CelestiQ Terms of Use for Solstice

Effective date: July 27, 2026
Last updated: July 27, 2026

These Terms of Use (the "Terms") are a legal agreement between you and CelestiQ LLC ("CelestiQ," "we," "us," or "our") governing your access to and use of Solstice, including:

• the Solstice web application;
• the Solstice mobile applications for iOS and Android;
• the Solstice desktop applications for macOS and Windows;
• related application programming interfaces, support services, updates, and communications; and
• other CelestiQ services that link to these Terms.

Together, these are the "Services."

Please read these Terms carefully. By accessing or using the Services, clicking to accept these Terms, or downloading a Solstice application, you agree to these Terms. If you do not agree, do not access or use the Services.

1. Business use and agreement priority

Solstice is a business service. Access is limited to individuals authorized by CelestiQ or by a CelestiQ customer organization (your "Organization"). Creating authentication credentials does not, by itself, authorize access to the Services or to an Organization's workspace.

Your Organization may have a customer agreement, order form, statement of work, data processing addendum, acceptable-use policy, or other written agreement with CelestiQ (collectively, a "Customer Agreement"). If a Customer Agreement applies to your use of the Services, the Customer Agreement controls over these Terms to the extent of a conflict. Your Organization's policies and instructions may also apply to you.

If you accept a Customer Agreement or obtain Services on behalf of an Organization, you represent that you have authority to bind that Organization. Otherwise, these Terms bind you only in your individual capacity as an authorized user.

2. Eligibility and geographic availability

You must be at least 18 years old and located in the United States to use the Services. You may use the Services only if you can form a binding contract and are not prohibited from receiving the Services under applicable law.

The Services are not directed to children. You may not permit a person under 18 to access the Services through your account.

3. Accounts and access

You agree to:

• provide accurate and current account information;
• use only the account assigned to you;
• protect your credentials, devices, authentication factors, and recovery methods;
• not share an account or permit another person to impersonate you;
• promptly notify support@celestiq.ai and your Organization of suspected unauthorized access; and
• comply with your Organization's access, security, records-management, and acceptable-use requirements.

You are responsible for activity performed through your account to the extent caused by your action or failure to use reasonable security measures. CelestiQ may require identity, email, or multi-factor verification and may refuse or revoke access if an account is not authorized for the applicable Organization or workspace.

4. Organization administration and monitoring

If you use Solstice through an Organization, the Organization may administer your account and workspace. Subject to its permissions, applicable law, and any Customer Agreement, authorized Organization administrators may:

• provision, suspend, or remove your access;
• view your conversations, feedback, usage statistics, and AI-generated evaluations;
• configure workspace features, modes, instructions, integrations, and retention settings; and
• receive information about security, compliance, and use of the Services.

Organization administrators are not provided access to original user-uploaded files through Solstice's administrative tools. However, conversations and AI-generated responses may quote, summarize, describe, or otherwise reveal information derived from an uploaded file. Administrators who can view a conversation may therefore see information derived from that file.

Do not use an Organization account for personal communications or content you do not want handled under the Organization's policies.

5. Limited license

Subject to these Terms and any Customer Agreement, CelestiQ grants you a limited, revocable, non-exclusive, non-transferable, non-sublicensable license to access and use the Services during the period you remain an authorized user, solely for your Organization's authorized internal business purposes.

Solstice applications are licensed, not sold. Except where applicable law prohibits the restriction, you may not:

• copy, modify, distribute, sell, lease, sublicense, or create derivative works from the Services;
• reverse engineer, decompile, disassemble, or attempt to discover source code, models, prompts, security mechanisms, or nonpublic interfaces;
• access the Services to build or train a competing product or model;
• remove proprietary notices or misrepresent the origin or ownership of the Services;
• use scraping, bots, unauthorized automation, or other means that unreasonably burden or circumvent the Services; or
• use the Services beyond the scope authorized by CelestiQ or your Organization.

You may make copies of desktop software only as reasonably necessary for authorized installation, backup, or use. Open-source components are governed by their applicable licenses.

6. Customer Content

"Customer Content" means prompts, instructions, messages, feedback, files, images, documents, data, and other material submitted to the Services by you or your Organization.

As between CelestiQ and you or your Organization, you or your Organization retain ownership of Customer Content. You grant CelestiQ and its service providers a worldwide, non-exclusive, limited right to host, copy, transmit, process, display, transform, and otherwise use Customer Content only as reasonably necessary to:

• provide, secure, maintain, support, and troubleshoot the Services;
• generate requested responses and artifacts;
• enforce these Terms and applicable Customer Agreements;
• comply with law; and
• exercise the de-identified improvement rights described below.

You represent that you are authorized to submit Customer Content and grant these rights. You are responsible for Customer Content and for determining whether it is appropriate and lawful to submit it.

6.1 De-identified improvement data

CelestiQ does not use original uploaded files or customer-identifying information to train or fine-tune AI models.

CelestiQ may use de-identified prompt text, prompt patterns, subject-matter topics, feedback, and AI quality-evaluation results to train, fine-tune, evaluate, and improve CelestiQ systems and models. Before doing so, CelestiQ takes steps designed to remove direct personal identifiers and customer-specific identifiers and to prevent the information from being associated with a particular person or Organization.

CelestiQ may retain and use aggregated or de-identified information that cannot reasonably be linked to a person or Organization. CelestiQ will maintain such information in de-identified form and will not attempt to reidentify it except as permitted by law to test the effectiveness of de-identification safeguards.

6.2 Feedback about the Services

If you provide suggestions or ideas about the Services that are separate from Customer Content, you grant CelestiQ a perpetual, irrevocable, worldwide, royalty-free right to use and incorporate that feedback without restriction or payment. This does not permit CelestiQ to identify you or your Organization publicly without permission.

7. AI outputs and generated materials

The Services use artificial intelligence and may produce text, calculations, summaries, recommendations, citations, code, images, documents, visualizations, or other outputs ("Outputs"). AI systems can produce incomplete, inaccurate, outdated, misleading, biased, or offensive information. Outputs may appear plausible even when incorrect and may not be unique.

You agree to:

• independently review and verify Outputs before relying on, publishing, distributing, or acting on them;
• use qualified human review for decisions that could materially affect a person, safety, legal rights, finances, employment, or regulated activity;
• confirm citations, calculations, specifications, compatibility, and product information against authoritative sources; and
• comply with applicable laws, professional duties, and your Organization's review and approval processes.

Solstice does not provide legal, medical, financial, accounting, engineering, safety, or other licensed professional advice. Outputs are informational tools and are not a substitute for qualified professional judgment.

To the extent permitted by law and subject to any Customer Agreement, as between CelestiQ and you or your Organization, CelestiQ assigns to you or your Organization any rights CelestiQ may have in Outputs generated specifically in response to Customer Content. This assignment does not include CelestiQ technology, templates, models, software, prompts, methods, or pre-existing materials, and does not guarantee that an Output is protectable, exclusive, accurate, or free of third-party rights. Similar or identical Outputs may be generated for others.

8. Acceptable use

You may not use the Services to:

• violate any law, regulation, court order, contractual obligation, or third-party right;
• infringe intellectual property, privacy, publicity, confidentiality, or other rights;
• submit information that you or your Organization are not authorized to provide;
• generate or distribute malware, phishing content, credential theft, destructive code, or instructions intended to compromise systems or accounts;
• bypass access controls, tenant boundaries, rate limits, safety measures, or security testing restrictions;
• probe, scan, or test vulnerabilities without CelestiQ's prior written authorization;
• harass, threaten, defame, exploit, discriminate against, or facilitate harm to another person;
• create deceptive impersonations, fraudulent materials, spam, or unlawful surveillance;
• use Outputs as the sole basis for high-impact decisions concerning employment, credit, housing, insurance, education, healthcare, legal services, or access to essential services;
• develop weapons or engage in activity prohibited by export-control or sanctions laws; or
• interfere with the operation, integrity, availability, or security of the Services.

Unless CelestiQ expressly authorizes it in a separate written agreement, you must not submit:

• protected health information subject to HIPAA or similar health-privacy laws;
• payment-card numbers, bank-account credentials, or payment-authentication data;
• Social Security numbers, government identification numbers, passwords, access tokens, private cryptographic keys, or authentication secrets;
• biometric templates, precise geolocation, information about children, classified information, or export-controlled technical data; or
• other highly sensitive or regulated information unnecessary for the authorized business purpose.

CelestiQ does not collect user payment information through Solstice. Customer organizations are billed outside the Services under their Customer Agreements.

9. Third-party services and content

The Services may interoperate with or provide access to third-party AI providers, authentication services, hosting platforms, application stores, operating-system services, speech services, websites, content, and integrations. Third-party services may be governed by separate terms and privacy notices.

CelestiQ is not responsible for third-party services outside its control. Links and integrations do not constitute an endorsement. You are responsible for obtaining any rights or accounts required to use an integration and for complying with applicable third-party terms.

10. Privacy

CelestiQ's Privacy Policy explains how personal information is collected, used, disclosed, retained, and protected. It is available at the public privacy-policy URL displayed in the Services and is incorporated into these Terms by reference for notice purposes. If there is a conflict concerning personal-information processing, an applicable Customer Agreement or data processing addendum controls, followed by the Privacy Policy.

11. Service changes, availability, and beta features

CelestiQ may update, improve, limit, suspend, or discontinue features to maintain security, comply with law, respond to third-party changes, or improve the Services. CelestiQ will provide notice of material reductions in paid Services when required by a Customer Agreement.

The Services may occasionally be unavailable because of maintenance, outages, network conditions, third-party failures, security events, or circumstances beyond CelestiQ's reasonable control.

Features identified as beta, preview, experimental, evaluation, or pre-release may be incomplete, change without notice, and be subject to additional limitations. Do not use such features for production-critical activity unless CelestiQ expressly authorizes that use.

12. Support, updates, and device requirements

You are responsible for compatible devices, operating systems, internet access, and carrier or data charges. CelestiQ may require installation of updates for continued access, security, compatibility, or support.

Support is available through support@celestiq.ai and as otherwise provided in a Customer Agreement. CelestiQ is responsible for maintenance and support of its applications to the extent required by applicable law or a Customer Agreement; an application marketplace has no obligation to provide maintenance or support unless its own terms state otherwise.

13. Suspension, termination, and account deletion

You may stop using the Services at any time. You may initiate account deletion through the Delete Account control in Settings or contact support@celestiq.ai. Deleting an account is permanent and removes access to the Services. Deletion is subject to limited retention for backups, security, fraud prevention, legal obligations, legal holds, dispute resolution, and de-identified information as described in the Privacy Policy.

Your Organization may suspend or terminate your access. CelestiQ may suspend, restrict, or terminate access if:

• you are no longer authorized by the applicable Organization;
• you violate these Terms, a Customer Agreement, or applicable law;
• your use creates a security, legal, or operational risk;
• suspension is needed to prevent harm or investigate suspected misuse; or
• the applicable Customer Agreement expires or terminates.

Where reasonable, CelestiQ will provide notice and an opportunity to cure, but may act immediately when necessary to protect the Services, customers, users, or third parties.

Upon termination, the license granted to you ends immediately. Sections that by their nature should survive will survive, including Sections 6 through 10 and 13 through 22.

14. CelestiQ intellectual property

CelestiQ and its licensors own the Services and all related software, interfaces, designs, models, workflows, documentation, trademarks, logos, and technology, excluding Customer Content and rights assigned in Outputs under Section 7. No rights are granted except the limited license expressly stated in these Terms.

"CelestiQ," "Solstice," associated logos, and product names are trademarks or service marks of CelestiQ. You may not use them in a manner that suggests endorsement, affiliation, or ownership without written permission.

15. Disclaimer of warranties

TO THE MAXIMUM EXTENT PERMITTED BY LAW, AND EXCEPT FOR EXPRESS WARRANTIES IN AN APPLICABLE CUSTOMER AGREEMENT, THE SERVICES AND OUTPUTS ARE PROVIDED "AS IS" AND "AS AVAILABLE." CELESTIQ AND ITS LICENSORS DISCLAIM ALL EXPRESS, IMPLIED, AND STATUTORY WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, ACCURACY, QUIET ENJOYMENT, AND WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

CELESTIQ DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE OF HARMFUL COMPONENTS; THAT DATA WILL NEVER BE LOST; OR THAT OUTPUTS WILL BE ACCURATE, COMPLETE, UNIQUE, OR SUITABLE FOR A PARTICULAR USE.

Some jurisdictions do not permit certain warranty exclusions, so some exclusions may not apply to you.

16. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, CELESTIQ AND ITS AFFILIATES, LICENSORS, AND SERVICE PROVIDERS WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, BUSINESS, GOODWILL, USE, OR DATA, ARISING FROM OR RELATING TO THE SERVICES OR THESE TERMS, EVEN IF ADVISED THAT SUCH DAMAGES WERE POSSIBLE.

EXCEPT FOR LIABILITY THAT CANNOT LEGALLY BE LIMITED, CELESTIQ'S TOTAL AGGREGATE LIABILITY ARISING FROM OR RELATING TO THE SERVICES OR THESE TERMS WILL NOT EXCEED THE GREATER OF:

1. ONE HUNDRED U.S. DOLLARS (US $100); OR
2. THE AMOUNT PAID TO CELESTIQ UNDER THE APPLICABLE CUSTOMER AGREEMENT FOR THE SERVICES GIVING RISE TO THE CLAIM DURING THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY.

If a Customer Agreement contains a different liability allocation, that allocation controls for claims governed by that Customer Agreement. The limitations in this Section apply to the fullest extent permitted by law and regardless of the legal theory, but do not limit liability for fraud, willful misconduct, or other liability that applicable law does not permit the parties to limit.

17. Indemnification

To the extent permitted by law, you agree to defend, indemnify, and hold harmless CelestiQ and its affiliates, officers, employees, and agents from third-party claims, damages, losses, liabilities, and reasonable legal expenses arising from your unlawful Customer Content, your material violation of these Terms, or your infringement of a third party's rights.

This Section does not require you to indemnify CelestiQ for CelestiQ's own negligence, willful misconduct, or violation of law. If a Customer Agreement includes indemnification obligations covering the same claim, the Customer Agreement controls.

18. Governing law and disputes

These Terms are governed by the laws of the State of Wisconsin, without regard to conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Before filing a lawsuit, you and CelestiQ agree to make a good-faith effort for at least 30 days to resolve the dispute informally. Send a written notice describing the dispute and requested resolution to support@celestiq.ai and to the mailing address in Section 22.

Unless a Customer Agreement provides otherwise, any dispute arising from these Terms or the Services must be brought exclusively in the state courts located in Milwaukee County, Wisconsin, or the United States District Court for the Eastern District of Wisconsin. You and CelestiQ consent to personal jurisdiction and venue in those courts.

Nothing in this Section prevents either party from seeking temporary or injunctive relief to protect intellectual property, confidential information, accounts, systems, or security. These Terms do not require individual arbitration and do not waive a right to a jury trial except where a controlling Customer Agreement expressly provides otherwise.

19. Export controls and government use

You may not use, export, re-export, release, or transfer the Services in violation of United States export-control, sanctions, or import laws. You represent that you are not located in an embargoed jurisdiction and are not prohibited from receiving the Services under applicable restricted-party lists.

The Services and related documentation are "commercial products," "commercial computer software," and "commercial computer software documentation" as applicable. United States Government end users receive only the rights granted to other users under these Terms, consistent with applicable federal acquisition regulations.

20. Application marketplace terms

If you download a Solstice application from Apple App Store, Google Play, Microsoft Store, or another marketplace, the marketplace's terms also apply. If marketplace terms conflict with these Terms solely concerning use of that marketplace, the marketplace terms control to that extent.

20.1 Apple App Store terms

For a Solstice application obtained through Apple Inc. ("Apple"):

• These Terms are between you and CelestiQ, not Apple. CelestiQ, not Apple, is responsible for the application and its content.
• The license is limited to a non-transferable license to use the application on Apple-branded products you own or control, as permitted by the Apple Media Services Usage Rules, including permitted Family Sharing or volume purchasing.
• Apple has no obligation to provide maintenance or support for the application.
• If the application fails to conform to an applicable warranty, you may notify Apple, and Apple may refund any purchase price paid through Apple. To the maximum extent permitted by law, Apple has no other warranty obligation. CelestiQ is responsible for other claims attributable to a failure to conform to an applicable warranty, subject to these Terms and applicable law.
• CelestiQ, not Apple, is responsible for addressing claims concerning the application, including product-liability claims, claims that the application fails to comply with legal or regulatory requirements, and claims under consumer-protection, privacy, or similar laws.
• If a third party claims that the application or your possession and use of it infringes intellectual property rights, CelestiQ, not Apple, is responsible for investigation, defense, settlement, and discharge of the claim, subject to these Terms.
• You represent that you are not located in a country subject to a United States Government embargo or designated as supporting terrorism and are not listed on a United States Government prohibited- or restricted-party list.
• You must comply with applicable third-party terms when using the application.
• Apple and its subsidiaries are third-party beneficiaries of these Terms and may enforce the provisions applicable to Apple against you upon your acceptance.

21. Changes to these Terms

CelestiQ may update these Terms to reflect changes to the Services, law, security requirements, or business practices. CelestiQ will update the "Last updated" date and will provide additional notice of material changes through the Services, by email, through your Organization, or by another reasonable method.

Material changes will apply prospectively from the stated effective date. Continued use after the effective date constitutes acceptance where permitted by law. If you do not agree to revised Terms, you must stop using the Services. Changes to a Customer Agreement require the process stated in that agreement.

22. General terms and contact information

These Terms and any applicable Customer Agreement constitute the agreement governing your use of the Services. If a provision is unenforceable, it will be enforced to the maximum lawful extent and the remaining provisions will remain effective. CelestiQ's failure to enforce a provision is not a waiver. You may not assign these Terms without CelestiQ's written consent. CelestiQ may assign these Terms in connection with a merger, acquisition, corporate reorganization, or sale of assets, or to an affiliate.

Headings are for convenience only. "Including" means "including without limitation." Electronic communications and acceptances satisfy legal writing and signature requirements where permitted by law.

Questions, notices, and support requests may be sent to:

CelestiQ LLC
1350 N 60th Street
Milwaukee, WI 53208
United States
Email: support@celestiq.ai

CelestiQ Privacy Policy for Solstice

Effective date: July 27, 2026
Last updated: July 27, 2026

CelestiQ LLC ("CelestiQ," "we," "us," or "our") provides Solstice, an artificial intelligence platform for business users. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when authorized users access or use:

• the Solstice web application;
• the Solstice mobile applications for iOS and Android;
• the Solstice desktop applications for macOS and Windows;
• related application programming interfaces, support services, and communications; and
• other CelestiQ services that link to this Privacy Policy.

Together, these are referred to as the "Services."

This Privacy Policy does not replace a customer agreement, data processing addendum, or other contract between CelestiQ and a customer organization. If a customer agreement contains different or additional data-protection terms, that agreement will govern to the extent of the conflict.

1. Who may use the Services

Solstice is a business service. Access is limited to individuals authorized by CelestiQ or by a CelestiQ customer organization. Creating authentication credentials does not, by itself, entitle a person to use the Services or access a customer workspace.

The Services are intended only for users who are at least 18 years old and are located in the United States. The Services are not directed to children, and we do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has provided personal information through the Services, contact us at support@celestiq.ai.

2. CelestiQ's role and your organization

If you use Solstice through your employer or another organization (your "Organization"), your Organization may control your account and workspace. Depending on the circumstances:

• your Organization may act as the business or controller of personal information processed in its workspace, while CelestiQ acts as its service provider or processor; and
• CelestiQ may act as a business or controller for information used to operate, secure, support, and improve the Services, manage accounts, and meet legal obligations.

Your Organization's privacy notices, policies, and instructions may also apply to your use of Solstice. Questions about your Organization's privacy practices should be directed to your Organization.

Authorized administrators of your Organization may view employee or other authorized-user conversations, feedback, usage statistics, and AI-generated evaluations. Organization administrators are not provided access to original user-uploaded files through Solstice's administrative tools. However, a conversation or AI-generated response may quote, summarize, describe, or otherwise reveal information contained in an uploaded file. Organization administrators who can view that conversation may therefore see information derived from the file.

3. Personal information we collect

The information we collect depends on how you use the Services and which features your Organization enables.

3.1 Account, identity, and workspace information

We may collect:

• your name, email address, user identifier, company or Organization, role, and workspace or tenant association;
• account status, authentication events, verification status, and multi-factor authentication method;
• authorization groups, permissions, and tenant-access information; and
• account support, recovery, and security information.

CelestiQ does not receive or store your plaintext password. Authentication providers process credentials and security information according to their own terms and privacy notices.

