Privacy policy

Last updated 5 November 2026. This policy describes how the Celstix website (celstix.com) and application (app.celstix.com) handle data.

Who we are

Celstix is operated by its founder, Atharv Sanodiya. Contact: the contact form.

Two roles

For the information you give us to create and run your account, Celstix decides how it is used. For the records a business keeps about its own customers, residents, members or guests, the business decides what to enter, and Celstix stores and processes it on the business's behalf.

What we collect

• Account data: your email address, name and a password, which is stored only as a salted hash.
• Business data you enter: business and location details, menu items, orders, bills, rooms, residents, members, bookings, payments, expenses and team members, including customer names and phone numbers you add.
• Contact form messages: the name, email address, topic and message you send through the contact form on this site. They are saved privately, read by the Celstix team to reply, and removed on request. Your IP address is used briefly to limit repeated submissions.
• Files you upload: for example expense receipts, stored privately.
• Technical data: a sign-in session, and basic request logs that our hosting provider keeps for security and operations.

Cookies and similar storage

The application uses a sign-in session cookie and a password-reset cookie that the service needs to work, and browser storage to remember your theme, language and active business. The celstix.com marketing pages set no cookies. We do not currently use advertising cookies or an analytics service. If we add analytics we will update this page and ask for consent where the law requires it.

How we use data

To provide the service, sign you in, keep your business running, send account emails such as email confirmation and password reset, secure the platform and respond to support requests. We do not sell personal data.

Who processes data for us

• Cloudflare hosts the website and application and stores application data, files and contact form messages (Workers, D1 database and R2 storage).
• Resend delivers account emails.
• Google Fonts serves the typefaces on celstix.com, so your browser contacts Google when you load the site.
• If you choose an optional integration, such as WhatsApp Business API or a payment gateway, the provider you connect also processes the related data.

Isolation and security

Each business's data is kept separate from every other business, staff only see what their role allows, files open through short-lived signed links, and connections use HTTPS. No system is perfectly secure.

Retention, access and deletion

We keep your data while your account is active. To access, correct or delete your account and business data, send a request through the contact form, using the email address on your account. Customers of a business should contact that business first. Backups may take a limited time to age out.

Children

Celstix is for businesses and is not directed at children.

Changes

We will change the date above when this policy changes.