Privacy Policy

1. Introduction

MotoTech, Inc. d/b/a Celara ("Celara," "we," "us," or "our") operates the Catalyst platform (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your name, email address, and authentication credentials. If you sign in via Google OAuth, we receive your name, email address, and profile picture from Google.

2.2 Chat and Conversation Data

We store the history of your conversations with the Service, including prompts, responses, and any files or data you provide during a session. This data is retained to provide you with continuity and to improve the Service.

2.3 Connected Service Data

When you connect third-party services (such as Google Workspace, Trello, QuickBooks, or other integrations), we access data from those services on your behalf using OAuth tokens you authorize. We use a token passthrough architecture—your OAuth access tokens are used in real time to query connected services and are not permanently stored by Celara.

2.4 Usage and Log Data

We automatically collect information about how you interact with the Service, including IP address, browser type, device information, pages visited, and timestamps.

3. How We Use Your Information

• To provide, operate, and maintain the Service
• To process your queries by sending them to AI providers you designate (see Section 4)
• To store your conversation history for continuity
• To connect to third-party data sources you authorize via OAuth
• To authenticate your identity and manage your account
• To monitor usage, detect security incidents, and prevent fraud
• To comply with legal obligations

4. Third-Party AI Providers

The Service routes your prompts and conversation data to third-party AI model providers designated by you or your organization. These may include, but are not limited to:

• Anthropic (Claude)
• OpenAI (GPT models)
• Amazon Web Services (AWS Bedrock)
• Microsoft Azure (Azure OpenAI Service)
• Open-source models self-hosted by your organization

The choice of AI provider is configured by you or your organization’s administrator. Each provider processes data according to its own privacy policy and terms of service. We recommend reviewing the privacy practices of your selected provider(s).

5. Third-Party Integrations

When you connect external services (e.g., Google Workspace, Trello, QuickBooks Online), you grant the Service permission to access specific data via OAuth. We request only the minimum scopes necessary for the functionality you use. We do not store your OAuth credentials—tokens are passed through in real time and are not persisted on our servers.

Data retrieved from connected services is used solely to respond to your queries and is subject to the data retention practices described in Section 7.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share your data:

• With AI providers you or your organization designate, as described in Section 4
• With connected services you explicitly authorize via OAuth
• With service providers who assist in operating the Service (e.g., cloud hosting, infrastructure)
• To comply with law, respond to legal process, or protect our rights, property, or safety
• In a business transfer, such as a merger, acquisition, or sale of assets

7. Data Retention

We retain your account information and conversation history for as long as your account is active or as needed to provide the Service. You may request deletion of your data at any time by contacting us at catalyst@celaralabs.com. Upon receiving a verified deletion request, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

8. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict certain processing
• Request portability of your data
• Withdraw consent at any time

To exercise any of these rights, contact us at catalyst@celaralabs.com.

10. Google API Services User Data Policy

Catalyst’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to the Google data necessary to provide the features you use
• We do not use Google user data for serving advertisements
• We do not allow humans to read your Google data unless: (a) we have your explicit consent, (b) it is necessary for security purposes, (c) it is required by law, or (d) the data is aggregated and anonymized for internal operations
• We do not transfer Google user data to third parties except as necessary to provide the Service, as required by law, or with your explicit consent

11. Children’s Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 18, we will delete it promptly.

12. International Data Transfers

Your data may be processed in the United States and other countries where our service providers operate. By using the Service, you consent to the transfer of your data to countries that may have different data protection laws than your jurisdiction.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at: