Privacy Policy

Celestial Connect ("Celestial Connect," "we," "us," or "our") operates a cannabis discovery, educational, business-listing, and industry technology platform, with checkout limited to eligible non-regulated merchandise and platform services. This Privacy Policy describes what information we collect, how we use it, and the choices you have.

By using the site you agree to the practices described here. If you do not agree, please do not use the platform.

Account information: name, email address, and authentication details when you register or sign in.

Age and identity verification data: confirmation that you are 21 or older, and — where applicable — identity-document verification results processed through our verification provider (Stripe Identity) for age-gating and compliance.

Business review data: for sellers, business legal name, EIN or state license number, and uploaded supporting documents (such as IRS or state-issued records) used to review seller-submitted business information. Internal review does not by itself constitute regulator verification.

Transaction data: for eligible non-regulated checkout and platform services, purchase amounts, payout routing, fees, and order status. Payment card data is handled directly by our payment processor — we do not store full card numbers on our servers. Regulated cannabis transactions are not processed by Celestial Connect.

Listing and community content: product listings, forum threads, petitions, grower showcases, service and business profiles, and any content you publish.

Usage and device data: approximate location (such as U.S. state) used for legal geo-gating, IP address, browser type, and interactions with the site collected via cookies and analytics.

We use information to operate accounts and age-gated content; review seller-submitted business information; support jurisdiction-aware discovery; process eligible non-regulated checkout and platform services; prevent fraud and abuse; communicate about accounts and support; and improve and secure the platform. Seller-submitted license information is not treated as regulator verification unless authoritative provenance is separately established.

Where required (for example, under the GDPR for users in the EEA/UK), we process personal data on the basis of: performance of a contract (fulfilling orders and seller agreements); compliance with legal obligations (age verification, licensing, tax); our legitimate interests (security, fraud prevention, platform improvement); and your consent where applicable.

We share information with service providers who help operate the platform: payment processing (Stripe), identity verification, email delivery, hosting, and analytics. These providers process data on our behalf and under applicable data-protection terms. We may also disclose information where required by law or to protect rights, safety, or property.

Information a seller chooses or is required to publish in a business profile or listing—such as business name, seller-submitted license number, general location, website, and listing content—may be visible to other users. Users should not place sensitive personal information in public listing fields.

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy, including maintaining accounts, providing services, resolving disputes, preventing fraud, and meeting applicable legal, tax, accounting, or security obligations. Retention periods vary by record type and service provider. You may request deletion of eligible account data; some records may be retained where required or permitted by law or needed to establish, exercise, or defend legal claims.

Depending on where you live, you may have rights to access, correct, delete, or restrict the use of your personal data; object to processing; and request data portability. U.S. residents of states with consumer privacy laws (such as California under the CCPA/CPRA) may have specific rights to know, delete, and opt out of the "sale" or "sharing" of personal data. We do not sell your personal data. To exercise any right, contact us through the Support page.

We use cookies and similar technologies to keep you signed in, remember your age-verification status during a session, and understand how the site is used. You can control cookies through your browser settings; disabling them may affect some features.

We use reasonable administrative and technical safeguards designed to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Payment and identity-verification providers may maintain their own security controls for information they process directly.

The platform is for adults 21 and older. We do not knowingly collect personal information from anyone under 21. Age verification is enforced through session confirmation, account checks, and where applicable identity verification. If you believe a minor has provided data, contact us and we will delete it.

The platform is designed for users in the United States and operates under U.S. state cannabis laws. If you access the platform from outside the U.S., your data may be transferred to and processed in the U.S., and you consent to that transfer.

We may update this Privacy Policy from time to time. We will revise the "Last updated" date above and, for material changes, provide notice through the platform. Continued use after changes constitutes acceptance.

Privacy and general support: celestialconnectc2@gmail.com

For privacy questions or requests, you may also reach us through the Support page. Do not send government identification or other sensitive documents by ordinary email unless support specifically provides an approved secure method.