Last updated · July 28, 2026

Privacy Policy

Information we collect

  • Account information such as your name, email address, authentication identifiers, profile, brand, and workspace settings.
  • Billing and entitlement records from Stripe, including purchase, subscription, refund, and access status. We do not store full payment-card numbers.
  • Information you provide to build demos, including business names, websites, services, brand assets, instructions, and generated demo content.
  • Demo interaction records such as views, accepted chat turns, voice-call metadata and transcripts, quote or missed-call interactions, CTA clicks, and privacy-safe request diagnostics.
  • Usage, device, security, support, and operational logs needed to run and protect the service.

How we use information

  • Authenticate accounts, process purchases, enforce access and capacity, and provide customer support.
  • Research, build, publish, serve, repair, and measure personalized demo hubs.
  • Send transactional and lifecycle messages about account access, purchases, security, demos, and the Client Accelerator program.
  • Detect abuse, diagnose failures, improve reliability, and comply with legal obligations.

What Ciela does not store

  • Ciela does not operate customer outreach campaigns, sender mailboxes, customer contact lists, or reply inboxes.
  • Ciela does not retain customer SMTP or IMAP credentials for an outreach-sending product.

Providers and sharing

  • We share data only as needed with processors that operate the supported service, including Supabase, Stripe, Resend, Vapi, AI model providers, hosting, monitoring, and support infrastructure.
  • We may disclose information when required by law, to protect users or the service, or as part of a corporate transaction. We do not sell personal information.

Retention and security

  • We retain data for as long as needed to provide the service, maintain billing and entitlement evidence, secure accounts, resolve disputes, and meet legal duties. Minimized raw webhook payloads have a 30-day deletion deadline.
  • We use access controls, encryption in transit, least-privilege credentials, and operational monitoring. No online service can guarantee absolute security.

Your choices

  • You can update supported profile, brand, and workspace settings in the product. You may request access, correction, export, or deletion of personal information, subject to legal and fraud-prevention retention requirements.
  • Marketing preferences can be changed through the links in lifecycle messages. Transactional messages necessary for purchases, access, and security may still be sent.

Contact

  • Send privacy requests to support@ciela.ai with the subject “Privacy Request.” We may verify your identity before completing a request.