Privacy Policy

Effective date: 20 September 2026

How Celestia Intelligence handles information about account holders, people who contact us and people whose public posts appear in our research.

1. Who we are

Celestia Intelligence is operated by Celestia Entertainment FZ-LLC, registered at Yas Creative Hub, Yas South, Emirate of Abu Dhabi, United Arab Emirates, P.O. Box 769588. In this policy, "we", "us" and "our" mean Celestia Entertainment FZ-LLC.

Our website is celestiastudios.com. You can contact us about privacy at info@celestiastudios.com.

Celestia Intelligence helps producers, creators and small businesses research public conversation about an idea. It produces reports about discussion, sentiment and changes in interest.

This policy explains how we handle information about account holders, people who contact us and people whose public content appears in our research.

2. What we collect

2.1 Account information

We hold your email address and display name. These come from Google sign-in or are entered by us when we create your account.

We also hold your account role and whether your account is active or inactive.

You sign in through Google or a one-time email link. Celestia Intelligence has no passwords and stores none.

2.2 Your submissions

We hold the information you submit for an analysis. This may include:

A title, logline and synopsis.
Themes and comparable titles.
Optional attached talent.
Optional notes.

We store this information with the report so you can reopen it and run another analysis.

2.3 Uploaded scripts and treatments

We process the text of scripts and treatments you upload. We also keep document counts and a derived research plan. Section 4 explains the different retention rules for these items.

2.4 Reports, projects and profiles

We store your reports and any saved projects you create.

We also store business or channel profiles you create, including a logo.

If you give us a link to your website or channel, we read its public details to help you fill in the profile. A logo is either one you upload or one we fetch from the address you gave us. Section 7 explains why a YouTube channel picture is never used.

2.5 Feedback and correspondence

Feedback is sent to us by email. We do not store feedback in the product database. It remains personal data while held in email.

2.6 Operational information

Our operational logs contain identifiers, counts, durations, tool names and error messages. They may contain the short labels of the angles a run measured and a one-line summary of what each source returned, which can include the title of a public post. They do not contain script text, synopses, full reports or anything read through YouTube API Services.

We also keep a counter of the number of analysis runs your account has started.

Like most websites, our server and our providers process technical information when you use the site. This includes IP addresses, browser type and request times. Our authentication provider records sign-in events.

2.7 Public source information

We collect public posts, comments, articles and statistics for audience research. Sections 7 and 8 explain this processing.

2.8 Demo requests

Our public demo request form collects your name and your email address. You can also add a company name and a short message.

The request is emailed to us. It is not stored in the product database. We use it to reply to you and to arrange a demo.

Cloudflare Turnstile checks this form for bots. To do this, Cloudflare processes the visitor's IP address and browser signals. We send the IP address to Cloudflare when we verify the check. Turnstile runs on the demo request form only.

To limit repeat submissions, our server holds the submitting IP address in memory for a short time.

3. How we use information and our legal bases

Where the GDPR or UK GDPR applies, we use the following legal bases.

Purposes, the information used and the legal basis for each
Purpose	Information used	Legal basis
Create accounts, authenticate users and manage access	Account and authentication information	Contract, where you are the contracting party. Otherwise, legitimate interests in providing access to an authorised professional user.
Run analyses and store work you request	Submissions, uploaded text, research plans, reports, projects and profiles	Contract, where applicable. Otherwise, legitimate interests in providing the requested professional service, subject to the rights of affected people.
Research public conversation	Public posts, comments, articles and statistics	Legitimate interests in providing audience research, subject to the rights and reasonable expectations of the people concerned.
Track run allowances	Account identifiers and usage counters	Contract or legitimate interests in administering access.
Send invitations, sign-in links and completion notices	Email address and relevant service information	Contract or legitimate interests in operating the service.
Respond to feedback, demo requests and other requests	Correspondence and relevant account information	Legitimate interests in supporting users and improving the service. Legal obligation where a request concerns statutory rights.
Protect the service and investigate errors	Operational and security information	Legitimate interests in preventing abuse and maintaining a working service.
Publish information you choose to share	Selected report content	Your instruction to provide the sharing feature. Where consent is the applicable basis for publishing your personal data, your consent.
Meet legal requirements	Information needed for the relevant requirement	Legal obligation.

