Privacy Policy
Last updated: 2025-12-17
CelestialNow (“we”, “us”, “our”) operates the website and marketplace available at www.celestialnow.com (“Service”). This policy explains what we collect, why, and how you can exercise your rights.
Who is the controller?
CelestialNow Ltd (replace with your legal entity and address). Contact: support@celestialnow.com
Data we collect
- Account: name, email, password hash (never the raw password).
- Profile & Listings: public profile, items listed, watchlist, transactions.
- Payments: processed by Stripe; we receive tokens/IDs and status, not full card numbers.
- Communications: messages you send us, email preferences.
- Usage: device/browser, pages, referrers, IP-derived region, logs for security and reliability.
- Cookies: essential cookies for auth; optional analytics if enabled.
Why we use your data
- Provide, secure, and improve the Service.
- Process orders, payments, payouts, and customer support.
- Prevent fraud and enforce our Terms.
- Send transactional emails and important notices.
- Analytics and product improvement (aggregate/anonymous where possible).
Legal bases
- Contract — to deliver the Service you request.
- Legitimate interests — to secure and improve the Service.
- Consent — for optional cookies/analytics and marketing where used.
- Legal obligation — to comply with law and enforce our Terms.
Sharing
We share data with providers acting on our behalf:
- Payments: Stripe.
- Email: Resend.
- Hosting: Vercel and related infrastructure.
- Monitoring/analytics: only if enabled.
We do not sell personal data.
Retention
We keep personal data only as long as necessary for the purposes above and legal requirements. You may request deletion where applicable.
International transfers
Your data may be processed in other countries. Where required, we use lawful transfer mechanisms and safeguards.
Your rights
Depending on your region, you may have rights to access, correct, delete, port, or object to certain processing. Contact support@celestialnow.com.
Security
We use reasonable technical and organizational measures, including encryption in transit, strict access controls, and routine monitoring.
Children
Our Service is not directed to children under 13 (or the applicable age in your region). We do not knowingly collect data from children.
Changes
We may update this policy. We will post the new version with the “Last updated” date.