Privacy Policy

Draft for legal review, written with Canada's PIPEDA in mind. Last updated November 2026.

What we collect

• Account details: your email address, and optionally a display name and time zone.
• Bookings: the telescopes, times, targets and capture plans you book, and their status.
• Payments: handled by Stripe. We receive confirmation of payment and refunds, but never your full card number.
• Hosts: application details, telescope listings and photos, and the Stripe account used for payouts (Stripe holds the banking details).
• Messages: anything you send through the contact form, and messages exchanged with a host about a booking (visible to you, the host and Celestarray staff).
• Reviews: star ratings and comments you post about a session. They are public, shown with your first name only.
• Waitlist: the email address and optional details you give when joining the waitlist, used only to tell you about Celestarray's launch. Ask us to remove you at any time.
• Session data: image files your host uploads for you. Celestarray staff can view them to run the service. We only feature your images publicly (website, social media) if you turn on the sharing option in your settings, and we credit you by first name.

Why we use it

To run your account, take and refund payments, pass your booking and capture plan to the host, deliver your images, answer your messages, and keep the service secure. We don't sell your personal information.

Who we share it with

• The host of a telescope you book receives your booking, capture plan and email address so they can run your session.
• Service providers that run the platform: Supabase (database, sign-in and file storage), Stripe (payments and payouts), and our email provider. Data may be stored outside Canada.
• Authorities, where the law requires it.

Cookies and storage

We use your browser's storage to keep you signed in and to remember preferences such as light or dark mode. We don't use advertising trackers.

Keeping and deleting data

We keep booking and payment records as long as needed for accounting and legal requirements. Session image files may be deleted after [period to be decided]. You can ask us to access, correct or delete your personal information: contact us.

Contact

Privacy questions or complaints: contact us. [Privacy officer name and mailing address to be added.] You can also contact the Office of the Privacy Commissioner of Canada.