01 Who we are
Astra is a product of Human Logic Software LLC ("Human Logic", "we", "us", or "our"), an education technology company that has built and operated learning platforms since 2003. Astra is a cloud-based, multi-tenant software-as-a-service (SaaS) suite that institutions subscribe to and connect to their Moodle or Totara environments. It brings together AI quiz generation, AI grading, the Iksha learning-analytics engine, and AI Assist on a shared engine, Astra Core.
This policy applies to the Astra SaaS service, to the Astra marketing website at astra.human-logic.com, and to enquiries you send us. It does not cover third-party websites or platforms we link to or integrate with, which maintain their own privacy practices.
02 Our role: controller and processor
Our responsibilities depend on the context in which personal information is handled:
- As a controller — for information you give us directly through our website, such as a demo request or a contact form, Human Logic decides why and how that information is used.
- As a processor — when Astra runs inside an institution's Moodle or Totara environment, the institution is the controller of its learners' and educators' data. Human Logic processes that data only on the institution's documented instructions and under the agreement in place with that institution.
If you are a learner or educator and have a question about how your institution uses Astra, please contact your institution directly; they determine how their environment is configured.
03 Information we collect
Enquiry information
When you request a demo, ask about a private offer, or otherwise contact us, we collect the details you choose to share — typically your name, work email, organisation, role, country, and the content of your message.
Account and subscription information
When an institution subscribes to Astra, we process the information needed to set up and administer the subscription — for example the names, work email addresses, and roles of the administrators and contacts who manage the service on the institution's behalf, together with subscription and tenant configuration details.
Customer Data processed in the service
To deliver Astra's features, the service processes data held within an institution's connected Moodle or Totara environment — for example course content used to generate assessments, learner responses submitted for grading, and activity data used to produce analytics ("Customer Data"). That environment remains the system of record for Customer Data; Astra processes it to deliver its features rather than maintaining a separate store of it. Processing is isolated per institution, and Human Logic acts on the institution's behalf and under its control.
Service and technical data
We process limited operational data — such as logs needed to run, secure, troubleshoot, and improve the service. Our marketing website itself uses only the essential technical data needed to function and stay secure; we do not use tracking or advertising cookies. See Cookies below.
04 How we use information
- To respond to your enquiries and arrange demonstrations or private offers.
- To provide, operate, maintain, and improve the Astra services for the institutions that license them.
- To keep our website and services secure and to detect and prevent misuse.
- To meet our legal and contractual obligations.
We do not sell personal information, and we do not use the personal information we hold to serve advertising.
05 How Astra handles AI
Astra is designed so that personally identifying student information is not sent to the underlying AI model. Protections are enforced in the architecture, not left to policy alone.
Astra's AI features are built to keep learner identity out of the model. In practice this means:
- Personally identifying student information is withheld or redacted before content is sent to the AI model.
- Analytics queries that feed Iksha operate on a read-only basis against institutional data.
- Astra is designed to keep a human in the loop — for example, educators review and confirm AI-assisted grading rather than it being applied autonomously.
The specific data flows for a given deployment are set out in the agreement with each institution.
06 Legal bases
Where data-protection law such as the GDPR applies, we rely on one or more of the following bases: your consent (for example, when you submit a contact form); our legitimate interests in operating and promoting our services; the performance of a contract; and compliance with legal obligations. Where we process data on behalf of an institution, that institution is responsible for the legal basis for the underlying processing.
08 How we protect information
We apply technical and organisational measures appropriate to the sensitivity of the data we handle, including:
- Encryption of data in transit and at rest.
- Role-based access controls, so people can reach only the data their role permits.
- Network, application, and operational safeguards intended to prevent unauthorised access, alteration, or disclosure.
No system can be guaranteed to be completely secure, but we work continuously to protect the information entrusted to us and to limit what is collected to what is needed.
09 Data retention
Astra's products run as plugins within an institution's own Moodle or Totara environment, which remains the system of record for all learning and Customer Data. Astra processes that data to deliver its features but does not maintain a separate store of it — data retention of Customer Data is not part of the Astra offering and is governed entirely by the institution's own platform and policies.
The limited information we do hold — the enquiry information you send us, and the account and subscription details needed to administer the service — is kept only for as long as needed to respond to you, provide the subscription, and meet our legal obligations.
10 International transfers
Student, course, and other identifiable Customer Data is not transferred internationally by Astra — it remains within the institution's own Moodle or Totara environment. The only data that may be processed outside the institution's region is the limited, non-identifying content passed to the AI model to perform a requested task, from which personally identifying student information has been withheld or redacted before it is sent (see How Astra handles AI). Where such processing occurs, we apply appropriate safeguards consistent with applicable data-protection law.
11 Your rights
Depending on your location and applicable law, you may have the right to access, correct, delete, or restrict the use of your personal information, to object to certain processing, to data portability, and to withdraw consent where we rely on it. To exercise any of these rights in relation to information we hold as a controller, contact us using the details below.
If your data is processed by Astra on behalf of your institution, please direct your request to that institution as the controller; we will support them in responding.
12 Higher-education learners
Astra is provided to higher-education and professional institutions for use with their students and learners, who are adults. The service is intended for higher education and is not directed to children, and we do not knowingly collect personal information directly from children. Where Astra processes information about an institution's learners, it does so on behalf of, and under the instructions of, the institution acting as controller, consistent with frameworks such as the GDPR. Institutions remain responsible for the lawful basis for using Astra with their learners and for obtaining any consents required.
14 Changes to this policy
We may update this policy from time to time to reflect changes in our practices or in the law. When we do, we will revise the "Last updated" date above, and significant changes will be made clear on this page.
15 Contact us
If you have questions about this policy or about how your personal information is handled, please contact us:
Human Logic Software LLC
Office 314, Zeinal Mohebi Plaza (Opp. BurJuman)
PO Box 48294, Dubai, United Arab Emirates
Email: info@human-logic.com