How Ceisium handles data.

This policy applies to ceisium.com, the Ceisium Search web application, the Ceisium Search API, and related support and operational services. In this policy, “Ceisium,” “we,” and “us” refer to the company. “Ceisium Search” refers to the search product.

A customer controls the websites and content that it asks Ceisium Search to crawl and index. The customer is responsible for having a lawful basis to make that content available and for giving notices to its own users when required. Ceisium processes that customer content only for the purposes described in this policy and the applicable service terms.

Ceisium does not sell personal information. Ceisium does not operate an advertising network. Ceisium does not use customer content to train a Ceisium foundation model.

• Provide accounts, workspaces, crawling, indexing, search, billing, and support.
• Authenticate requests, enforce project boundaries, and prevent fraud or abuse.
• Monitor availability, investigate errors, recover failed work, and protect the service.
• Measure product use and improve setup, search quality, performance, and documentation.
• Send service messages such as invitations, security notices, and billing information.
• Meet legal duties, resolve disputes, and enforce the service terms.

We use service providers only where they help us operate the website, Ceisium Search, or the business. Their processing is governed by their agreements and privacy terms. We disclose provider categories because they explain the relevant data flow without publishing internal system design.

A provider can process data in a country other than the country where you live. We select providers that publish privacy and security terms. We can change providers as the product changes and will update this policy when a change materially affects the processing described here.

• infrastructure and hosting providers for website delivery, security, crawling, storage, queues, and email delivery.
• authentication providers when a user signs in.
• payment providers for checkout, subscriptions, invoices, payment status, and usage billing.
• analytics and reliability providers for product analytics, error investigation, metrics, traces, and bounded operational logs.
• model-processing providers for defined product operations when a requested feature needs that processing.

Some Ceisium Search features can send a limited part of public page content, a search query, candidate result text, or setup context to a model-processing provider when the requested feature needs that processing. The provider processes the information to return the requested result. Its business terms and data controls apply to that processing.

Customers should avoid indexing data that is not suitable for this processing. Ceisium limits the information sent to the part needed for the requested operation. The exact product implementation can change without changing the purpose described in this policy.

Ceisium uses first-party cookies for authentication, security, product operation, analytics consent, anonymous analytics identity, and session continuity. The website does not need third-party advertising cookies to provide the service.

Use “Analytics preferences” in the site footer to review or change the optional analytics choice. Ceisium also respects an enabled Global Privacy Control signal by disabling optional browser analytics. Essential storage used for sign-in, security, or a requested service remains active because the website and product need it to work.

We keep account and customer data while an account or service remains active and for the limited period needed to provide recovery, billing, security, support, and legal records. Operational logs and detailed analytics normally have shorter retention than account and billing records. Aggregated information that no longer identifies a person or customer can remain for product measurement.

When a customer archives or deletes a project or source, access can end before all copies are removed from recovery systems. Backups, fraud-prevention records, payment records, and records needed for a legal claim can remain for their normal protection or legal period. A provider can also retain limited records under its own lawful duties.

You can ask about the retention that applies to a specific account or request deletion where applicable. We can require identity verification and can keep information when law, security, billing, or a valid legal claim requires it.

Ceisium uses administrative, technical, and organizational measures intended to protect personal data and customer content. These measures include access controls, project boundaries, protected credentials, monitoring, and procedures for responding to security events. No online service can promise absolute security.

Customers are responsible for keeping account access and Search keys secure, selecting the correct key type, restricting browser keys to approved origins, and rotating a credential that may have been exposed. Do not send a password, private key, private connection string, or full payment-card detail by email.

Depending on your location and the applicable law, you can have a right to ask for access, correction, deletion, restriction, portability, or an objection to some processing. You can also have a right to withdraw consent where consent is the basis for processing and to complain to a local data-protection authority.

We can ask for information needed to verify your identity and protect the account. A request can have legal limits. If Ceisium processes personal data only on behalf of a customer, we can direct the request to that customer because it controls the data.

Ceisium and its providers can process information in countries where they or their systems operate. Those countries can have data-protection rules that differ from the rules where you live. Where required, Ceisium relies on a lawful transfer mechanism and provider commitments intended to protect the transferred information.

Ceisium Search is a business service and is not directed to children. If you believe a child has provided personal data to Ceisium, contact us so we can review and remove it where required.

We can update this policy when the product, provider categories, business, or legal requirements change. The date at the top shows the latest revision. If a change materially affects how active customers’ data is used, we will provide an appropriate notice through the product or email.