Legal
Privacy Policy
Last updated: 5 November 2026
This policy explains what personal data Celestium handles, why, and the choices you have. Celestium is a product of FLYSTACK SRL, which is the data controller.
1. Who is responsible
FLYSTACK SRL, CUI 49092767, Reg. Com. J2023000766347, Str. Dunării 178, Bragadiru, Teleorman 147030, Romania. Questions and requests go to [email protected].
2. What we collect
| Data | Examples | When |
|---|---|---|
| Account details | First and last name, email, and a securely hashed password. We never store your password itself. | When you create an account |
| Workspace details | Your workspaces, team roles and show membership | When you use teams and workspaces |
| Show content | Shows, formations, images, models, music, exports and the name, location and origin of a show | When you design in Celestium |
| AI requests | What you ask the AI features, their replies, and the show content they need to work | When you use AI features |
| Your show idea | The text you type in the prompt on our website | When you press send. See section 3 |
| Enquiries | Your name, work email, company and message | When you contact us |
| Technical data | IP address, browser, pages requested, and security and error logs | When you use the website or the app |
Please do not put sensitive personal data into your shows or AI requests.
3. Your show idea from the website
When you send a prompt from our website, your browser carries it to the sign-up page in the part of the web address that is not sent to servers. The app then saves it only in your browser, so it can show it to you after you sign up. It reaches our servers only if you choose to use it, for example by sending it to the AI designer. You can remove it at any time by pressing Dismiss.
4. Why we use it and our legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Running your account and giving you Celestium | Contract, Art. 6(1)(b) |
| Running the AI features you choose to use | Contract, Art. 6(1)(b) |
| Answering enquiries and arranging demos | Legitimate interest, Art. 6(1)(f), or steps before a contract, Art. 6(1)(b) |
| Keeping Celestium secure, preventing abuse and fixing errors | Legitimate interest, Art. 6(1)(f) |
| Meeting legal, tax and accounting duties | Legal obligation, Art. 6(1)(c) |
We do not sell your personal data. We do not use it for advertising, and we do not make decisions about you by automated means that have legal or similar effects.
5. Who we share it with
We use service providers who process data for us and only for these purposes:
| Provider | What for |
|---|---|
| Server and database hosting providers | Running the app and storing accounts and shows |
| Cloudflare | Network delivery and security |
| Bunny.net | Storing and delivering show files |
| Anthropic | Running AI features, when you use them |
| Cesium and Google | 3D map of the show site, when you open the map. They receive your IP address and the area being viewed |
| Google Fonts | Loading a typeface in the app. Google receives your IP address |
| Zoho | Email, when you write to us |
Other members of a workspace or show can see the content shared there, along with your name. We may also disclose data if the law requires it, or to protect our rights or the safety of others.
6. Transfers outside the EEA
Some providers may process data outside the European Economic Area, including in the United States. Where they do, we rely on safeguards such as the European Commission's standard contractual clauses or an adequacy decision.
7. How long we keep it
- Account and show data: while your account is active. After you ask us to close it, we delete or anonymise this data, unless we must keep it by law.
- Enquiries: as long as needed to answer you and for a reasonable follow-up period. The form on this website sends your enquiry to us by email, and sends you a short confirmation. It does not keep a copy anywhere else.
- Technical logs: for a short technical period.
- Data in your browser: until you clear it. See our Cookie Policy.
8. Security
We protect data with measures such as encrypted connections, hashed passwords and access limits. No system is completely secure, so we cannot guarantee absolute security.
9. Your rights
Under the GDPR you can ask to access, correct or delete your data, to restrict or object to how we use it, and to receive a copy in a portable format. Where we rely on consent, you can withdraw it at any time. To use these rights, email [email protected].
You can also complain to the supervisory authority. In Romania, this is the National Supervisory Authority for Personal Data Processing (ANSPDCP).
10. Children
Celestium is not intended for anyone under 16, and we do not knowingly collect their data. If you think we have, please contact us and we will delete it.
11. Changes to this policy
We may update this policy. We will post the new version here and change the date at the top.
12. Contact us
- Company FLYSTACK SRL
- Registration CUI 49092767, Reg. Com. J2023000766347
- Registered office Str. Dunării 178, Bragadiru, Teleorman 147030, Romania
- Email [email protected]
- Phone +40 749 901 100