A legitimate interest does not automatically override a person's privacy rights. We must consider the effect of the processing on those rights.

Where we rely on consent, you may withdraw it by contacting info@celestiastudios.com. You may also revoke a report's share link. Withdrawal does not affect processing that was lawful before withdrawal.

Your decision to share a report does not provide consent on behalf of other people named in it.

These legal bases apply to processing for which we act as a controller. Where we act as a processor, we process personal data under the relevant customer's instructions.

4. Uploaded scripts and the 24-hour rule

The parsed text of an uploaded script or treatment is held in server memory for up to 24 hours. It is then discarded.

The uploaded file is never written to a database.

We retain document counts, such as page count and scene count, and a derived research plan. The research plan may contain character names and scene-level notes. We treat it as confidential.

The saved research plan is stored until you reset it in the product or ask us to delete it. A copy of the plan is also kept inside each report that used it. That copy stays until the report is deleted. Discarding the parsed text does not delete the research plan.

The 24-hour rule describes our handling of parsed text. AI provider processing is explained in Section 6.

Reports are private to the account that ran them.

You cannot delete a report in the product today. We keep reports until you ask us to delete them. To ask, email info@celestiastudios.com. We delete a report within 30 days of the request. The separate YouTube rules in Section 7 also apply.

You may choose to publish an individual report through a share link.

The shared version excludes our costs. It also excludes script notes, the casting read and the business profile unless you choose to include them.

Anyone who receives a published share link may be able to view and forward it. Review the report and sharing options before publishing.

You can revoke a share link. Shared pages are marked "noindex", which asks search engines not to index them. This does not make a link confidential or guarantee that a page will never be indexed.

Revoking a link cannot remove screenshots or copies that someone has already made.

6. AI processing

We use OpenAI to analyse public posts and your submission. This includes processing relevant uploaded script or treatment text when needed for the analysis.

We do not use your content or uploads to train AI models. Our AI provider does not train its models on that content.

When a script or treatment is attached, we also instruct the provider not to store the request in its logs. We do the same when a business profile is attached.

We have switched off sharing of our data for model training in our provider account. Under its own terms the provider may keep request data for up to 30 days for abuse monitoring.

An instruction not to store a request is separate from the provider's own retention settings. The 24-hour limit in Section 4 is not a retention limit for the provider.

7. YouTube API Services

Celestia Intelligence uses YouTube API Services. We use a server-side API key to read public videos, their public statistics, public comments and public channel details.

Users never connect a YouTube account to Celestia Intelligence. We never request, collect or store YouTube login credentials.

Google sign-in is separate from our access to public YouTube data. The product does not connect to your Google data beyond sign-in.

Google explains its practices in the Google Privacy Policy.

What we store

Videos and comments fetched through YouTube API Services are held in server memory while the analysis runs, for no more than 24 hours. They are not stored in reports.

Reports store no YouTube comments, video titles or video statistics.

Names and links of YouTube channels that carried the conversation may be kept with a report for up to 30 days. A count of the countries those channels declare may be kept with them. After 30 days they are removed unless they have been refreshed. A refresh re-checks them with YouTube. Only the account holder can refresh them, from the report. We do not refresh them automatically.

If you add your own YouTube channel to a profile, we read its public details through YouTube API Services. These are its name, description, subscriber count and recent upload titles. We read them when they are needed, to suggest profile text and during an analysis, and we do not store them. We do not save a YouTube channel's picture either. You can upload your own logo for a profile.

We do not sell YouTube data and do not pass it to third parties for their own use. Our AI provider processes it on our behalf to produce the analysis.

Our sentiment, momentum and attention analysis is our own analysis. It is not a YouTube metric.

Deletion

You can ask us to delete YouTube data we hold, or a report, by emailing info@celestiastudios.com. We delete it within 30 days of the request, and sooner where YouTube's rules require it.

