PRIVACY POLICY
Last updated October 2, 2026
This Privacy Notice for DVNTND LLC ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:
- Visit our website at https://www.aestrabook.com or any website of ours that links to this Privacy Notice
- Download and use our mobile application (Aestra), or any other application of ours that links to this Privacy Notice
- Use Aestra. A scheduling platform with customizable booking page
- Engage with us in other related ways, including any marketing or events
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for making decisions about how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at support@aestrabook.com.
SUMMARY OF KEY POINTS
This summary provides key points from our Privacy Notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for.
What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with us and the Services, the choices you make, and the products and features you use. Learn more about personal information you disclose to us.
Do we process any sensitive personal information? Some of the information may be considered "special" or "sensitive" in certain jurisdictions, for example your racial or ethnic origins, sexual orientation, and religious beliefs. We do not process sensitive personal information.
Do we collect any information from third parties? Only attribution information: when you install our mobile app from a creator link or an advertisement, AppsFlyer and the advertising network tell us which link or advertisement led to the install. Learn more about the providers we work with.
How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Learn more about how we process your information.
In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Learn more about when and with whom we share your personal information.
How do we keep your information safe? We have adequate organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Learn more about how we keep your information safe.
What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Learn more about your privacy rights.
How do you exercise your rights? The easiest way to exercise your rights is by submitting a data subject access request, or by contacting us. Install attribution is controlled by your device settings instead; see Section 11. We will consider and act upon any request in accordance with applicable data protection laws.
Want to learn more about what we do with any information we collect? Review the Privacy Notice in full.
TABLE OF CONTENTS
1. WHAT INFORMATION DO WE COLLECT?
Personal information you disclose to us
In Short: We collect personal information that you provide to us.We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.
Personal Information Provided by You. The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:
- names
- phone numbers
- email addresses
- usernames
- passwords
- contact preferences
- contact or authentication data
- work location
Sensitive Information. We do not process sensitive information.
Payment Data. We may collect data necessary to process your payment if you choose to make purchases, such as your payment instrument number, and the security code associated with your payment instrument. All payment data is handled and stored by Stripe. You may find their privacy notice link(s) here: https://stripe.com/privacy.
Application Data. If you use our application(s), we also may collect the following information if you choose to provide us with access or permission:
- Geolocation Information. We may request access or permission to track location-based information from your mobile device, either continuously or while you are using our mobile application(s), to provide certain location-based services. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Access. We may request access or permission to certain features from your mobile device, including your mobile device's calendar, contacts, and other features. If you wish to change our access or permissions, you may do so in your device's settings.
- Mobile Device Data. We automatically collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and system configuration information, device and application identification numbers, browser type and version, hardware model Internet service provider and/or mobile carrier, and Internet Protocol (IP) address (or proxy server). If you are using our application(s), we may also collect information about the phone network associated with your mobile device, your mobile device's operating system or platform, the type of mobile device you use, your mobile device's unique device ID, and information about the features of our application(s) you accessed.
- Push Notifications. We may request to send you push notifications regarding your account or certain features of the application(s). If you wish to opt out from receiving these types of communications, you may turn them off in your device's settings.
This information is primarily needed to maintain the security and operation of our application(s), for troubleshooting, and for our internal analytics and reporting purposes.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information automatically collected
In Short: Some information — such as your Internet Protocol (IP) address and/or browser and device characteristics — is collected automatically when you visit our Services.We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Like many businesses, we also collect information through cookies and similar technologies.
The information we collect includes:
- Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings).
- Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
- Location Data. We collect location data such as information about your device's location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.
We use third-party providers to help us operate and improve the Services. PostHog provides product analytics and Sentry provides error and crash reporting. AppsFlyer provides install and campaign attribution for our mobile app: it receives your device's advertising identifier (on iOS, only if you allow tracking when the app asks) or an identifier for the app installation, together with the milestones described in Section 4, so that we can tell which creators and advertisements bring artists to Aestra. These providers process device, usage, and diagnostic information on our behalf, subject to their own privacy policies.
2. HOW DO WE PROCESS YOUR INFORMATION?
In Short: We process your information to provide, improve, and administer our Services, to communicate with you, for security and fraud prevention, and to comply with law.
We process your personal information for the purposes below, and only where we have a valid legal reason to do so:
- To create and manage your account, including signing you in and keeping your session secure.
- To provide the Services, including publishing your booking page, receiving booking requests, scheduling appointments, and storing the client records you add.
- To take payments. Deposits, fees, and subscription payments are processed by Stripe. We do not store card numbers or bank account details.
- To send messages that are part of the Services, such as booking confirmations, reminders, cancellation notices, and account or billing notices.
- To send push notifications about bookings and requests, where you have allowed them on your device.
- To keep the Services working and improve them, including diagnosing crashes and understanding which features are used.
- To protect the Services, prevent fraud and abuse, and enforce our Terms.
- To comply with legal obligations, including tax and accounting rules, and to establish or defend legal claims.
3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?
In Short: We process your information only where we have a valid legal reason to do so.
Our Services are offered to users in the United States. Where the law requires us to identify a legal basis for processing, we rely on the following:
- Performance of a contract, to provide the Services you signed up for and to take payment for them.
- Legitimate interests, to keep the Services secure, prevent fraud, understand how the Services are used, and improve them.
- Legal obligation, to keep records required by tax, accounting, and other laws, and to respond to lawful requests.
- Consent, where you have given it, for example to receive push notifications or optional marketing messages. You can withdraw your consent at any time.
In Short: We share information with service providers that run parts of the Services for us, and between an artist and their client as part of a booking. We do not sell your personal information.
We share personal information with the following categories of third parties, which process it on our behalf and under contract:
- Hosting and infrastructure: Vercel (website), Railway (application servers), and Supabase (database, sign-in, and file storage).
- Payments: Stripe, which processes deposits, fees, and subscription payments, and pays out to connected bank accounts.
- Email delivery: Resend, which sends messages such as confirmations, reminders, and billing notices.
- Push notifications: Expo, with Google Firebase Cloud Messaging on Android and the Apple Push Notification service on iOS.
- Product analytics and error monitoring: PostHog and Sentry, which help us understand how the Services are used and diagnose faults.
- Install attribution and advertising measurement: AppsFlyer, which links a mobile app install and a small set of milestones (account created, setup completed, subscription started, payments set up, first booking) to the creator link or advertisement that led to it, and passes those milestones to the advertising network that showed the advertisement (for example Meta or TikTok) so that network can measure and improve its campaigns.
Bookings also involve sharing between users of the Services. When a client books with an artist, we share the booking details the client provided with that artist, and we share the artist's business details with the client. Artists choose when their full address is released to a client.
We may also disclose information where the law requires it, where it is necessary to protect rights and safety, or in connection with a merger, financing, sale of assets, or other business transfer.
We do not sell your personal information. Passing app install and milestone information to an advertising network through AppsFlyer, as described above, may count as "sharing" for cross-context behavioral advertising, or as targeted advertising, under some state laws. On iOS it happens only if you allow tracking when the app asks, and you can change that at any time in your device Settings under Privacy & Security, then Tracking; turning tracking off reaches our servers the next time you open the app. Without tracking permission, advertising networks receive only Apple's anonymous SKAdNetwork install reports, which do not identify you or your device. On Android you can reset or delete your device's advertising ID in your device Settings, which stops that identifier linking your app activity to advertisements.
In Short: We use cookies and similar technologies on our website. Our mobile app does not use cookies, but it does store data on your device.
Our website uses cookies and similar technologies to keep the site working, to measure performance, and to diagnose errors. You can read more about them, and about your choices, in our Cookie Policy.
Our mobile app does not use cookies. It stores your sign-in session on your device so that you stay signed in, and it uses device identifiers to deliver push notifications, to understand how the app is used, and to attribute app installs to the creator link or advertisement that led to them. On iOS the advertising identifier is used only if you allow tracking when the app asks. See Section 4 for who receives this information.
6. HOW LONG DO WE KEEP YOUR INFORMATION?
In Short: We keep your information for as long as your account is open. After you delete it we keep only what the law requires, and any images you uploaded until you ask us to remove them.
We keep the personal information in your account for as long as your account exists. When you delete your account, we remove your profile, booking page, services, availability, your client list, client notes, and your booking history, including the payment records attached to those bookings. A client's own contact record can remain, because clients exist independently of any one artist.
Images you uploaded remain in our media storage after deletion until you ask us to remove them, and we delete them on request. Stripe keeps its own records of the payments it processed, under its own policy, to meet its own legal obligations.
Analytics and error monitoring data is held for the limited retention periods set with those providers.
Section 14 explains how to review, update, or delete your information.
7. HOW DO WE KEEP YOUR INFORMATION SAFE?
In Short: We use organizational and technical measures to protect your personal information, but no system can be completely secure.
The measures we use include:
- Encryption in transit, so traffic between your device and our servers travels over HTTPS.
- Hosting with providers that encrypt stored data at rest.
- Access controls, so that a request can only reach the records belonging to the signed-in account.
- Sign-in passwords stored only as salted hashes by our authentication provider, never in readable form.
- Card and bank details handled by Stripe and never stored on our systems.
- Restricted access to production systems, limited to the people who need it.
However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.
8. DO WE COLLECT INFORMATION FROM MINORS?
In Short: We do not knowingly collect data from or market to children under 18 years of age.
