Privacy Policy

Your privacy is important to us. The Celestial Vault is built on a simple principle: your vault content, notes, and AI conversations belong to you and never leave your device. This policy explains the small amount of information we do collect, why we collect it, and how we handle it.

What the Celestial Vault does not collect

The Celestial Vault and its plugins run inside Obsidian on your own machine. We do not have, and cannot retrieve:

• The contents of your vault — notes, attachments, daily journals, templates you create, or anything else inside it
• Your local AI prompts, conversations, or generated summaries — all AI processing happens locally through Ollama on your device
• Files, folders, or any other data from your computer outside of Obsidian
• Telemetry or usage tracking from inside the Obsidian app

What we do collect

We only collect what we actually need in order to sell, deliver, and support the Celestial Vault:

• Email address — to send you your download link, your license key, and important product updates
• Name — for receipts and personalized support (collected at checkout by Polar)
• Basic purchase information — order details, license status, and country or region for tax compliance
• Privacy-friendly website analytics — anonymous, aggregated traffic data from celestialvault.app with no cross-site tracking

We will never sell your data, share it with advertisers, or use your email for unrelated marketing.

Polar as our Merchant of Record

We use Polar Software, Inc. (a Delaware corporation, 3500 South DuPont Highway, Dover, DE 19901, USA) as our Merchant of Record for purchases on celestialvault.app (purchases made before our migration to Polar were processed by LemonSqueezy LLC). This means:

• Polar collects checkout data: email, name, and payment and billing information
• We access the non-payment parts (name, email, country, order details) through our seller dashboard to deliver your license and provide support
• They handle payments and compliance — processing payments, calculating and remitting VAT, GST, and US sales tax, issuing refunds, and meeting legal requirements in each country
• Email delivery — Polar sends purchase receipts, tax-correct invoices, and download links on our behalf

Polar provides a Data Processing Addendum incorporating the EU Standard Contractual Clauses and the UK International Data Transfer Addendum (polar.sh/legal/data-processing-addendum). Review their privacy policy at polar.sh/legal/privacy-policy.

How we use your information

We use the data we have access to in order to:

• Deliver your Celestial Vault download and license key
• Deliver the bundled Time Garden Eternal license (5-device)
• Provide customer support and technical assistance
• Send important product updates, security notes, and breaking changes
• Send occasional optional newsletters about new features and templates (easily unsubscribable)
• Improve the website and the documentation
• Meet legal and tax obligations

Data sharing and processing

We work with a small set of trusted partners:

• Polar Software, Inc. — our Merchant of Record; processes payments, handles customer data, delivers transactional email, and manages tax compliance (US-based; transfers covered by the EU Standard Contractual Clauses)
• Website hosting and analytics — our marketing site is hosted and instrumented with privacy-friendly tools that do not use tracking cookies

Your vault contents are never shared with anyone, because they never leave your device. Customer information is only shared between us and Polar, for legitimate business purposes: order fulfillment, support, and compliance.

International data processing

Polar is based in the United States, so your customer information may be processed there. International transfers rely on the EU Standard Contractual Clauses, incorporated in Polar's Data Processing Addendum. Your most sensitive data — your vault and your local AI conversations — never leaves your device, regardless of where you are.

Your rights (GDPR, CCPA, and similar)

Under GDPR, CCPA, and other applicable privacy laws, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to fix inaccurate information
• Deletion — request deletion of your personal data
• Portability — receive your data in a portable format
• Opt-out — unsubscribe from marketing emails at any time
• Restrict processing — limit how we use your data

To exercise these rights, email business@timegarden.app. We'll respond within 30 days. Your vault data is already fully under your own control, since it lives only on your device.

Data security and retention

We protect customer data with reasonable technical and organizational measures, including secure hosting, access controls, and encrypted connections. We retain data only as long as we need it:

• Active customers: data retained while you use the Celestial Vault
• Marketing emails: removed within 30 days of unsubscribing
• Purchase records: kept as long as required for tax and legal compliance (typically 7 years)
• Support requests: retained for up to 2 years unless you ask us to delete earlier

Cookies and website tracking

celestialvault.app uses minimal, privacy-friendly analytics with no cross-site tracking cookies, no advertising pixels, and no social media trackers. Analytics data is anonymized and used only to understand which parts of the site are useful.

Children's privacy

The Celestial Vault is intended for users 16 and older. We do not knowingly collect personal information from children under 16. If we learn that we have, we will delete it.

Changes to this policy

We may update this privacy policy when our practices change or when the law requires it. Material changes will be communicated by email to registered customers with at least 30 days' notice. Continued use of the Celestial Vault after that period indicates acceptance.

Contact

Privacy questions and data requests: business@timegarden.app
Technical support: support@timegarden.app
Our location: Hamburg, Germany
Merchant of Record: Polar Software, Inc., 3500 South DuPont Highway, Dover, DE 19901, USA

If you are not satisfied with our response to a privacy concern, you can contact the data protection authority in your country.

This policy is intended to comply with GDPR, the German BDSG, CCPA, and other applicable privacy laws. If anything here is unclear, email business@timegarden.app and we'll explain.