Deleting data from Celestia Intelligence does not delete the original video, comment or other information from YouTube.

You can manage or revoke Google access through your Google security settings. This can affect Google sign-in. It does not revoke a YouTube connection because Celestia Intelligence does not establish one.

8. Public sources and quoted comments

We research publicly available posts, comments, articles and statistics.

Sources include YouTube, other public social platforms and forums, news coverage, search and reference statistics, and film and entertainment databases. The sources available for a particular run may vary.

We do not collect non-public information from these sources.

We do not build profiles of the members of the public whose posts and comments we read.

When you attach talent to an idea and ask for the casting read, we read public discussion and press coverage about those named public figures and assess their fit for your project.

Reports may include short public comments. We attribute them to the platform. Reports do not include YouTube comments, as Section 7 explains.

Quotes are stored without the commenter's name. A link to the original post is stored where one exists. On some platforms that link contains the author's handle.

The Marketing part of a report can list the names of public channels and communities where the conversation happened.

If we quote your public comment, you can ask us to remove it from stored reports. Email info@celestiastudios.com with the comment text, its original link if available, and any report link you have.

You do not need a Celestia Intelligence account to make this request. We may ask for limited information to locate the quote or verify that the request concerns your content.

We will review the request and act in accordance with applicable law and platform requirements. We will explain any reason we cannot fully comply.

Removing a quote from our stored reports does not remove the original post or copies held independently by others.

9. Service providers and other disclosures

We use the following providers to operate the service.

Service providers and what each one does
Provider	Purpose
Supabase	Database and authentication.
OpenAI	Text analysis of public posts and user submissions.
Apify	Retrieval of public posts from social platforms. Apify is not used for YouTube. YouTube is read only through the official YouTube API Services.
Resend	Invitations, sign-in links, run-finished notices, and delivery of demo requests and feedback to us.
Cloudflare Turnstile	Bot checks on the public demo request form only.
Google	Google sign-in, YouTube API Services, and Google Workspace, which hosts the mailbox that receives privacy requests, demo requests and feedback.
GoDaddy	Hosting, on a virtual private server in the United States.

We do not sell personal data or user content. We do not use it for advertising.

A report is disclosed to others when you choose to publish it through a share link.

We may also disclose information where the law requires it. Any such disclosure must have a lawful basis and be limited to what is necessary.

10. International transfers

Our hosting server is in the United States.

Information may be processed in the United States and in other countries where our providers operate. These countries may have different data protection laws from your country.

You can contact us at info@celestiastudios.com for more information about international transfers.

11. Cookies and browser storage

The product uses essential sign-in cookies. They keep you signed in. They are renewed while you use the product, so they stay in your browser for up to 400 days after your last visit. They are removed when you sign out.

We set no shorter time limit on a sign-in session. A session lasts until you sign out, the cookies expire or the account is deactivated.

When you start signing in with Google or an email link, we set up to three further cookies that let us complete that sign-in. They are removed when sign-in completes. If you do not finish signing in, they expire after 400 days.

Browser local storage holds interface preferences, unsent drafts and recently viewed results.

We do not use marketing cookies, advertising trackers or third-party analytics in the browser.

You can clear cookies and local storage through your browser settings. Clearing the sign-in cookies signs you out. Clearing local storage may remove preferences, unsent drafts and recently viewed results.

12. Retention

Different information has different retention periods.

How long each type of data is kept
Data type	Retention
Account email, display name, role and active status	Kept while your account exists. When you ask us to close your account, we delete the account record and your reports, projects and profiles within 30 days of the request.
Submitted idea details	Stored with the report until the report is deleted at your request. Saved projects can be deleted in the product.
Parsed script or treatment text	Held in server memory for up to 24 hours, then discarded.
Original uploaded file	Never written to a database.
Derived research plan	Until you reset it in the product or ask us to delete it. A copy inside a report stays until that report is deleted.
Page count, scene count and other document counts	Stored with the report or project, and deleted with it.
Reports	Until you ask us to delete them by email. We delete them within 30 days of the request. The YouTube rules below also apply.
Videos and comments fetched through YouTube API Services	Held in server memory while the analysis runs, for no more than 24 hours. Not stored in reports.
YouTube channel names and links kept with a report	Up to 30 days, then removed unless refreshed with YouTube.
Your own YouTube channel details read for a profile	Read when needed and not stored.
Saved projects, business or channel profiles and logos	Until you delete them in the product or ask us to delete them.
Feedback, demo requests and other email correspondence	Kept in email until it is no longer needed or you ask us to delete it.
Operational and security logs	Kept for as long as needed to operate and secure the service.
Run usage counter	Kept while your account exists.
Sign-in cookies, preferences and unsent drafts	As described in Section 11.

