Effective 2026-09-15
Legal
Privacy Policy
Contact: talenvyre@myseena.com
Privacy Policy
Effective September 15, 2026. Celesthread is operated by ORIZON SYSTEMS LLC. For privacy questions or requests, email talenvyre@myseena.com with “Celesthread privacy” in the subject. Do not send passwords, authenticator secrets or payment-card numbers.
Who the service is for
Celesthread is for adults 18 and older. Signup asks for a date of birth and agreement to the Terms and acknowledgment of this policy. The age screen uses information you provide; it is not identity verification. Do not create an account for a child or enter a child's information in a private profile. Contact us if you believe a child has provided personal information so we can investigate and arrange appropriate restrictions and removal.
Information we collect
| Category | Information and purpose | Who receives it |
|---|---|---|
| Account and security | Email, name, password hash, optional phone, MFA secret, sign-in provider identifiers, device/session identifiers, IP address and browser details; used for access and security | Hosting/database providers; enabled sign-in or verification providers |
| Age screen and agreements | Date of birth submitted for an adult age check; dated records of the passed age screen and policy acknowledgment. Signup does not separately retain that birth date; the birth profile later stores the date you enter for chart features | Hosting/database providers |
| Birth profile | Date, optional birth time, birthplace, coordinates, timezone and confidence notes; used to calculate and explain charts | Hosting/database providers; place-search provider when used; peers only through features and permissions you choose |
| Readings and reflection | Calculated charts, generated readings, Tideglass questions/replies, saved insights, moods, life events, optional journal text and questionnaire answers; used for requested reflection and personalization | Hosting/database providers; shared features only where you choose to share |
| Social features | Handle, profile fields, invitations, posts, messages, relationship reports, blocks and reports; used for chosen connections and moderation | Chosen recipients and audiences; staff handling support, security or reports |
| Private profiles | Other adults' nickname, relationship label and birth details that you supply with authority to do so | Hosting/database providers; controlled by the creator and any enabled claiming/sharing flow |
| Contacts and location | Selected contact matching tokens and permissions; optional approximate area, radius and activities for local discovery | Matching service and people who can view an opted-in discovery listing |
| Billing | Subscription status, plan, provider, purchase identifiers and entitlement/usage records | Hosting/database providers and the payment provider when used |
| Operations | Support correspondence, abuse reports, audit records, request/error logs and usage counters | Staff and infrastructure providers needed to operate and protect the service |
Optional journal, contact matching, location discovery and social features are choices. Declining them can limit the corresponding feature. Privacy settings do not make information anonymous or stop the processing needed to provide a feature you request. Contact matching stores keyed matching tokens rather than a bulk address book; these tokens can still relate to people and are not treated as anonymous. The service does not continuously track background GPS location.
Automated reflection, advertising and analytics
Chart calculations run through deterministic software. Narrative readings, including Tideglass, are assembled from chart signals and written templates. This version does not send your Tideglass questions or journals to an external generative AI model. Optional journal inclusion is requested separately for the relevant reflection. Automated text is not a human assessment, diagnosis or prediction of certain events.
We do not sell personal information or share it with advertising networks for cross-context behavioral advertising. We do not use journal or birth-profile information for advertising. No external product-analytics adapter is enabled in this release. Essential session cookies and infrastructure security/operational processing still occur; there is no advertising-cookie opt-in required to use the core service.
Providers and where information is processed
Vercel hosts the application and handles requests and operational logs. Neon hosts the PostgreSQL database; the verified production database region is AWS us-west-2 in the United States. Cloudflare provides domain/DNS services. Requests or support information may also be processed in other locations used by the relevant providers.
Optional integrations process data only when enabled and used: Apple or Google for sign-in; Twilio for phone verification; Resend or Zoho ZeptoMail for transactional email, depending on the configured delivery service; and Stripe for web payments and subscription management. Payment-card details are entered with the payment provider; Celesthread does not store full card numbers. Apple/Google native purchases are not available in this version. A provider listed here is not a promise that its feature is currently available.
When configured place search is used, Google Maps or OpenStreetMap Nominatim receives the search text. Entering coordinates manually does not call that search provider. We do not send journals or private conversations to geocoding services.
Providers may keep their own security, billing or legally required records. Their retention is separate from deleting an account in Celesthread. We may disclose information when reasonably necessary to respond to a valid legal request, protect people and the service, or complete a business transfer subject to applicable privacy obligations. We do not claim that all providers or international transfers are covered by one certification or uniform retention period.
Retention and deletion
Account and feature records generally remain while you keep the account or until you remove content using an available control. Successful account deletion removes the account and related active-database content, including journals, Tideglass history, private profiles you created and associated messaging/comparison records. Some shared conversation records are removed for both participants. Copies another person saved outside the service cannot be recalled.
Audit rows are detached from the account when it is deleted, but a detached row is not necessarily anonymous: some older event metadata can contain identifiers. The service currently has no automatic expiry for these audit records. Support correspondence and provider security/billing records may remain separately; privacy requests can ask us to review those records and explain any reason for keeping them.
The database has a six-hour recovery-history setting. Separately retained backup branches can contain older information and do not inherit that six-hour expiry. At this policy's effective date, an older backup branch remains and no universal automatic expiry has been established for retained branches. Deleting an active account does not erase those copies immediately. Do not assume a deleted record disappears from every backup within six hours. Contact us to request review of retained copies; any restoration requires a separate operational review of prior deletion requests before restored data is used.
Cancel a paid subscription with its billing provider before deleting your account. Account deletion does not cancel an external subscription. The service accepts text and structured information; it does not currently offer general personal photo, video or document uploads.
Your choices and requests
You can correct profile information, change optional settings, remove supported content, export available account data and delete your account in Account settings. The current download covers core account, birth, readings, journal, connection, questionnaire and selected social records. It is not a complete export of every operational or newer feature record. Contact us for additional access, correction, deletion, portability, objection or restriction requests, and to withdraw optional permission. Changing a setting does not undo processing already completed.
If you cannot sign in, email the privacy contact above. We verify authority using the account and request context before disclosing or deleting data; we may ask for proportionate additional information. Never email a password or authenticator secret. You may use an authorized agent where applicable. Rights and exceptions depend on location and applicable law; we will explain the outcome and any available appeal or complaint route. You may contact your relevant privacy regulator. We do not penalize you for making a privacy request.
Security and updates
We use access controls and security safeguards, but no service can guarantee absolute security. Material changes will be reflected in an updated effective date and notice through the service or an appropriate contact channel. A different AI, advertising, upload or collection flow needs a revised notice before it is introduced.
ZeptoMail delivery receives the recipient address and message content for the requested transactional email. Celesthread disables ZeptoMail open and click tracking.