3.2 Customer content and AI interaction data

We collect and process content submitted to or generated through the Services, including:

• prompts, questions, instructions, and other message content;
• AI-generated responses, conversation titles, citations, and generated visual or document artifacts;
• conversation history, folders, timestamps, selected AI mode, and session context;
• user preferences and custom instructions;
• ratings, comments, corrections, and other feedback;
• uploaded documents, images, spreadsheets, presentations, text files, and associated filenames, file types, sizes, and metadata;
• extracted text, summaries, embeddings, and other representations produced when processing uploaded files; and
• automated quality evaluations, classifications, and performance measurements relating to conversations and AI responses.

Please do not submit information that you or your Organization are not authorized to provide.

3.3 Device, application, network, and usage information

We may automatically collect:

• IP address and general network information;
• browser type, operating system, device type, application version, and platform;
• locale, language, time zone, and display or application preferences;
• request identifiers, dates and times of access, feature usage, API activity, response times, and error information;
• login, authentication, access-control, security, and audit events;
• conversation and feature usage statistics, such as the number of messages or requests and the AI modes used; and
• an app-installation identifier, push-notification token, notification preferences, and associated workspace identifier when you enable mobile notifications.

We do not use an advertising identifier to track you across apps or websites, and the Solstice apps do not contain third-party advertising.

3.4 Mobile permissions and device features

Solstice requests access to device features only when needed for a feature you choose to use:

• Camera and photo library. If you choose to capture or attach an image, Solstice accesses only the images you capture or select and uploads them for the requested conversation.
• Files and documents. If you choose to attach a file, Solstice accesses and uploads the selected file for processing.
• Microphone and speech recognition. If you activate voice input, your device captures speech and converts it to text. Depending on your operating system and configuration, Apple, Google, Microsoft, or another operating-system speech provider may process the audio. CelestiQ receives the resulting text as a prompt and does not intentionally retain the underlying audio recording.
• Notifications. If you enable notifications, we process an app-installation identifier, push token, platform, app version, locale, time zone, and workspace identifier to deliver service alerts and relevant notifications. Notification content is designed not to include prompts, filenames, or AI-response content on the lock screen.
• Biometric authentication. If you enable biometric app lock, fingerprint, facial, or other biometric templates remain under the control of your device and operating system. CelestiQ receives only the result of the device authentication attempt and does not collect or store biometric templates.

You may deny or later revoke these permissions through your device settings, although the corresponding feature may stop working.

Solstice does not request access to your precise location, contacts, call logs, SMS messages, health information, or advertising identifier.

3.5 Information stored locally

The Services use local device storage to support authentication, preferences, performance, offline use, and synchronization:

• the web and desktop experiences may use browser local storage, IndexedDB, cookies or similar essential storage, and authentication session storage;
• the mobile applications may store authentication tokens in secure device storage, preferences in application storage, and conversations, messages, attachments metadata, and queued actions in a local database for offline operation; and
• the desktop application may store local window size and position, update information, and files you choose to download.

Signing out, clearing application data, or uninstalling an application may remove some locally stored data. Uninstalling an application does not, by itself, delete information stored on CelestiQ's servers. See Section 10 for deletion choices.

3.6 Support and business communications

If you contact us, we may collect your name, contact information, Organization, message, attachments, and other information needed to respond. We may also retain records of support requests and service communications.

CelestiQ does not collect user payment-card numbers, bank-account credentials, payment-authentication data, or other user payment information through the Solstice mobile, web, or desktop applications. Customer organizations are billed outside the Services under their commercial agreements with CelestiQ.

4. Sources of personal information

We collect personal information:

• directly from you when you register, communicate with us, submit content, enable a feature, or use the Services;
• from your Organization when it authorizes, configures, or administers your account;
• automatically from your device, browser, application, and interactions with the Services;
• from authentication, hosting, AI, and other service providers used to operate the Services; and
• from authorized integrations configured by CelestiQ or your Organization.

5. How we use personal information

We may use personal information to:

• authenticate users and provide authorized access to the correct Organization and workspace;
• provide, operate, synchronize, and maintain the Services;
• process prompts and uploaded files and generate AI responses, summaries, search results, visuals, and other requested outputs;
• preserve conversation history, preferences, and continuity across supported devices;
• provide offline functionality and synchronize queued activity;
• deliver notifications and service-status communications that users request or enable;
• provide customer service and respond to questions or requests;
• monitor performance, troubleshoot errors, and improve reliability and usability;
• evaluate AI response quality and measure service usage;
• protect accounts, enforce tenant boundaries, prevent fraud and abuse, and investigate security incidents;
• enforce our agreements and acceptable-use requirements;
• comply with law, legal process, and regulatory obligations; and
• establish, exercise, or defend legal claims and protect the rights and safety of CelestiQ, our customers, users, and others.

We do not use personal information for third-party behavioral advertising.

6. De-identified data and AI improvement

CelestiQ does not use original uploaded files or customer-identifying information to train or fine-tune AI models.

We may use de-identified prompt text, prompt patterns, subject-matter topics, feedback, and AI quality-evaluation results to train, fine-tune, evaluate, and improve CelestiQ systems and models. Before using this information for those purposes, we take steps designed to remove direct personal identifiers and customer-specific identifiers and to prevent the information from being associated with a particular person or Organization.

We may also create aggregated or de-identified statistics about use, reliability, and response quality. We maintain and use de-identified information in de-identified form and do not attempt to reidentify it except as permitted by law to test whether our de-identification processes are effective.

Because users control what they enter into prompts, do not include prohibited sensitive information or unnecessary personal or customer-identifying details in prompts.

Third-party AI providers process information sent to them to provide the requested service. Their independent use of information, if any, is governed by our agreements with them and applicable law.

7. When we disclose personal information

We may disclose personal information as described below. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising or targeted advertising.

7.1 Your Organization and its administrators

We disclose information within the Organization workspace as directed by the Organization and according to administrator permissions. As described in Section 2, authorized Organization administrators may view conversations, feedback, usage statistics, and AI evaluations, but are not provided access to original uploaded files through administrative tools.

7.2 Legal, safety, and compliance disclosures

We may disclose information if we reasonably believe disclosure is necessary to:

• comply with applicable law, legal process, court order, or lawful government request;
• investigate or enforce agreements, policies, or suspected violations;
• detect, prevent, or address fraud, security, abuse, or technical issues; or
• protect the rights, property, safety, and security of CelestiQ, our customers, users, or the public.

7.3 Business transactions

We may disclose or transfer information in connection with an actual or proposed merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar business transaction. Any recipient will be required to handle personal information consistently with applicable law and this Privacy Policy unless users receive notice of a different policy.

7.4 With your direction or consent

We may disclose information when you or your Organization directs us to do so, enables an integration, or provides consent.

8. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, to comply with customer agreements, and to meet legal, security, and operational requirements. Our general retention schedule is:

Backup copies may remain for a limited period until overwritten or deleted through normal backup-rotation processes. We may retain information longer when required by law, subject to a legal hold, necessary to prevent fraud or abuse, needed to resolve disputes, or otherwise permitted by an applicable customer agreement. When feasible, information retained for these limited purposes will be isolated from ordinary use.

De-identified and aggregated information that cannot reasonably be linked to a person or Organization may be retained for longer periods.

9. Security

We use administrative, technical, and physical safeguards designed to protect personal information. These safeguards include, as appropriate:

• encryption in transit and encryption at rest provided by our infrastructure and storage services;
• authentication, multi-factor authentication capabilities, and secure token storage;
• role-based access controls, tenant separation, and authorization checks;
• logging, monitoring, rate limiting, and incident-response procedures;
• restrictions on service-provider access and contractual confidentiality obligations; and
• secure development, deployment, and update practices.

No security measure or method of transmission is completely secure. You are responsible for protecting your credentials, using available security features, and promptly notifying CelestiQ and your Organization of suspected unauthorized access.

10. Your privacy choices and account deletion

Depending on your relationship with CelestiQ and applicable law, you may request to:

• access or obtain a copy of your personal information;
• correct inaccurate personal information;
• delete personal information or your Solstice account;
• restrict or object to certain processing;
• withdraw consent where processing is based on consent; or
• receive information about how your personal information is processed.

10.1 Account deletion

You may initiate account deletion by selecting Delete Account in Settings in a supported Solstice application or submit a deletion request by emailing support@celestiq.ai. An in-app request must be made from an authenticated account and requires an additional confirmation. For an emailed request, we may require you to verify your identity and authority before completing the request.

