Legal
Privacy Policy
Last updated: August 15, 2026
This Privacy Policy explains what data Celial ("we", "us") collects when you use our websites, dashboard, and the Celial desktop application (the "Services"), how we use it, and the choices you have.
1. Local-first by design
Celial runs workflows on your own machine. Your repositories, code, prompts, workflow definitions, and AI provider API keys stay local — we do not upload, store, or have access to them unless you explicitly use a cloud feature (such as workflow sync or team sharing). Requests to AI model providers go directly from your machine to the provider you configured, under your own keys and that provider's privacy terms.
2. Data we collect
Account data
When you create an account we collect your name, email address, and authentication data. Our authentication is operated by Neon Auth on our behalf.
Billing data
Purchases are processed by Paddle, our Merchant of Record. Paddle collects your payment details (we never see your full card number) and shares with us the information needed to operate your subscription: billing name and email, subscription status and plan, seat count, transaction history, and country/tax metadata. Paddle's processing is described in thePaddle privacy policy.
Usage and run analytics
The desktop application reports aggregate run metrics to your account — such as node run counts, durations, model names, and token/cost totals — so your dashboard can show insights. It also reports agent activity in the same shape: how many tasks and missions the agents ran, whether they finished, what they cost, how long they took, and how many times each capability was executed, staged, or refused, together with the name of the project folder the work happened in. These metrics do not include your code, prompts, task goals, workflow contents, or API keys.
If you are on a team, the team owner sees these run and agent aggregates broken down per member — the same counts, costs, and outcomes, never the underlying content.
Content you share
If you join a team or share a workflow with your team or through a share link, the content you choose to share (workflow definitions, descriptions, and your name and email) is stored by us and visible to others as you direct.
Support and website data
Messages you send through our support and contact forms, and standard technical logs (IP address, browser type, pages visited) needed to run and secure the website.
3. How we use data
- to provide, maintain, and improve the Services;
- to operate subscriptions, billing, and seat management;
- to show you your own analytics and team insights;
- to respond to support requests;
- to secure the Services, prevent abuse, and comply with legal obligations;
- to send transactional emails (receipts, account and billing notices). Marketing emails, if any, are opt-in and include an unsubscribe link.
We do not sell your personal data, and we do not use your content to train AI models.
4. Sharing
We share personal data only with:
- Paddle — payment processing, tax handling, and billing support (Merchant of Record);
- Infrastructure providers — hosting and databases (e.g. Vercel, Neon) that store data on our behalf under contractual safeguards;
- Email providers — to deliver transactional email;
- Authorities — where required by law, after reviewing the request;
- A successor entity — in a merger or acquisition, with notice to you.
5. Data retention
We keep account data while your account is active. Billing records are retained as required by tax and accounting law. If you delete your account, we delete or anonymize personal data within a reasonable period, except where retention is legally required.
6. Your rights
Depending on where you live (including under the GDPR and similar laws), you may have rights to access, correct, export, delete, or restrict processing of your personal data, and to object to processing or withdraw consent. To exercise them, contacthello@celial.ai. You may also lodge a complaint with your local data-protection authority.
7. International transfers
Our providers may process data in the United States, the European Union, and other countries. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.
8. Security
We use industry-standard measures to protect your data: encryption in transit, scoped access to production systems, and payment handling delegated entirely to Paddle (PCI-DSS compliant). No system is perfectly secure; we will notify you of a breach affecting your data as required by law.
9. Cookies
The website uses strictly necessary cookies for authentication and session management. We do not use third-party advertising cookies.
10. Children
The Services are not directed to children under 16, and we do not knowingly collect their data.
11. Changes
We may update this policy from time to time; material changes will be announced on this page before taking effect, and by email where appropriate.
12. Contact
Privacy questions and requests: hello@celial.ai, or via oursupport page.