Privacy Policy

Last updated: April 2, 2026

1. Introduction

Celestia Leads ("we", "us", or "our") operates the website https://celestialeads.com ("Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, including when you connect your Facebook and Instagram accounts via Facebook Login for Business.

2. Information We Collect

Account information: Name, email address, and password when you register.
Facebook / Instagram data: When you connect via Facebook Login for Business, we request access to your Facebook Pages and connected Instagram Business Account. We collect and store your Page Access Token and Instagram Business Account ID solely to enable hashtag scraping via the Instagram Graph API.
Usage data: IP address, browser type, pages visited, and actions taken within the Service for analytics and security purposes.
Payment data: Subscription payments are processed by PayPal. We do not store credit card numbers or full payment details.

3. How We Use Your Information

To provide, operate, and maintain the Service.
To access the Instagram Graph API on your behalf for hashtag discovery and lead generation features you explicitly enable.
To process subscription payments and send billing-related communications.
To send service-related notifications and support responses.
To detect and prevent fraud, abuse, or security incidents.
To comply with legal obligations.

4. Facebook and Instagram Data

We use Facebook Login for Business to obtain a Page Access Token and your Instagram Business Account ID. Specifically:

We request the pages_show_list and instagram_manage_hashtags permissions.
Tokens are stored securely and used exclusively to make Instagram Graph API calls on your behalf.
We do not sell, rent, or share your Facebook or Instagram tokens with third parties.
You may revoke access at any time from your Facebook Business Integrations settings.

5. Data Sharing and Disclosure

We do not sell your personal data. We may share data with:

Service providers: MongoDB (database), OpenAI / Google Gemini (AI processing), PayPal (payments). Each is bound by their own privacy terms.
Law enforcement: When required by law or to protect our legal rights.

6. Data Retention

We retain your data for as long as your account is active. You may request deletion of your account and associated data by contacting us at the email below. Facebook/Instagram tokens are deleted upon account deletion or when you revoke access from Facebook.

7. Security

We implement industry-standard security measures including encrypted storage of tokens, HTTPS enforcement, and JWT-based authentication. However, no method of transmission over the Internet is 100% secure.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data, or to object to or restrict its processing. To exercise these rights, contact us at the email below.

9. Children's Privacy

Our Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date at the top of this page.

11. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@celestialeads.com