Skip to content

Privacy Policy

Last updated October 16, 2026

Asto (“Asto”, “we”, “us”) is operated by Nerd Systems and runs the products sold at goasto.com: Asto Clock, a time clock for workers; Asto Pro, the AI chat widget for a business’s website, with its iPhone app for the business owner; Asto Chat, a personal AI companion (iPhone app, web browser at goasto.com/chat/app, and Telegram); Asto Booking; and Asto Shop, an online store for businesses and their buyers. Asto also operates the Asto app on the Meta (Instagram) platform, used by Asto itself (@goastosaas) and by the businesses and venues that use Asto Pro. This policy explains what data each product collects, why, and who sees it.

Summary

  • We collect data only to run the app you are using (“App Functionality”). We do not use any of it for tracking, we do not use it for advertising, and we never sell it.
  • The data we collect is linked to your account or to the business you belong to. We do not track you across other companies’ apps and websites.
  • You can ask us to delete your account and data at any time (see “Deleting your account and data” below).

Asto Clock (iPhone app com.goasto.clock)

Asto Clock is used by workers whose employer uses Asto to record hours. The employer (the account owner) controls the account and can see the data below about their workers.

  • Name and email address: to sign you in (by an emailed code) and to show your employer who punched.
  • User ID: an account identifier that links your punches and readings to you.
  • Device ID: a random identifier for the app install on your phone, used for the one-phone lock, so a punch can only come from the phone your employer approved for you. The employer can approve or revoke a phone.
  • Precise location: the app asks for location “While Using the App” only. It takes a single fix when you tap Clock In or Clock Out, and when a manager sets or checks a work site’s location from the phone. A single fix may also be taken when you fill in a reading form and your employer’s location consent has been given, and, only if location is already allowed, once when you sign in so the sign-in log shows roughly where it happened. The app never tracks you in the background, has no background location mode, and does not monitor you between punches. If you decline location, your punch still goes through without it.
  • Photos: the camera is used only when you add a photo to a reading or scan a paper form. Those photos are stored with the reading or form.
  • Notes and other content you type: punch notes, readings and form answers.

This data is used only to run Asto Clock: record hours, show your employer where and when you punched, and keep readings and forms. Signing out removes any punches waiting on the phone that have not yet been sent.

Asto Chat (iPhone app com.goasto.chat, and on the web)

Asto Chat is a personal agent. We collect your email address (for sign-in by emailed code), the chats and memory you build with it (what you tell it about yourself and the people you mention, so it can remember you across conversations, offer honest counsel and start reminders and check-ins on its own), and a user ID. If you choose to use your own Anthropic API key, that key is stored on our private servers and used only to send your requests to Anthropic. Your Telegram ID is collected only if you use Asto Chat on Telegram. The app asks permission before using the microphone and on-device speech recognition (so you can talk instead of type) and before using the camera or photos you choose to send; photos, videos and voice you send are used only to answer you. Asto Chat on the web (goasto.com/chat/app) is the same account and the same conversation as the app: you sign in with an emailed link or code, and a cookie that only goasto.com can read keeps you signed in for 30 days from your last visit, or until you sign out, which ends that sign-in on our servers.

Asto Pro (iPhone app com.goasto.pro)

The Asto Pro iPhone app is for the owner of a business that uses Asto. It shows the chats, questions, bookings and shop orders Asto handled for the business, and lets the owner answer them, manage bookings, run the shop and take payments in person.

  • Name, email address and phone number: the owner signs in with an emailed code (there is no password). We hold the owner’s email, and the name and phone number on the business’s account, to sign them in and reach them.
  • User ID: an account identifier that links the owner to their business.
  • Device ID: a random identifier for the app install, sent when the owner signs in, so each phone’s sign-in can be told apart.
  • Shop photos: the camera and photo library are used only when the owner adds photos of the items they list in the shop, or the shop’s logo. Those photos are stored with the shop and shown on its store pages.
  • Customer details: the app shows the owner what the business’s own customers gave it: website chat messages and any name, email or phone a visitor chose to give; the name, email, phone and time of each booking; and shop buyers’ names, shipping addresses, email addresses and orders. They belong to the business and are shown only to its owner.
  • Location, only for Tap to Pay on iPhone: when the owner takes an in-person payment with Tap to Pay on iPhone, the app asks for location “While Using the App”, because Stripe, which processes the payment, requires the iPhone’s location to keep payments safe and stop fraud. Stripe reads it when the payment is taken; Asto does not store it. The app never uses location for anything else, and never in the background.
  • Notes and other content the owner writes: answers to customers’ questions, item descriptions, and shop and booking settings.
  • Push notifications (optional): a device push token, so Apple can deliver an alert when someone books, chats or asks something Asto cannot answer.

