Privacy Policy
This policy explains what personal data Tera ("Tera", "we", "us") collects when you use the Tera desktop app, your Tera account and this website, why we collect it, and the choices you have. Tera is operated by an independent developer based in Brazil, who is the data controller for the processing described here. We follow the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018) and, for users in the European Economic Area and the United Kingdom, the GDPR.
The short version: we collect only what we need to sign you in and manage your plan. We never ask for a password, we never sell your data, and the work you do in Tera stays on your computer.
1. What we collect
| Data | Where it comes from | Why |
|---|---|---|
| Email address | You, or the sign-in provider you choose | To identify your account and send your sign-in codes |
| Name, username and profile picture (if the provider shares them) | Google, Microsoft, GitHub or GitLab | To show who is signed in |
| Account ID from the sign-in provider | The sign-in provider | To link your sign-ins to the same account |
| A hashed device identifier, operating system and app version | The Tera app | To run the free trial per device, enforce your plan's device limit and prevent abuse |
| Plan, trial dates and subscription status | Our access server | To know which features your account can use |
| Sign-in and security events, including IP address | Our servers | To keep your account and the service secure |
The device identifier is never stored in its original form: the app sends a one-way hash, and our server hashes it again with a secret key before storing it. It cannot be turned back into your device's real identifier.
From each sign-in provider we receive only the basic profile you approve on its consent screen: from Google, your name, email address and profile picture; from Microsoft, your name, email address and account identifier; from GitHub and GitLab, your username, name, email address and avatar. We do not request access to your files, email, repositories or any other data in those accounts.
2. What we do not collect
- Passwords. Tera has no passwords. You sign in with a provider or with a one-time code.
- Your work. Your canvases, files, notes and the conversations with your AI agents stay on your computer and are not sent to us.
- Payment card numbers. When paid plans are available, payments will be handled by a payment provider acting as reseller; we will not store card numbers.
- Analytics or advertising data. The app and this website have no advertising or third-party analytics trackers.
- Your AI conversations. If you connect AI tools or services (for example, an AI command-line tool you installed), the data you send to them goes directly from your computer to that provider, under that provider's own terms and privacy policy. It does not pass through Tera's servers.
3. How we use your data and our legal bases
- To provide the service you asked for (sign-in, your plan, the free trial): performance of a contract (LGPD art. 7, V).
- To prevent fraud and abuse (for example, creating many accounts to get extra trials) and to keep the service secure: legitimate interest (LGPD art. 7, IX).
- To send service emails such as sign-in codes and important account notices: performance of a contract.
- To meet legal obligations, when applicable (LGPD art. 7, II).
We do not use your data for advertising, and we do not sell or rent it to anyone. We may disclose data to public authorities only when required by law or a valid court order.
4. Automated decisions
To protect the free trial, our access server automatically decides whether a device or account can still start a trial and how many devices your plan allows. If an automated decision affects you, you can ask for a human review at support@thetera.app (LGPD art. 20).
5. Service providers that process data for us
| Provider | What it does | Location |
|---|---|---|
| Supabase | Sign-in and the database for accounts, plans and devices | São Paulo, Brazil |
| Resend | Delivers sign-in code emails | Servers in Brazil and the United States |
| Cloudflare | Domain, DNS, email forwarding and this website | Global network |
| Google, Microsoft, GitHub, GitLab | Sign-in, only if you choose that provider | Per each provider's policy |
When data is transferred outside Brazil, we rely on the safeguards allowed by the LGPD, including the standard contractual clauses approved by the Brazilian Data Protection Authority (ANPD Resolution CD/ANPD No. 19/2024) and our providers' data processing agreements.
6. Google user data
If you sign in with Google, we receive only your basic profile (name, email address and profile picture) to create and identify your account. Tera's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not access your Gmail, Drive or any other Google data through the sign-in.
7. How long we keep data
- Account data: while your account is active. If you delete your account, we delete your personal data within 30 days.
- Hashed device identifiers: kept after account deletion, without any link to you, only so the free trial cannot be restarted on the same device.
- Security logs (including IP addresses): 90 days.
8. Your rights
Under the LGPD (art. 18) and, where applicable, the GDPR, you can ask us to confirm whether we process your data, access it, correct incomplete or inaccurate data, receive a copy in a portable format, have unnecessary or excessive data anonymized, blocked or deleted, learn which entities we share it with, and object to processing based on legitimate interest. You can delete your account at any time. Send your request to support@thetera.app; we will confirm receipt and answer within 15 days. You can also file a complaint with the Brazilian Data Protection Authority (ANPD) or your local data protection authority.
9. Data protection contact
As a small processing agent, Tera is exempt from appointing a Data Protection Officer (ANPD Resolution CD/ANPD No. 2/2022) and provides this channel instead: support@thetera.app.
10. Security
We use secure sign-in standards (OAuth with PKCE through your system browser), encryption in transit, short-lived signed access passes, access controls on our database, and minimal data collection. On your computer, Tera stores your session in the operating system's secure storage (Keychain on macOS, DPAPI on Windows, and the system keyring on Linux when available). If a security incident creates a relevant risk to you, we will notify you and the ANPD as required by law (LGPD art. 48).
11. Cookies
This website does not use advertising or analytics cookies. Our hosting provider, Cloudflare, may set strictly necessary cookies to protect the site against abuse. The Tera app does not use cookies to track you.
12. Children
Tera is not directed to children (under 12 in Brazil, under 13 elsewhere, or the age set by your local law), and we do not knowingly collect their data. Teenagers under 18 should use Tera only with the permission of a parent or legal guardian. If you believe a child has created an account, contact us and we will delete it.
13. Changes to this policy
If we make material changes, we will update the effective date above and notify you in the app or by email before they take effect.
14. Contact
Questions about privacy: support@thetera.app.