Last updated 30 July 2026
1.1 Astute Graphics is committed to protecting customer data and operating the Services securely. This Statement summarises key controls.
2.1 Encryption in transit using HTTPS and at rest using server‑side encryption.
2.2 Access controls, role‑based permissions, and logging across production systems.
2.3 Separation of environments and principle of least privilege for staff access.
2.4 Vulnerability management and patching of supported systems.
2.5 Incident response processes proportionate to our size and risk profile.
2.6 Astute Graphics may perform reasonable operational, integrity, malware, compatibility, or security checks on selected third-party Scripts, and executable content prior to publication. Any review, testing, or security checking performed by Astute Graphics does not constitute certification, endorsement, approval, or a guarantee that content is free from defects, vulnerabilities, malware, incompatibilities, or other risks.
3.1 We do not routinely access, inspect, review, or read customer Assets, Scripts, Extensions, executable content, Packs, or Projects under normal circumstances. Disclosure may occur only under a lawful court order.
3.2 No separate service backups exist beyond the Astute Manager Pro Service storage.
3.3 Access to content may occur where reasonably necessary to investigate security incidents, abuse, fraud, copyright disputes, licensing issues, operational failures, legal obligations, or violations of applicable policies.
4.1 Our main providers include: Paddle (MoR), MailChimp, Capsule CRM, Google (email, analytics, reviews), Zendesk, Databricks, AWS (hosting), XERO (accounting).
5.1 We comply with UK data protection law and the UK GDPR as applicable.
5.2 Third-party Scripts, executable content, and other distributed content remain the responsibility of their respective authors and users.
5.3 Astute Graphics cannot guarantee the security, compatibility, reliability, suitability, availability, or performance of third-party Scripts, executable content, or linked third-party resources.