Privacy Policy

1. Commitment to Data Sovereignty

CLSTRE LLC ("CLSTRE", "we", "us", or "our") respects your privacy and is dedicated to protecting all personal information submitted across our storefront, lead capture funnels, and administrative portals. This Privacy Policy details our data collection, handling, and protection practices.

Our core engineering philosophy is single-tenant isolation. Unlike legacy SaaS platforms that store millions of customer records in shared relational tables, your data lives in your dedicated database instance.

2. Information We Collect

We collect information you provide directly through our public forms and portal settings, including:

• Contact and Booking Inquiries: Name, work email address, company name, phone number, and project technical requirements.
• Authentication Credentials: Securely salted and hashed password representations and cryptographic session tokens managed via PostgreSQL session tables.
• Technical Logs: IP address, browser user-agent, operating system, and request timestamps strictly for rate limiting, DDoS mitigation, and brute-force prevention.

3. Dedicated Database Architecture (No Cross-Tenant Pooling)

We do not aggregate, harvest, or sell client data to third-party ad networks or data brokers. All mutations and form submissions stream directly through the Core Engine API into your isolated Cloud SQL database.

4. Cookies & Local Session Storage

We use essential cookies and browser local storage exclusively for:

• Maintaining authenticated portal administrative sessions.
• Preserving live theme editing drafts and unsaved configuration changes in the Theme Editor.
• Storing user cookie consent preferences.

We do not deploy invasive third-party cross-site advertising trackers or canvas fingerprinting scripts.

5. Security & TLS/SSL Encryption

All communication between browsers, the Clstre Storefront, the Admin Portal, and the Engine API is secured using TLS 1.3 encryption. Uploaded assets and media files are stored on isolated Google Cloud Storage buckets or encrypted disk storage with strict access control policies.

6. Data Retention, Portability, and Rights

Because you have 100% database sovereignty, you have the right at any time to:

• Export full SQL database snapshots via standard tools (e.g. pg_dump).
• Request permanent deletion of specific lead submission records.
• Update organizational metadata and administrative profiles directly in the Configuration Hub.

7. Children's Privacy (COPPA Compliance)

The Platform is engineered for enterprise business and professional commercial use. We do not knowingly collect or solicit personal information from children under the age of thirteen (13).

8. Policy Amendments & Notifications

CLSTRE reserves the right to amend this Privacy Policy to reflect platform upgrades or evolving legal mandates. Updated policies will be published with an updated "Last Updated" timestamp.

9. Contact & Data Protection Officer

If you have questions regarding this Privacy Policy or wish to exercise your data rights, please contact: