1. Introduction

At Saturnus ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our domain portfolio management service at Saturnus.app.

2. Information We Collect

We collect information that you provide directly to us, including:

• Account information: Name, email address, and password (securely hashed)
• Domain portfolio data: Domain names, custom notes, tags, categories, and renewal cost information you add
• Payment information: Processed and stored securely by Stripe, our third-party payment processor. We do not store credit card numbers on our servers
• Usage data: Login times, feature usage, and interaction with the Service
• Communication data: Messages when you contact our support team
• RDAP query data: Public domain information retrieved from RDAP servers (expiration dates, registrar information, domain status)

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process your subscription payments through Stripe
• Send you technical notices, security alerts, and support messages
• Respond to your comments, questions, and support requests
• Perform RDAP lookups to retrieve and refresh public domain information
• Analyze usage patterns to improve user experience and Service functionality
• Detect, prevent, and address technical issues and fraudulent activity
• Calculate portfolio statistics and analytics (for Ultra plan subscribers)

4. Third-Party Payment Processing

We use Stripe, a PCI-compliant third-party payment processor, to handle all subscription payments and billing. When you subscribe to a paid plan, your payment information is transmitted directly to Stripe and processed securely on their servers. We never store your complete credit card information on our servers. Stripe's use of your personal information is governed by their Privacy Policy, available at stripe.com/privacy. We receive limited information from Stripe, such as payment status and subscription details, to manage your account.

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

• Service providers: With third-party service providers who perform services on our behalf (e.g., Stripe for payment processing, database hosting providers)
• Legal compliance: To comply with legal obligations, court orders, or respond to lawful requests from public authorities
• Protection of rights: To protect our rights, privacy, safety, property, or that of our users or the public
• Business transfers: In connection with a merger, sale, acquisition, or transfer of all or a portion of our business

We require all third-party service providers to respect the security of your personal data and treat it in accordance with applicable laws.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, secure authentication systems, regular security assessments, and access controls. Payment processing is handled exclusively by Stripe using industry-standard security practices. However, no method of transmission over the Internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as necessary to provide you with our Service and as needed to comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we will delete or anonymize your personal data, including your domain portfolio information, within a reasonable timeframe. Some information may be retained in backups for a limited period for legal compliance purposes.

8. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data, including:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data (right to be forgotten)
• Data portability: Request export of your data in a structured, machine-readable format (CSV or JSON)
• Objection: Object to certain processing of your personal data
• Restriction: Request restriction of processing under certain circumstances
• Withdraw consent: Withdraw consent for data processing where we rely on consent

To exercise these rights, please contact us through our Contact page or email info@saturnus.app. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service, maintain user sessions, and store certain preferences. Essential cookies are required for the Service to function properly (authentication, session management). You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

10. Third-Party Links and Services

Our Service may contain links to third-party websites, services, or domain registrars. We are not responsible for the privacy practices of these third parties. This Privacy Policy applies only to Saturnus. We encourage you to read the privacy policies of any third-party sites you visit. When we use RDAP to retrieve domain information, we query public RDAP servers operated by domain registries, which may have their own data collection practices.

11. Children's Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal data, please contact us immediately. If we discover that we have collected personal data from a child under 18, we will delete that information promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country. We take appropriate measures to ensure that your personal data remains protected in accordance with this Privacy Policy when transferred internationally.

13. Changes to This Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes acceptance of the updated Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through our Contact page or email us at info@saturnus.app. We will respond to all legitimate requests within 30 days.