Privacy Policy

Effective 1 November 2026

This policy explains what Celestin ("we", "us") does with information about you when you use the Celestin website, app, credits server and Connector (the "Service"), and the choices you have. We follow Indonesia's Personal Data Protection Law (Law No. 27 of 2022).

The short version

• Your chats stay in your browser. Our server passes your messages to the AI models that answer them and doesn't keep them.
• We keep what we need to run your account: your email, your plan and credits, your payments, and a record of what each request cost (not what it said).
• We don't sell your data, we don't show ads, and we don't train AI models on your content.
• You can export your chats and delete your account yourself, at any time.

1. What we collect

• Account: your email address and either a password (stored only as a salted hash that can't be turned back into the password) or, if you use Google Sign-In, your Google account ID and verified email. Your first name from Google is kept in your browser only.
• Plans, credits and payments: your plan and when it ends, your credit balances and limits, and your payments (amount, currency, method, status, the name you write for a QRIS payment, and our card partner's order number). We never receive your full card number.
• Usage records: for each AI request, which model answered, what it cost, how many credits it used and when, so we can charge correctly and keep the Service running. Not the content of the request.
• Sign-in sessions: a random token, stored only as a hash, for up to 30 days.
• Sign-in codes: when you sign in with a password or reset it, we email you a 6-digit code from our Gmail account (Google sends it). We keep only a scrambled copy of the code, for 10 minutes.
• What you ask us to keep on our server:
  • Shared chats: a copy of a chat you share, readable by anyone with its link, until you stop sharing it.
  • Scheduled tasks: a task's instructions and each run's result, until you delete the task.
  • Pictures for connected apps: a picture you attached, when an app you connected needs it, at a private link for 24 hours.
• Help improve Celestin (on by default; we tell you about it the first time you sign in, with a button to turn it off, and you can turn it off in Settings anytime): your 👍 and 👎 on answers, when you ask for another answer, and whether code ran or a part of an answer held up, each with which model answered and a few generic topic words (like "python"). Never what you wrote. It isn't linked to your account; we only count how many results each account sends a day, to stop flooding.
• Help requests: when you write to us, your email, what it's about, what you wrote, and, if you leave that box ticked, your plan, credits, recent payments, the last error you saw and your browser. Never your chats.
• Technical data: our hosting providers (Cloudflare for the server, GitHub Pages for the website) process IP addresses and request logs to deliver and protect the Service. We don't use analytics or advertising trackers.

What stays in your browser: your chats and their files, projects, memory (what Celestin remembers about you), settings, and the keys of apps you connect. They're on your device; clearing your browser's data deletes them. You can export them in Settings.

2. How your requests are handled

When you send a message, it goes from your browser to our server and on to the AI model chosen for it, through our AI gateway provider, and the answer comes back the same way. Our server doesn't store the content. The AI providers process it under their terms for business customers: under those terms they generally don't train their models on it, though they may keep it for a limited time to prevent abuse.

If a request needs the web, Celestin searches with a search-capable AI model or search service, and our server fetches the pages you or Celestin ask for. Programming library documentation is looked up through Context7.

3. Why we use your information

• To provide the Service: signing you in, answering requests, charging credits, and handling payments and plans.
• To keep it safe and fair: preventing abuse, fraud and overuse, and enforcing our Terms.
• To support you and tell you about important changes.
• To meet legal obligations, such as tax and accounting records.
• To learn which model does which work best (the anonymous learning data above).

We rely on our agreement with you, your consent (which you can withdraw), our legitimate interest in running a safe Service, and our legal obligations.

4. Who we share it with

Only what's needed to run the Service:

• AI model providers and our AI gateway, which receive the content of your requests to answer them.
• Cloudflare (our server and database) and GitHub (our website).
• Google, if you sign in with Google, and because our emails (sign-in codes, answers to help requests) are sent from our Gmail account; Google Fonts and the code libraries the site loads (cdnjs, jsDelivr), which see your IP address.
• Payment partners: your bank or e-wallet for QRIS, and our card payment partner.
• Apps you connect yourself, which get what you ask Celestin to do with them.
• Authorities, when the law requires it or to protect someone from serious harm.

We don't sell personal data or share it for advertising.

5. Outside Indonesia

Some of these providers process data outside Indonesia, including in the United States, Europe and Asia. We choose providers that protect data with security measures and contractual commitments, and by using the Service you agree to these transfers, as Indonesian law allows.

6. How long we keep it

• Account, plan and credit data: while your account exists.
• Usage records: while your account exists; when you delete it, they no longer point to you.
• Payment records: as long as tax and accounting law requires (up to 10 years), without the name you wrote for a QRIS payment once your account is deleted.
• Sign-in sessions: up to 30 days. Pictures shared with apps: 24 hours. Shared chats and tasks: until you delete them or your account. Help requests: until a year after they're solved, or until you delete your account.

7. Your rights

Under Indonesian law you can ask to see, correct, delete or get a copy of your personal data, withdraw your consent, object to or limit how we use it, and complain to the authority. Most of it you can do yourself:

• See it: Account shows your email, plan, credits and payments; your chats are in your browser.
• Get a copy: Settings → Export everything.
• Delete it: Account → Delete account removes your account, sign-ins, shared chats, tasks and pictures from our server. Settings → Delete all chats clears this browser.
• Anything else: contact us (below). We'll answer within the time the law sets.

8. Security

Passwords are salted and hashed, sign-in tokens are stored only as hashes, everything travels over HTTPS, and our AI keys never reach your browser. No system is perfectly secure; if a breach affects your data, we'll tell you and the authorities as the law requires.

9. Children

Celestin isn't for children under 13. If you're 13 to 17, you need a parent's or guardian's permission. If you think a child has given us data without that permission, contact us and we'll delete it.

10. Changes

We may update this policy. If a change is significant, we'll tell you in the app before it takes effect.

11. Contact

For questions or requests about your data, open Help and support in Celestin and choose "Privacy and my data", or email celestinsupportai@gmail.com. You can also delete your account yourself in Account. A real person reads every message, and we usually answer within 24 hours.