Privacy, in plain language.

Celorus is a product of Celorus AI Technologies Private Limited, Gurugram, India. "We" on this page means that company.

If you are a person in the record, see the notice.

What happens to a question

When you ask Celorus a question, the text of that question is processed by a large-model provider to select the right sections of the record before your answer is assembled. What travels is the question, never your files.

The plugin, before you sign in

One question before you sign in. When the research skill asks whether a name is on the record, that check is free and anonymous. Each check we answer is logged as one line: the name asked, the kind you suggested (company or person), whether the record held it, our own internal id for the match when there was one, and the time. We keep these lines for twelve months, to steer what the record ingests next, and then delete them. Nothing about you rides the line: no address, no account (there is none before sign-in), no device or browser detail, and no record of your workspace or searches. This check is the only thing the plugin sends anywhere before an account is connected.

Once an account is connected

Sign in, and we hold four things. Your account email. The artifacts you generate, together with the request text that asked for them. A usage line for every call the plugin makes to our servers, with your account on it. And when you ask about a company the record does not yet hold, the query text of that ask.

We hold them for two plain reasons: the asks tell us what the record should ingest next, and the usage tells us whether the product is working. We keep these for as long as your account exists. To have any of it deleted, write to tech@celorus.com and a person will delete it. If you pay for a plan, we also keep a billing record, and the law has us keep part of it longer, as paying for a plan explains.

The rest stays yours, signed in or not. We never see your mail, your calendar, your CRM, or any file outside your desk. If you connect your desk's storage in Google Drive, our server reads your desk's own files only while it works on them, as the next section explains. Your conversation stays in your assistant; the only thing that reaches us is the calls listed above. The plugin carries no tracker and no install id.

Your Google account and your desk in Drive

When you connect Celorus to Google, Google shows you its own "Allow Celorus" screen. We ask for two things and nothing more:

• Sign-in: your email address, so we know it is you.
• Your desk's files in Google Drive: Celorus can see and change only the files Celorus itself creates in your Drive, which together make up your desk. Every other file in your Drive is invisible to us, including a file you drop into the desk folder by hand. (Google calls this the drive.file permission.)

We do not ask for your Gmail, your calendar or your contacts.

What we do with it:

• We use it only to run your desk for you: to make and update its pages, and to run its overnight update.
• Our server reads your desk files only while it makes your pages or runs the overnight update, and keeps no copy. What we hold is a sealed record that your storage is connected, deleted when you disconnect, and a log of connect and disconnect events with no file content.
• No AI model of ours reads your desk. The pages go to your own AI assistant, the one you chose, and nowhere else. We do not use your desk to train AI models.
• We never sell it, never use it for advertising, and never pass it to anyone else, except where the law requires us to.
• No one at Celorus reads your desk unless you ask us to (to fix a problem, say), we must for security, or the law requires it.
• The key Google gives us to reach your desk is stored encrypted on our server. Your laptop never holds it, and nothing from your desk is written to our logs.

Disconnecting. One click in your Celorus dashboard ends our access: we delete the stored key and ask Google to cancel it. You can also remove Celorus at any time from your Google Account, under Security, "Your connections to third-party apps & services" (myaccount.google.com/connections). Sign-in and your desk's storage share one Google connection, so disconnecting removes both; you can sign in with Google again whenever you like. Your desk's files stay in your Drive. They are yours.

Celorus's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Paying for a plan

You enter your card, bank or UPI details with Paddle or Razorpay, not with us, and we never see your full card number.

Paid in US dollars. Paddle.com, our online reseller and Merchant of Record for orders in US dollars, takes your payment and handles your details under its own privacy notice. Paddle shares with us the purchase details we need to switch your plan on, such as your email, your country and what you bought.

Paid in Indian rupees. Razorpay processes your payment under its own privacy policy. We keep what goes on your GST tax invoice: your name or your firm's name, your billing address, your firm's GST number if it gives one, the plan, the amount and the date. We also keep the payment record Razorpay sends us: its reference, how you paid (the card network and its last four digits, your bank or wallet, or your UPI ID), and the email and phone number you gave at checkout.

We use what we keep only to run your plan and, for rupee payments, to bill you, issue GST invoices and credit notes, and handle refunds. We never sell it or use it for advertising. Indian tax and company law requires us to keep invoices and payment records for at least eight years after the financial year of the payment, and longer while a tax case about them is open, so they stay with us for that time, even after you close your account.

The website

The working-session form stores exactly what you type into it: your name, your work email, your firm, your role, and the AI tools your team uses. We use it to set up your working session and send occasional updates. To count visits, this site uses Cloudflare's cookieless analytics and nothing else: no other analytics and no advertising trackers.

Questions

Write to tech@celorus.com. A person answers.

To complain about how we handle your data, write to our grievance officer at grievance@celorus.com. Full details are on the contact page.