated: October 12, 2026
Welcome to Astrivo Store (referred to as “the Platform”, “we”, “us”, or “our”). We are committed to protecting the privacy and security of all our users. This Privacy Policy details how we handle information for two distinct user groups: Customers (buyers) and Vendors (merchants), alongside platform-wide data practices.
👥 Section 1: For Customers (Buyers)
1.1 Data Protection & Security
At Astrivo Store, we prioritize the security of your personal data. We implement industry-standard administrative, technical, and physical security measures to ensure your information remains secure, private, and protected against unauthorized access.
1.2 Data Collection & Transaction Scope
We collect information necessary to fulfill your orders and enhance your shopping experience, including your name, billing/shipping address, email address, phone number, and payment details.
• Platform Liability & Off-Platform Transactions: Astrivo Store only monitors, secures, and accepts responsibility for transactions processed through the standard, official payment methods integrated into the Platform checkout system. Astrivo Store holds absolutely no financial or legal liability for any order, monetary transaction, communications, or product exchanges conducted outside our official platform infrastructure, regardless of whether the merchant involved is a registered vendor on Astrivo. Any transactions taken off-platform are strictly at the customer’s own risk.
1.3 Strategic Use of Data for Research & Marketing
While your individual identity is kept secure, Astrivo Store reserves the right to share customer data with Astrivo’s internal marketing channels and analytical teams. This data is used for internal market research, consumer behavior trend analysis, and platform optimization. By using the Platform, you grant us permission to utilize your data to refine our product offerings, build lookalike marketing audiences, and deliver personalized promotions tailored to your shopping preferences.
1.4 Legal Action and Policy Enforcement
Your data privacy remains intact unless platform integrity is compromised. Astrivo Store explicitly reserves the right to monitor, retain, and disclose customer data to law enforcement, legal counsel, or regulatory authorities if we detect fraudulent activity, malicious behavior, or any actions that violate our platform Terms of Service. Your information may be used as evidence to take formal legal action against any user who acts against the well-being of the platform or its community.
🏢 Section 2: For Vendors (Merchants)
2.1 Private Operational Data
As a merchant on Astrivo Store, your core operational and registration data is treated with professional confidentiality. We keep your sensitive business registration documents, banking information, and exact raw individual transaction records private from public view and external third parties.
2.2 Payment Configuration, Holds, and Funds Management
To ensure seamless operations, vendors must strictly adhere to the following financial tracking and payout policies:
• Accurate Payment Details Requirement: Vendors are strictly required to provide and maintain an accurate, clear, and appropriate payment method profile within the Platform configuration panel. Astrivo Store accepts no responsibility or financial liability for lost, delayed, or misdirected funds resulting from faulty, inappropriate, outdated, or unavailable payout details provided by the vendor.
• Off-Platform Transaction Indemnification: The Platform strictly prohibits vendors from moving transactions off-system. Astrivo Store holds no responsibility for any product exchange, loss of revenue, or payment disputes arising from orders processed outside our standard platform checkout.
• Mandatory Security Holding Period: To protect all parties (customer, platform, and vendor) from transaction friction, Astrivo Store reserves the right to hold operational cash balances for a standard window of 7 to 15 days per transaction. This temporary hold acts as a buffer to seamlessly process potential customer returns, cancellations, or refund requests.
• Suspicion and Risk-Based Restrictions: The Platform reserves the absolute right to freeze, hold, or deny any withdrawal request initiated by a vendor if our compliance teams identify suspicious activity, fraudulent behavior, or policy violations. Once a review is fully resolved and settled by management, withdrawal requests may be reprocessed under specifically designated conditional terms.
2.3 Platform Rights over Vendor, Shop, and Selling Data
To maintain the health, security, and competitiveness of the marketplace, the Platform retains full proprietary rights to access, inspect, and utilize all Vendor data, storefront metrics, and aggregate selling statistics. By registering as a vendor, you agree that the Platform has the absolute right to use your store data for administrative oversight, market research, and optimization of the platform’s financial health and scalability.
⚙️ Section 3: Platform-Wide Technical & Media Interactions
3.1 Account Profiles, Comments, & Product Reviews
• Form Data: When visitors or users leave comments, contact messages, or product reviews on the site, we collect the data shown in the form, alongside the visitor’s IP address and browser user agent string to assist in automated spam detection.
• Gravatar Integration: An anonymized string created from your email address (a hash) may be provided to the Gravatar service to verify if you use it. The Gravatar privacy policy is available here: https://automattic.com/privacy/. Upon approval of your review or comment, your profile picture becomes publicly visible in the context of your post.
• Data Retention: If you leave a review or comment, the text and its metadata are retained indefinitely. This allows the system to recognize and approve any follow-up interactions automatically instead of holding them in a moderation queue.
3.2 Media Uploads
• Embedded Location Data: If you upload images to the website (such as product photos, store banners, or profile pictures), you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images published on the website.
3.3 Cookies & Authentication
• Form Cookies: If you leave a review, comment, or message on our site, you may opt-in to saving your name, email address, and website in cookies for your convenience. These cookies last for one year.
• Session Evaluation: If you visit our login page, we set a temporary cookie to determine if your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.
• Login Retention: When you log in, we establish several cookies to save your login information and screen choices. Login cookies last for two days, and screen options cookies last for a year. If you select “Remember Me”, your login persists for two weeks. Logging out completely removes these login cookies.
• System Tools: If a password reset is requested, your current IP address will be explicitly included in the reset email for security logging purposes.
3.4 Embedded Content from Other Websites
• Articles or product pages on this site may include embedded content (e.g., videos, images, maps, etc.). Embedded content from third-party websites behaves in the exact same way as if the visitor has visited the external website directly.
• These external platforms may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content, especially if you have an active account and are logged into that third-party website.
3.5 Global User Rights Over Data
• If you have a registered account on this site (as a buyer or vendor) or have left feedback, you can request to receive an exported file of the personal data we hold about you, including any data you have provided to us.
• You can also request that we erase any personal data we hold about you. This does not include any data we are legally or administratively obliged to keep for platform financial tracking, security metrics, legal compliance, or operational purposes.