Privacy Policy (GDPR)
DocStellar, published by CaeloWorks, takes the protection of your data seriously. This policy explains what data is collected, why, where it is hosted, how long it is kept and how to exercise your rights.
Data controller
CaeloWorks is the data controller for personal data collected on DocStellar. For any question regarding your data, write to us at contact@docstellar.com or via the contact form.
Data collected
- Account: email address and password, the latter being hashed (bcrypt) and never stored in plain text.
- Astrophotography images you submit and the technical details you provide (equipment, conditions, image type).
- Diagnoses produced by the Doc, our AI model.
- One-time geographic position, only if you grant permission in your browser, to estimate light pollution (Bortle scale). Coordinates are rounded and used on the fly.
- Minimal technical logs required for security and proper operation of the service.
Purposes and legal basis
Your data is used to provide the analysis service (performance of contract), to secure the platform and prevent abuse (legitimate interest) and, for geolocation, on the basis of your consent, which you may withdraw at any time.
Artificial intelligence analysis
To produce a diagnosis, the image you submit is sent to our AI provider, Anthropic (Claude model), solely for the duration of the analysis and without reuse for training models. This processing may involve a transfer outside the European Union (United States), governed by appropriate safeguards such as the European Commission's standard contractual clauses.
Hosting and storage
Data (database and image files) is hosted by a provider located in the European Union. Private images are accessible only to their owner; images you make public are accessible via a pseudonymised URL that does not reveal your identity.
Data security
Exchanges with DocStellar are encrypted (HTTPS/TLS), passwords are hashed and access to private images is restricted to their owner. We limit the data collected to what is strictly necessary and apply appropriate technical and organisational measures to protect it against unauthorised access. We do not sell or rent your personal data to third parties.
Cookies
DocStellar does not use advertising cookies or third-party audience measurement tools. Only a strictly necessary session cookie is set to keep you logged in. No consent banner is therefore required.
Retention period
Your account and your analyses are kept for as long as you use the service. They are deleted on request, with no delay condition.
Your rights
Under the GDPR, you have the right of access, rectification, erasure, portability, restriction and objection, as well as the right to withdraw your consent. To exercise these rights, write to us via the contact form or at contact@docstellar.com. We respond within one month. If you believe your rights are not being respected, you may lodge a complaint with the relevant supervisory authority (in France: cnil.fr).
Updates
This policy may be updated to reflect changes to the service or applicable regulations. Last updated: 21 May 2026.