Privacy policy

Who we are

Celestiga Systems ("we") designs and builds websites. We are responsible for the personal data described here. Contact us at privacy@celestiga.com or by post at [Registered business address, India].

What we collect and why

We collect only what we need for the purposes below, and we don't sell personal data or use it for advertising.

Inquiry form

Data: Your name, email address and message.

Purpose: To reply to you and discuss a possible project.

Legal basis: Steps you asked us to take before a contract; our legitimate interest in answering business inquiries.

Client portal

Data: Your name, email address, password (stored by our authentication provider, never visible to us), and the messages and change requests you send.

Purpose: To provide the portal and the services we agreed with you.

Legal basis: Performance of our contract with you or your organisation.

Emails we send

Data: Your name and email address.

Purpose: To send portal invitations and password links you or we requested.

Legal basis: Performance of our contract; steps before a contract.

Security and abuse prevention

Data: Your network (IP) address and basic technical details of requests, in server logs and in pseudonymised (hashed) form for rate limiting.

Purpose: To keep the site secure, stop spam and automated abuse, and investigate misuse.

Legal basis: Our legitimate interest in the security of our services (you can object, see below).

Cookies and similar storage

We use only what is strictly necessary for the site to work: a login cookie, and storage in your browser that keeps you signed in to the client portal. We don't use analytics, advertising or tracking cookies, so there is no cookie banner. The anti-spam check on our inquiry form is provided by Cloudflare Turnstile.

Service providers and international transfers

We use these providers to run the site. They process data on our behalf and only for these purposes:

• Google Firebase (Google LLC): Sign-in and database for the client portal and inquiries.
• Render (Render Services, Inc.): Hosting of this website and its server; keeps server logs under its own retention terms.
• Cloudflare, Inc.: Network delivery and protection used by our host, and the Turnstile check that stops automated form submissions.
• Resend: Delivery of the emails we send you.

These providers are based in the United States and may process data in other countries. We rely on their contractual data-protection commitments (such as data processing agreements and, where applicable, the EU–US Data Privacy Framework or Standard Contractual Clauses).

How long we keep data

• Inquiries: as long as needed to respond and follow up; if no project follows, we delete them when they are no longer needed.
• Client portal data: for as long as we work together, and afterwards only as long as needed for legal, accounting or warranty purposes.
• Security data (IP addresses): only as long as needed for security and abuse prevention; we review and delete it periodically. Server logs held by our hosting provider are kept according to its retention terms.

Your rights

You can ask us for a copy of your personal data, to correct it, to delete it, or to restrict how we use it. You can object at any time to processing based on our legitimate interests, including security processing of your IP address. Write to privacy@celestiga.com; we will reply within one month.

If you are unhappy with our answer, you may complain to the data protection authority where you live or work (in the EU, your national supervisory authority; in India, the Data Protection Board of India).

Automated decisions

Our anti-spam checks may hold an inquiry back for review, but a person looks at it before anything is decided. We don't make decisions with legal or similarly significant effects by automated means alone.

Changes

We'll update this page when our practices change and show the date of the latest version at the top.