Privacy policy

Sotto Solutions ("we") provides Celato. This policy explains what personal data we process and why. Contact for all privacy matters: hello@sottosolutions.com.

For organizations using Celato, the organization is usually the controller of its users' data and we act as its processor under the Data Processing Agreement. For website visitors and for the account data we need to run our business, we are the controller.

1. What we process

Data	Why	How long
Email address, name (optional)	Your account, sign-in codes, service emails	Until the account is deleted
Organization name, members, roles, invitations	Running the organization's workspace	Until the organization is deleted
Protected-topic definitions and settings	Applying the organization's policy	Until changed or the organization is deleted (stored encrypted)
Message text being checked (when a user sends a message on a supported AI site and the cloud check is on)	Detecting sensitive information and suggesting a rewrite	Not stored. Processed in memory for the check, then discarded
Text of attached files (PDF, Word, Excel or text files a user attaches on a supported AI site). The file is read on the device; only its text is sent, and only when the cloud check is on	Detecting sensitive information before the file is uploaded	Not stored. Processed in memory for the check, then discarded. The file itself never reaches us
What the device found (type and position only) and a short device-generated summary of recent topics	Recognizing information spread over several messages	Not stored by us
Usage counters: per day, how many messages were checked, warned about or blocked, by category, and what the user did after a warning (numbers only, never message text). Linked to the user unless the organization turns on anonymous statistics; shown to the organization's admins	Admin statistics, plan limits	13 months, or sooner when the organization or the user's account is deleted
Extension access tokens (stored as hashes)	Connecting the extension	Until revoked, expired (90 days) or the account is deleted
Technical logs (request path, status, timing, error codes — never message text)	Security and reliability	30 days
Billing details	Subscriptions, through Paddle (Merchant of Record)	Held by Paddle; we keep the subscription status

On the device, the extension keeps the organization's keyword policy, content-free counters (the last 30 days, sent to us about once an hour) and an encrypted history of recent topics, readable only by the extension. Removing the extension removes them.

2. Legal bases

Performance of a contract (providing the Service); legitimate interests (security, preventing abuse, improving the Service, business communications); legal obligations (for example tax, through Paddle); and, where we act for an organization, that organization's instructions.

3. Who receives data (subprocessors)

• Google Cloud (Google Cloud EMEA Ltd): hosting, database and backups in the European Union (Belgium).
• AI processing provider (United States): AI processing of cloud checks. It receives only the text being checked, does not use it to train models, and may keep it for a limited period under its terms for abuse and security monitoring. We give its name to customers on request.
• Paddle (Paddle.com Market Ltd, United Kingdom): payments, invoicing and tax as Merchant of Record.
• Resend: delivery of service emails (sign-in codes, invitations, notices), EU region.

We do not sell personal data, and none of these providers may use it to train AI models. Transfers outside the EU rely on the providers' Standard Contractual Clauses. Israel, where we operate, is recognized by the European Commission as providing adequate protection.

4. Security

Encryption in transit and at rest; protected-topic definitions additionally encrypted per organization; message text never written to logs; least-privilege access; sign-in with one-time codes. See Security.

5. Your rights

You can ask to access, correct, delete, restrict or object to processing of your data, and for a copy of it. You can delete your account yourself on the Account page; for anything else write to hello@sottosolutions.com. If an organization manages your account, we may forward your request to it. You may also complain to a data protection authority.

6. Deletion

Deleting an account removes it immediately, together with organizations where it was the only member. Database backups are kept for 7 days and then overwritten. Paddle keeps billing records as the law requires.

7. Cookies

We use only cookies that are strictly necessary: the sign-in session and the language choice. No advertising or analytics cookies.

8. Children

Celato is for businesses and is not directed at anyone under 18.

9. Changes

We will post changes on this page and notify account admins of material changes.