Deleting an account is different from deleting individual conversations or signing out. A valid account-deletion request will initiate deletion of the authentication account and associated conversations, messages, uploaded-file records, feedback, preferences, AI evaluations, device registrations, and other personal information, subject to limited legal, security, contractual, and backup exceptions described in Section 8.

We will remove identifiable data from active systems within 30 days after verifying a valid request. If your account is controlled by an Organization, we may notify or coordinate with the Organization as required by the applicable customer agreement and law. An Organization may also submit authorized deletion instructions concerning its workspace.

Deleting the mobile or desktop application does not delete your account. After account deletion, locally cached data may remain on a device until the application clears it, the user clears application data, or the application is uninstalled.

10.2 Device permissions and notifications

You may control camera, photo, file, microphone, speech-recognition, biometric, and notification permissions through the application and your device settings. Disabling a permission may disable the associated feature.

10.3 Communications

You may opt out of nonessential promotional communications by using the unsubscribe instructions in the message or contacting us. You may still receive transactional, security, account, or service communications.

10.4 Browser storage

You can control browser cookies and storage through your browser settings. Blocking essential authentication or application storage may prevent the web or desktop service from functioning correctly. Solstice does not use browser storage for third-party behavioral advertising.

11. U.S. state privacy disclosures

U.S. state privacy laws may provide residents of certain states with additional rights, subject to legal thresholds, exceptions, and verification requirements. These rights may include the right to know or access, correct, delete, and obtain a portable copy of personal information; opt out of certain sales, sharing, targeted advertising, or profiling; limit certain uses of sensitive personal information; and appeal a denied request.

CelestiQ does not sell personal information and does not share personal information for cross-context behavioral advertising or targeted advertising. Therefore, we do not offer an opt-out for activities we do not perform.

11.1 Categories collected and disclosed

The following table describes categories of personal information we may have collected and disclosed for business purposes during the preceding 12 months. The categories correspond generally to California law and may overlap.

We do not use or disclose sensitive personal information to infer characteristics about individuals or for purposes that require a right to limit under California law.

11.2 Exercising state privacy rights

To submit a privacy request, email support@celestiq.ai with the subject line "Privacy Request." Describe the right you wish to exercise and the account or Organization involved. We will verify requests using information reasonably related to the account and may request additional information when necessary to prevent unauthorized disclosure or deletion.

You may use an authorized agent where permitted by law. We may require proof of the agent's authority and verification of your identity. If we deny a request, you may appeal by replying to our decision and stating that you wish to appeal. We will not discriminate against you for exercising an applicable privacy right.

Where CelestiQ processes information solely on behalf of your Organization, we may direct your request to the Organization or assist the Organization in responding.

12. Prohibited sensitive and regulated information

Unless CelestiQ has expressly authorized the processing in a separate written agreement, you must not submit:

• protected health information subject to HIPAA or similar health-privacy laws;
• payment-card numbers, bank-account credentials, or other payment-authentication data;
• Social Security numbers, driver's-license numbers, passport numbers, government identification numbers, or tax identification numbers;
• passwords, private cryptographic keys, authentication secrets, or access tokens;
• biometric templates, precise geolocation, or information about children;
• data subject to export-control restrictions or classified government information; or
• other highly sensitive personal information that is not necessary for an authorized business purpose.

If you believe prohibited information has been submitted, contact support@celestiq.ai promptly.

13. International processing

The Services are currently offered to authorized users in the United States. CelestiQ and its service providers may process information in the United States and in other locations where a service provider operates. Those locations may have data-protection laws that differ from the laws where you reside.

If CelestiQ later offers the Services in another jurisdiction, we may provide additional notices or contractual protections as required by applicable law.

14. Third-party services and links

The Services may provide links to third-party websites, documentation, status pages, search results, or other external resources. CelestiQ does not control those third parties, and their privacy practices are governed by their own policies. Review the privacy policy of a third-party service before providing information to it.

15. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes in the Services, our practices, legal requirements, or other circumstances. We will update the "Last updated" date when we make changes. If a change materially affects how we use personal information, we will provide additional notice through the Services, by email, through your Organization, or by another appropriate method before the change takes effect when required by law.

16. Contact us

For privacy questions, requests, or complaints, contact:

CelestiQ LLC
1350 N 60th Street
Milwaukee, WI 53208
United States
Email: support@celestiq.ai