Customer chats are answered by AI. When a visitor messages a business’s website chat (or its Instagram or Facebook account, once connected), the reply is written by an AI model from our provider Anthropic, in the business’s voice and from what the business has told Asto, not by a person. Asto Pro reads the business’s own website (hours, services, prices, tone) to answer as that business. The content of the message and any contact details a visitor gives (name, phone, email) are processed to write the reply, capture the lead or book the appointment. A question the AI cannot answer goes to the owner in Asto Pro, and the owner’s answer is used from then on. AI replies can be wrong, so customers should check anything important with the business.

What Asto Chat accesses

On Telegram, Asto Chat processes what you tell it — about yourself and the people you mention — so it can remember you across conversations, offer honest counsel, and start reminders and check-ins on its own.

Asto Booking and Asto Shop

For Asto Booking, we hold the name, email, phone and appointment details a customer gives when booking, so the business can run the appointment and send confirmations. For Asto Shop, a buyer gives us their name, shipping address, email address and order details (items, amounts, status) so the order can be paid for, packed, shipped and followed up. Card details are entered with Stripe and never reach or stay on our servers. The data belongs to the business that is selling and is used only to complete the booking or order.

Google user data (Asto Booking and Google Calendar)

Asto Booking connects to Google Calendar only when a business owner, or a staff member who takes bookings, chooses to connect their own Google account through Google’s sign-in and permission screen. Asto Booking works fully without it.

  • What we access (scopes openid, email, calendar.events and calendar.freebusy): the Google account’s email address, to show which account is connected; the times the connected calendars are busy; and the ability to create, move and delete the appointment events Asto Booking writes.
  • What we do with it: every booking, change and cancellation is written to the connected calendar, and times you are busy there are blocked on the booking page, the change and cancel link and the Asto Pro assistant’s booking, so a customer cannot book them. We change only the appointment events Asto Booking itself created. We do not edit or delete any other event in your calendar.
  • What we keep: the busy start and end times of the days that can be booked, and the access token Google gives us. The token is stored encrypted in the business’s own database and never leaves our private servers. We do not keep the titles, attendees or details of your other events.
  • Limits: we use Google user data only to provide this calendar sync. We do not use it for advertising, we do not sell it, we do not share it with anyone else, and we do not use it to train AI models. Asto’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
  • Disconnecting: disconnect in Asto Booking at any time, or remove Asto’s access in your Google Account (Security → Third-party access). Disconnecting stops the sync, revokes our access at Google and deletes the stored token and busy times. Appointments already on your calendar stay there; they are yours. To have anything else deleted, see “Deleting your account and data” below.

What Asto Chat accesses

Asto Chat is a personal agent used on Telegram. It processes what you tell it — about yourself and the people you mention — so it can remember you across conversations, offer honest counsel, and start reminders and check-ins on its own.

Instagram data (the Asto app on Meta)

The Asto app connects to an Instagram professional account only when that account’s owner connects it through Instagram’s own login and permission screen, using the official Instagram API. Two kinds of accounts are connected: Asto’s own account, @goastosaas, which we own and operate, and the Instagram accounts of businesses and venues that are our customers, connected by the business itself. Every connected account is answered the same way: by the Asto Pro website assistant of the business the account belongs to (for @goastosaas, Asto’s own), which can also show the account’s posts on that business’s website.

  • Profile and posts (instagram_business_basic): the connected account’s username, ID, profile picture and its own posts (images, videos, captions, links, dates). Used to show a venue’s recent posts on that venue’s website, to give Asto Pro the context of the post a comment was left on.
  • Comments (instagram_business_manage_comments): comments left on the connected account’s posts and the commenter’s Instagram username and ID. Used so Asto Pro can read the comments on a connected account’s posts and reply to them publicly, in that business’s own voice.
  • Direct messages (instagram_business_manage_messages): messages sent to the connected account and the sender’s Instagram username and ID. Used so Asto Pro can read the direct messages sent to a connected account and answer them in the same thread, in that business’s own voice. A question Asto Pro cannot answer is handed to the business owner, who can see every comment and message conversation in Asto Pro.

We use Instagram data only for these purposes. We do not use it for advertising, we do not sell it, and we do not combine it with data from other sources to build profiles of people. Message and comment content is sent to our AI model provider, Anthropic, only to write the reply, under the same terms described below. The account’s access token and the data above are kept on private servers we control, never in a browser or an app. A connected business’s comments, messages and token are used only to reply for that business and are never shown to other businesses. A business can disconnect at any time in Instagram (Settings → Apps and websites); we then stop reading its account and delete its stored data on request.

How we use it

  • To run the product you are using: sign you in, record punches and readings, let Asto Pro answer in the business owner’s voice, capture leads, book appointments, process orders and ship them, and let Asto Chat remember you and the people in your life across conversations.
  • To send the business owner summaries of what Asto Pro handled.
  • To show a connected venue’s Instagram posts on its website, and to let Asto Pro reply to the comments and direct messages a connected business receives on Instagram.

We do not use your data for tracking, we do not use it for advertising or marketing, and we do not sell it. We do not use it to build profiles of people or share it with data brokers.

Who we share it with

We share data only with the service providers needed to run the products, and only for that purpose:

  • Anthropic: message and chat content, to generate AI replies. It is processed to produce the reply and is not used by Anthropic to train its models.
  • Stripe: payment details and order amounts, to take payments; for Tap to Pay on iPhone in Asto Pro, also the iPhone’s location at the moment of the payment, which Stripe requires.
  • ShipStation and shipping carriers: the buyer’s name and address, to buy and print shipping labels and deliver orders.
  • Apple: a device push token and notification content, to deliver push notifications.
  • Telegram and Meta (Instagram, Facebook): only when you connect them; messages travel through them as you would expect.
  • Cloudflare, Oracle Cloud and Amazon Web Services: hosting, networking and storage of our servers and backups.
  • The business or employer you deal with: for example, an employer sees its workers’ punches, locations, photos and readings; a shop sees its buyers’ orders.

We give data to a government or other public authority only when the law requires it, and we handle every such request as set out in our Government Requests for User Data policy.

Storage, retention & security

Data is stored on private servers we control (hosted at Oracle Cloud, with Cloudflare and AWS in support) and is sent over encrypted connections. Access tokens and API keys are kept on the server, never in a browser or shared with other customers, and each business’s data is kept separate from other businesses’ data. Automated safeguards are applied to avoid exposing private information in a reply. No system is perfectly secure, but we limit access to those who need it to run the service.

We keep your data for as long as your account is active, or the business you belong to keeps its account, and only as long as needed to run the product. Order and payment records may be kept longer where the law or accounting requires: when an Asto Pro account is deleted, its store’s finished orders are kept for 7 years for tax records, then deleted. When you ask us to delete your data, we delete it within 30 days. An Asto Clock phone sign-in lasts 30 days from last use and can be revoked by the employer at any time.

Deleting your account and data

In Asto Clock, you can delete your account yourself at any time: in the iPhone app, Account (the person icon at the top right of the Clock tab) → Delete my account; in the web app at goasto.com, Account → Delete my account. It takes effect at once: we delete your email, your PIN, your phones, the places on your sign-in log, and every sign-in and session of yours, and email you a confirmation. Each business you worked for keeps your name with your punches, readings and time off, because an employer must keep time and payroll records by law (the US Fair Labor Standards Act, 29 CFR 516). If you are the only owner of a business, make another person an owner on the Team tab first. In Asto Pro, Delete my account is at the end of Booking settings and Shop settings (and behind the person icon on the Booking tab while Booking is off). First we email you a full copy of each business only you use (its store items and photos, Booking setup and history, Asto Clock team and hours, and orders), with a download link that works for 1 year; if you come back to Asto, you can load that copy into a new account on goasto.com. If the copy can’t be made, nothing is deleted and we tell you so. Then it takes effect at once: we delete your account and, for each business only you use, its bookings, its shop (items, photos, and orders that were never paid), its website assistant with its chats and answers, and its Asto Clock team, and email you a confirmation. Finished orders (anything paid, shipped, picked up or refunded) are kept for 7 years for tax records, tied to no login, then deleted; punches stay as payroll records, as above. The same applies when you use Delete Booking for good on goasto.com. Money already paid to you stays in your own Stripe account, which we do not close. If other people work in your business, make one of them an owner first. In Asto Chat, Settings → Delete my account deletes your agent, its memory, its conversation history and every backup copy, and cancels your billing; it takes a few minutes and we email you when it is done. For our other apps, or to have everything else deleted, you can ask us to delete your account and all data associated with it at any time: email [email protected] from the address you signed in with (or give the email or Telegram name you used), and we will delete your account and data within 30 days and confirm by email. A business owner can also use Settings → Export my data in the Asto Pro app to download their data first. In Asto Clock, Account → Sign out removes what is stored on your phone. Details and Instagram-specific steps: Data deletion.

Location

Asto Clock uses location only while the app is open, at the moments described above (clock-in, clock-out, work-site setup and checks, and, with consent, readings), to show your employer where a punch happened, and never in the background. Asto Pro asks for location only to take a Tap to Pay on iPhone payment, because Stripe requires it; Stripe reads it when the payment is taken and Asto does not store it. No other Asto app uses location. You can turn location off at any time in iOS Settings → Privacy & Security → Location Services → Asto Clock or Asto Pro (Asto Pro then cannot take Tap to Pay payments). Camera, microphone and photo access can be turned off in the same way.

Children

Our products are not directed at children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has given us data, email us and we will delete it.

Changes

We may update this policy; material changes will be reflected here with a new “last updated” date, and we will tell account holders by email or in the app when a change is significant.

Contact

Questions about this policy or your data: [email protected].