The Services are business tools intended for people aged 18 or over. We do not knowingly collect personal information from anyone under 18, and we do not market to them.
If you believe we hold information about someone under 18, email support@aestrabook.com and we will delete it.
9. WHAT ARE YOUR PRIVACY RIGHTS?
In Short: You can review, update, or delete your information at any time.
Whatever your location, you can exercise the following with us:
- Access and portability. Email us from the address on your account and we will send a copy of your bookings, clients, and services within 7 days.
- Correction. Update your details in the app under Profile, then Edit Profile.
- Deletion. Delete your account in the app, or ask us by email. Section 14 has the steps.
- Withdrawing consent. Turn off push notifications in your device settings, and unsubscribe from optional marketing emails using the link in those messages. Messages about your bookings, account, and billing continue, because they are part of the Services.
- Install attribution. On iOS, turn off tracking for Aestra in Settings under Privacy & Security, then Tracking. On Android, delete or reset your device's advertising ID in Settings. Section 4 explains what each does.
- Complaints. Contact us first. You may also contact your state attorney general.
We respond to requests within the period the applicable law allows. We may need to verify your identity, normally by confirming the email address on your account.
10. CONTROLS FOR DO-NOT-TRACK FEATURES
In Short: We do not currently respond to Do-Not-Track signals.
Most web browsers and some mobile operating systems include a Do-Not-Track feature you can turn on to signal your privacy preference. No uniform technology standard for recognizing and implementing those signals has been finalized. We therefore do not currently respond to them. If a standard is adopted that we must follow, we will update this notice.
11. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?
In Short: Depending on your state, you may have the right to access, correct, delete, or obtain a copy of your personal information.
State privacy laws, including those in California, Colorado, Connecticut, Utah, Virginia, and Texas, give residents rights over their personal information. Depending on where you live, these can include the right to know whether we process your information and to access it, the right to correct inaccuracies, the right to request deletion, the right to obtain a copy, and the right to opt out of the sale of personal information, targeted advertising, and certain profiling.
We do not sell personal information, and we do not carry out profiling that produces legal or similarly significant effects. The only processing that some state laws may treat as "sharing" for cross-context behavioral advertising, or as targeted advertising, is the install attribution described in Section 4. Your device settings control it, and take effect without contacting us:
- iOS: in Settings, open Privacy & Security, then Tracking, and turn tracking off for Aestra. Our servers learn of the change the next time you open the app. From then on, advertising networks receive only Apple's anonymous SKAdNetwork install reports, so this stops the sharing described in Section 4.
- Android: in Settings, delete or reset your device's advertising ID. This stops that identifier linking your app activity to advertisements. It does not stop all sharing: the advertising network that showed you an advertisement may still be told, through the app store's install referrer, that your install and the milestones described in Section 4 came from that advertisement.
To exercise your other rights (to know, access, correct, delete, or obtain a copy of your information), email support@aestrabook.com from the address on your account, or follow the steps in section 14. If you email us asking to opt out of install attribution, we will reply with the device steps above. We will not discriminate against you for exercising your rights. If we decline your request, you may appeal by replying to our decision and we will respond in writing.
12. DO WE MAKE UPDATES TO THIS NOTICE?
In Short: Yes, we update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be marked by a revised Last updated date at the top of this page and takes effect as soon as it is published. If we make material changes, we will tell you by email or by a notice in the app. We encourage you to review this notice regularly.
13. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?
In Short: You can reach us by email, post, or phone.
If you have questions or comments about this notice, contact us at:
Aestra (DVNTND LLC)
1603 Orrington Ave, Unit628
Evanston, IL 60201
United States
Email: support@aestrabook.com
Phone: (+1) 7733577474
1603 Orrington Ave, Unit628
Evanston, IL 60201
United States
Email: support@aestrabook.com
Phone: (+1) 7733577474
14. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?
In Short: You can review and update your information in the app, and you can ask us to delete your account and its data at any time.
Review or update your information. Sign in to the Aestra app and open the Profile tab. From there you can review and change your profile and business details, your services, your availability, and your policies.
Request a copy of your data. Email support@aestrabook.com from the email address on your account and we will send a copy of your bookings, clients, and services within 7 days.
Delete your account and data. In the app, open Profile, then Edit Profile, then Manage your account, and tap Delete Account. Your account and its data are removed straight away, and if a step cannot be completed automatically we finish it by hand within 7 days. You can also email support@aestrabook.com with the subject "Delete my account" from the address on your account, and we will complete the request within 7 days. The full steps are on our support page.
What we keep after deletion. We keep records of completed bookings and payments for as long as tax, accounting, and fraud prevention law requires. Stripe keeps its own records of the payments it processed, under its own privacy policy.