Privacy policy
Proposed effective date: 26 August 2026
Draft, not yet in force. Published for review, not reliance. It has not been reviewed by a lawyer, and values marked “to be confirmed” are not filled in.
What we collect, why, how long we keep it, and who else touches it. Your imagery contains precise site locations, so this matters more than usual.
Who we are
OJAS 4D is a service operated by CelesticLabs Private Limited, registered in India at registered office address, to be confirmed. We process drone imagery you have already captured and return mapping deliverables. For privacy questions, write to privacy@celesticlabs.org.
What we collect
| Category | What it includes | Why |
|---|---|---|
| Enquiry details | Name, email, what you fly, what you map, dataset size, which deliverables you need, what you use today, when you need it | To answer you and size the job |
| Your imagery | The photographs you upload, including EXIF metadata — GPS coordinates, altitude, timestamps, camera and lens identifiers | To reconstruct your map. Without the GPS in the EXIF the job cannot be georeferenced |
| Deliverables | The orthomosaic, surface and terrain models, point cloud, mesh and report we generate from your imagery | To deliver them to you |
| Technical logs | Request timestamps, IP address, error traces, processing timings | To operate the service and diagnose failures |
| Your account | Your email address, a salted hash of your password (never the password itself), your plan, and when you signed up | To sign you in and apply your plan |
| Accounts opened by AI agents | When an AI agent signs up through AgentID: the agent's AgentID identifier, its inbox address and display name, and an opaque identifier for the person who owns it | To give the agent its own account, and to limit how many accounts one owner can open |
| How you found us | The link or website that first brought you here: a campaign tag or the referring site's address, and the page you landed on. It is kept in a first-party cookie for 90 days and copied onto your account if you sign up | To learn which of our listings and posts actually help people find us. It is never shared, and no third-party analytics are involved |
| How people use this site | The pages viewed, the links and buttons clicked, how far a page is scrolled and which parts of it are seen, tutorial video progress and time on the page; the referring site and any campaign tags in the link; your country and city as estimated from your connection; and your device and browser type. Your IP address is used only to make an anonymous code for the day and is not stored, no cookie is set for this, and nothing you type into a form is recorded | To see which pages help people understand the product and where they leave, so we can improve them. It stays in our own database and is never shared or sold |
Your imagery is location data
This deserves stating plainly. A set of drone photographs is a precise record of a specific place at a specific time — often a commercial site, sometimes one under an obligation of confidence to your own client. We treat uploaded imagery and everything derived from it as confidential.
- We do not publish, sell, license or share your imagery or deliverables
- We do not use them in marketing, case studies or sample galleries without your written permission for that specific dataset
- We do not use them to train machine-learning models
- Access is limited to the people who need it to run or support your job
The imagery shown on this website comes from our own processing runs on datasets we are permitted to publish. It is never customer work.
How long we keep it
| Data | Retention |
|---|---|
| Uploaded imagery and generated deliverables | Deleted 90 days after the job completes |
| Enquiry and contact details | Until you ask us to delete them |
| Billing records | As long as tax and company law require us to keep them |
| Technical logs | Routinely rotated; not retained long-term |
| Site usage records | Deleted after 400 days |
| The first-touch cookie (how you found us) | Expires in your browser after 90 days; on your account until you delete it |
The 90-day window is enforced in code, and deletion removes both the database records and the stored files. Download your deliverables before it expires. If you want them removed sooner, ask and we will delete them.
Who else processes your data
We use third parties to run the service. They act on our instructions and only for the purposes below.
| Purpose | What they see |
|---|---|
| Cloud compute for processing | Your imagery, while the job runs |
| Object storage for deliverables | Your generated files, until retention expires |
| Email delivery | Your email address and our messages to you |
| Payment processing | Your billing details. We never see or store your card number |
| Call scheduling | The name and email you enter when booking a call |
Processing and storage may occur outside India. We will name the specific providers on request.
Fonts and third-party requests
This site currently requests its typefaces from Google Fonts, which means your browser contacts Google and your IP address is visible to them when a page loads. We use no advertising trackers and no third-party analytics: our own site analytics run on this site's hosting and send nothing to anyone else, and a browser that sends the Global Privacy Control signal is not counted at all. We intend to self-host the fonts to remove this request.
Your rights
- Ask what we hold about you and get a copy
- Have inaccurate details corrected
- Have your data deleted, including imagery and deliverables before retention expires
- Withdraw permission you previously gave for marketing use of a dataset
- Object to how we are processing your data
Write to privacy@celesticlabs.org. We will respond within 30 days. There is no charge.
Security
- Data is encrypted in transit
- Upload and download links are time-limited and specific to one file
- Storage credentials are scoped to the service and are not shared
- Deletion at end of retention removes stored files, not just database rows
No system is perfectly secure. If we become aware of a breach affecting your data we will tell you what happened, what was affected, and what we are doing about it.
Children
This is a service for commercial drone operators. It is not directed at anyone under 18 and we do not knowingly collect their data.
Changes
We will update this page when our practices change and revise the effective date. If a change materially affects how we handle imagery already in our possession, we will email you rather than rely on you noticing. Proposed effective date: 2026-08-26.