Your data, in plain words.
Who holds it, why, who sees it, how long, and how to make us delete it. Last updated September 27, 2026.
Who is responsible
Pulsar (pulsar.travel, also pulsarassistance.com) is a brand of Asteroid LLC, 20900 NE 30th Avenue, Suite 410, Aventura, FL 33180, USA (the controller). Assistance and claims are run by US & UK Medical Abroad, LLC (MDabroad), same address, which processes medical data on Asteroid's behalf and, for the medical care itself, as a controller in its own right. Medical benefits are insured by Redbridge Insurance Company Ltd. (Barbados). Privacy questions: privacy@asteroidassistance.com.
What we collect and why
| When | What | Why |
|---|---|---|
| You get a quote | Destination, dates, traveler ages, country of residence, any code you enter, a session id | To price the trip and remember it for a few days if you come back |
| You buy | Lead traveler name and email; payment details go to Stripe, never to us | To issue and email the voucher; to contact you about your cover |
| You chat with Nova | What you type; Nova is an AI and says so | To answer you; conversations are kept to improve answers and for disputes |
| You register flights | Flight numbers and dates | To track your flights, send delay alerts and support eligible flight-delay benefits under your plan |
| You need help abroad | What happened, where you are, medical information given by you or the treating doctors | To arrange and pay for your care; handled by MDabroad's case team and shared only with the doctors and hospitals treating you |
| You claim airline compensation | Flight, booking reference, passenger names, contact details | Shared with AirHelp only after you say yes, to file the claim |
| You review us | Rating, text, first name and last initial, country, consent choices | To publish reviews you consented to; to improve the service |
Who else sees it
- Stripe (payments), Resend (email delivery), Vercel and Neon (hosting and database, United States).
- Redbridge Insurance Company Ltd. (Barbados) (the insurer of the medical benefits), for policy issue and claims.
- MDabroad and its network of hospitals, clinics, doctors and local assistance partners, for your care.
- A flight-delay benefit provider where your plan includes that benefit; AirHelp (flight compensation, only on your consent, once that service starts); Aetna's US network for hospital billing in the United States.
- Anthropic (the AI model behind Nova) processes chat text to generate answers and does not use it to train models.
- Authorities and courts when the law requires it. We never sell personal data.
How long
Quotes without a purchase: 90 days. Policies, claims and case files: as long as the law on insurance records requires (typically 5 to 10 years depending on the country). Chat transcripts: 12 months. Review invitations: until the campaign ends, then the email only, on a suppression list so we never write again. Server logs: 30 days.
Your rights
Under the GDPR (EU and UK residents), Brazil's LGPD, and US state laws such as the CCPA, you can ask to see, correct, export or delete your data, object to marketing, and withdraw consent (for example, for a published review). Email privacy@asteroidassistance.com from the address on your voucher. We answer within 30 days. EU and Brazilian residents may also complain to their data protection authority (ANPD in Brazil).
Cookies and analytics
Nothing below runs until you choose in the cookie banner; you can change your mind any time with Privacy choices at the bottom of every page. Analytics (only if you allow it): first-party measurement on our own servers and Google Analytics, to count visits, quotes and purchases. Marketing (only if you allow it): the Google Ads, Meta and TikTok pixels measure how our ads perform; when you buy, we send those platforms the purchase amount and a one-way hash of your email so they can match the sale to an ad. We use Google Consent Mode, so Google tags stay in a no-cookie mode until you accept. The quote form stores your last quote in your browser so it survives a refresh.
The Pulsar connector for AI assistants
Pulsar publishes an MCP server (/api/mcp) and a JSON API (/api/agent) so that AI assistants such as Claude or ChatGPT can price a trip, answer questions and open a payment page for you.
- There is no account and no login. The connector only receives what your assistant sends it: trip parameters (destination, dates, ages), questions, and, only when you ask it to start a purchase, the lead traveler's name and email.
- We store the request parameters and the name of the assistant that made them, so we can count purchases by channel and detect abuse. We do not receive or store your conversation with the assistant.
- Payment never goes through the assistant: it returns a Stripe link that you open and pay yourself.
- Questions sent to Nova through the connector are processed like chat messages above.
- The connector is rate limited and does not look up or change existing policies; that requires your voucher number and email in the site chat.
Children
Pulsar is bought by adults. Travelers under 18 are covered as dependants on an adult's voucher; we collect only their age.
Changes
We change this page when the facts change and date it at the top. Material changes are announced on the site.