Asking us to delete a report does not restore a used run. The usage counter is separate from report content.

Deleted data may remain in provider backups for a limited time before it expires.

13. Security

Our security design includes passwordless sign-in, account-specific report access and operational logs that exclude script text, synopses and full reports.

Connections to the service use HTTPS. Stored reports, projects and profiles can be read only through our server, not directly from a browser.

We treat uploaded scripts, treatments and derived research plans as confidential.

No internet service can guarantee complete security. Protect your email and Google accounts. Do not forward sign-in links. Contact info@celestiastudios.com if you suspect unauthorised access.

Where the GDPR or UK GDPR applies, you may have the right to:

Access your personal data and receive information about its use.
Correct inaccurate or incomplete personal data.
Request deletion.
Restrict processing.
Receive eligible data in a portable format.
Object to processing based on legitimate interests.
Withdraw consent where processing relies on consent.
Complain to a data protection regulator.

These rights have conditions and exceptions. Portability generally applies to automated processing based on consent or contract. More information is available from the European Commission and the UK Information Commissioner's Office.

You may complain to the regulator where you live or work, or where an alleged infringement occurred. You do not have to contact us first.

15. Your California privacy rights

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to our processing of your information, you may have the right to:

Know the categories and specific pieces of personal information collected about you.
Know the sources, purposes and categories of recipients.
Request deletion, subject to legal exceptions.
Correct inaccurate personal information.
Receive eligible information in a portable form.
Opt out of a sale or sharing for cross-context behavioural advertising.
Limit certain uses of sensitive personal information, where applicable.
Exercise your rights without unlawful discrimination.

We do not sell personal information. We do not share it for cross-context behavioural advertising. We do not run advertising or advertising trackers.

Disclosing data to a provider to operate the service is different from sharing it for cross-context behavioural advertising.

Sections 2, 3, 8 and 9 describe our information categories, sources, purposes and recipients. Section 12 describes retention.

You may use an authorised agent to submit a request. We may need evidence of their authority and verification of your identity.

See the California Attorney General's CCPA guidance for more information.

16. How to exercise your rights

Email info@celestiastudios.com. Explain what you would like us to do and provide enough information to locate the relevant data.

For account requests, use your account email where possible. For public comments, include the original link or quoted text.

We may request limited information to verify your identity or authority. We will not request more information than is reasonably necessary.

We will respond within the period required by applicable law. If an extension or exception applies, we will explain it.

In the product you can delete saved projects and profiles, revoke share links and reset a saved research plan. To delete a report, email us. We delete it within 30 days of the request.

17. Children

Celestia Intelligence is a professional tool for adults. It is not directed at children.

We do not knowingly create accounts for children or collect personal information from them. If you believe a child has given us personal information, contact info@celestiastudios.com and we will remove it.

Public sources may contain posts by people whose ages we do not know.

18. Changes to this policy

We may update this policy when our practices, service or legal obligations change. We will update the effective date.

We will email account holders at their account address before a material change takes effect. We will also provide any other notice or obtain any consent required by law.

19. Contact

For privacy questions, rights requests or requests to remove a public quote, contact:

Celestia Entertainment FZ-LLC
Registered address: Yas Creative Hub, Yas South, Emirate of Abu Dhabi, United Arab Emirates, P.O. Box 769588
Email: info@celestiastudios.com
Website: celestiastudios.com

Our Terms of Service govern your use of Celestia Intelligence.