Privacy Policy

1. Information We Collect

We collect information you provide directly to us when you create an account or use our platform, including:

• Account information — your name, email address, and company name when you register.
• Usage data — how you interact with the platform, including pages visited, features used, and session duration.
• Water risk assessment data — any data you upload or input into the platform for analysis, including facility locations, supply chain data, and financial figures.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Celeste platform.
• Improve and personalize the platform experience over time.
• Communicate with you about updates, security notices, and support.
• Comply with applicable legal obligations and enforce our terms of service.

3. Data Sharing

We do not sell your personal data. We may share your information only in the following limited circumstances:

• Service providers — trusted third-party vendors (including AWS for hosting and infrastructure, and analytics tools) who process data solely on our behalf and under confidentiality obligations.
• Legal requirements — when required by law, court order, or governmental authority.
• With your consent — for any other purpose with your explicit consent.

4. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption at rest (AES-256) and in transit (TLS 1.2+).
• Role-based access controls with least-privilege principles.
• Regular security assessments and continuous monitoring of our infrastructure.

No method of transmission or storage is 100% secure. We encourage you to use strong, unique passwords and contact us immediately if you suspect unauthorized access to your account.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide services. If you close your account or request deletion, we will delete your personal data within 30 days, except where retention is required by law or legitimate business purposes (such as resolving disputes or enforcing agreements).

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access — request a copy of the personal data we hold about you.
• Correction — request correction of inaccurate or incomplete data.
• Deletion — request deletion of your personal data.
• Portability — receive your data in a machine-readable format.
• Opt-out — unsubscribe from marketing communications at any time via the link in any email we send.

To exercise any of these rights, contact us at info@withceleste.com.

7. Cookies

We use two categories of cookies:

• Essential cookies — required for authentication and platform security. These cannot be disabled.
• Optional analytics cookies — help us understand how the platform is used so we can improve it. You may opt out of these at any time.

8. International Transfers

Your data is processed in the United States on AWS infrastructure in the us-east-2 (Ohio) region. If you are located outside the United States, your data will be transferred to and processed in the US. We apply appropriate safeguards — including Standard Contractual Clauses where applicable — to ensure your data receives an adequate level of protection.

9. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 14 days before the change takes effect. We encourage you to review this page periodically to stay informed.

10. Contact

If you have questions or concerns about this Privacy Policy, please contact us: