Legal
Privacy policy
What personal data Terranes handles, why, for how long, who else sees it, and what you can ask of us.
Draft, under legal review. This policy may still change before Terranes is offered to the public.
Controller: Terranes Noro, a sole proprietorship (Einzelfirma) under Swiss law, Hauptstrasse 56, 8775 Luchsingen, canton Glarus, Switzerland, business identification number CHE-211.497.373 — "we", "us". Contact for anything in this policy: privacy@terranes.app. It is monitored, and it is also our single point of contact for authorities.
1. Two relationships, and why the difference matters
Terranes is project management software that organisations use for their work. That gives us two different roles, and this policy keeps them apart because they decide who you should ask about what.
Your organisation's project records — the tasks, comments, files, decisions, reports and everything else its people put into a project — belong to your organisation. It is the controller of that data, and we process it on its behalf, under our terms and our data processing agreement. If you want something done with those records — corrected, exported, deleted — your organisation decides, and we act on its instruction.
Your account and our own business — your profile, your sign-in, your notification settings, our billing records, our website and the emails you send us — are ours. We are the controller of that data, and the rest of this policy is mostly about it.
The split decides what an erasure request does. Asking us to erase you destroys your account and your identifiers; it does not destroy your organisation's records of its own work. A colleague's comment that mentions you is your organisation's record, not yours.
2. What we collect, why, and on what basis
| What | Why | Legal basis | How long |
|---|---|---|---|
| Account data: your name, email address, password (stored only as a hash), the Google or Microsoft account you sign in with, your timezone, and for account owners who enrol it, a two-step verification factor | To give you an account and keep it yours | Contract (GDPR Art. 6(1)(b)) | For the life of the account |
| Settings: notification preferences and which modules you switched on | To work the way you set it | Contract | For the life of the account |
| Notifications and emails we send you: invitations, urgent notifications, the daily digest | To tell you what you asked to be told | Contract | For the life of the account |
| Billing data: the billing contact, company name, address, VAT number and invoices. Your card details never reach us — they go to Stripe directly | To charge for the service and keep the records the law requires | Contract; legal obligation (Art. 6(1)(c)) for invoices | Invoices and tax records 10 years (Swiss commercial law) |
| Security and service records: the IP address and browser of a request, sign-in events, and error reports | To keep the service running, find faults, and stop abuse | Legitimate interest (Art. 6(1)(f)) in a secure, working service | Error reports and logs on short rotations; backups 30 days |
| What you send us: the early-access form, and emails to us | To answer you | Legitimate interest in replying; pre-contractual steps where you are asking to become a customer | As long as the conversation needs, then deleted |
| Website page views, without cookies | To know which pages are read | Legitimate interest | See §5 |
We do not sell personal data, we do not use it for advertising, and we do not build profiles of the people who use the product. There is no automated decision about you that has legal or similarly significant effects.
What we will not measure, ever. There is no measurement of speaking time, no productivity or activity score, no ranking and no time tracking of any person, anywhere in the product. This is a property of the product, published on what we track, not a setting.
3. Your organisation's records, which we process for it
For the project records your organisation controls, we act only on its instructions and under our data processing agreement. What we hold is what its people put in, plus the activity log that records who did what to a project's records — never how fast anyone worked. Three parts of the product deserve a sentence of their own:
AI wording of a report. When a person asks for a status report to be written up by AI, that report's figures and the titles of its overdue and blocked tasks go to Anthropic to draft the prose. It is off unless a person asks, per report, and the scheduled weekly report never uses it. The output is labelled wherever it appears, and a person reviews it before it can be shared.
The capture inbox. If your organisation connects Slack, Microsoft Teams or its Terranes email address, messages addressed to Terranes arrive in the sender's own inbox so they can be turned into a task, a comment or a decision. Only messages that mention the bot are delivered — the platforms enforce that, not us. Unused items are removed after 30 days. When an item is used, its pedigree (platform, author, time) is kept with what was made from it; the message text is not.
Meeting notes. If your organisation uses them, a meeting's transcript and audio are kept for 90 days by default, a shorter period if it chooses, and can be deleted at any time by the person who added the meeting. The decisions and tasks a person confirmed from it stay as project records. The person who adds a meeting confirms they are allowed to.
4. Who else processes data
We use a small number of service providers, each bound by a data processing agreement, and each receiving only what its job needs:
- Supabase — the database, sign-in and file storage, in an EU region.
- Vercel — hosting; our functions run in Frankfurt.
- Stripe — payments, subscriptions and tax. Card details go to Stripe and never to us.
- Resend — sending email, from Ireland.
- Anthropic — only the AI wording of a report, and only when a person asks for it (§3).
- Sentry — error reports, in its EU region (Frankfurt), with personal data removed before a report leaves us.
- Google Workspace — the mailbox where your emails to us arrive.
The full list for customer data, with what each receives, where, and on what transfer basis, is our sub-processor list, published with our security information. Changes to it are announced to every organisation's owners 30 days before they take effect. Other recipients are limited to what the law requires: authorities with a binding order, and our accountant for billing records.
5. Our website
The website terranes.app is the one place you can be our visitor without being anybody's user.
Page views are counted with Vercel Web Analytics: that a page was viewed, the country, the type of device and the page you came from. It sets no cookie, stores no identifier on your device and builds no profile of you across days, which is why there is no cookie banner: there is nothing to consent to.
The early-access form sends us your name, work email, company, and the team size and message if you add them. It goes through Resend to our Google Workspace mailbox, and we use it only to reply.
Nothing else. Fonts and images are served from our own domain. There is no advertising pixel, no tag manager, no embedded video and no third-party font service. If that ever changes, this section and our cookie handling change first.
6. Transfers outside Switzerland and the EU
We are in Switzerland, and the EU recognises Swiss data protection as adequate, so data coming to us from the EU needs no further mechanism. Your organisation's data is held in an EU region. Where a provider is in, or belongs to a company in, a country without an adequacy decision — mainly the United States, for Stripe, Vercel's parent company, Anthropic and Google — the transfer relies on the European Commission's standard contractual clauses, with the Swiss adjustments, and on what is sent being minimised before it leaves: billing contacts to Stripe, rendered emails to Resend, and one report's figures to Anthropic, only when a person asks.
7. How long we keep it
Briefly, and in full in our retention schedule:
- your account, for as long as you have one;
- your organisation's records, for as long as the organisation exists — archiving and deletion inside a project are reversible, and records are destroyed only when the organisation asks for it;
- invoices and tax records, 10 years, because Swiss law requires it;
- an email a person files as supplier correspondence, 10 years;
- capture-inbox items 30 days unless used, meeting transcripts 90 days by default;
- backups, 30 days on rotation.
An organisation that stops using the product — a trial that ended without a subscription, or a subscription that stopped being paid — is erased after six months in which no owner or staff member has signed in, and only after two reminders and a 30-day window in which anyone can stop it.
Erasure is real. When an erasure request runs, the data is removed from our live systems, not flagged. Backups age out on their 30-day rotation; we do not edit backups, which is the standard position for every service of this kind.
8. Security
Data is encrypted in transit and at rest. Every table carries row-level security, so a person reaches a project's records only through membership of that project; this is enforced in the database itself, not only in the application. Account owners can protect their account with two-step verification, and the database enforces it for them. Access to production systems is limited to the people who run the service.
9. Your rights
You can ask us, about the personal data we control:
- for a copy of it, and for it in a portable, machine-readable form;
- to correct it;
- to erase it — you can also do this yourself, under Account, with a 30-day window in which you can change your mind;
- to restrict or object to processing we base on legitimate interest;
- to withdraw any consent you gave, without affecting what happened before.
Write to privacy@terranes.app. We answer within one month, and we may ask you to confirm it is really you. For your organisation's project records, we will pass your request to your organisation, which decides; its records can always be exported, in every billing state, including when it has stopped paying.
You can also complain to a supervisory authority: in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC); in the EU, the authority of the country where you live or work.
10. Cookies and storage on your device
The product uses only what it needs to work: a sign-in cookie that keeps you signed in, a cookie that remembers which organisation you were last working in, and your light or dark theme saved in your browser's local storage. None of them tracks you, and none is shared with anyone.
The website stores your theme and whether you were looking at monthly or annual prices, in your browser's local storage, and nothing else.
11. Reporting illegal content
Anyone can report content they believe is illegal, whether or not they use the product, to privacy@terranes.app, in English or German: tell us where it is and why you believe it is unlawful. Inside a project, any member can also report a file or comment directly to that project's admins.
12. Children
The product is for work, and you must be 18 or older to open an account. We do not knowingly collect children's data.
13. Our representative in the EU
Because we are not established in the EU, we will name a representative there under Art. 27 GDPR, and list them here, before the product is offered to the public.
14. Changes to this policy
When this policy changes materially, we tell account owners by email before the change takes effect, and the date at the top of this page changes with it.