Privacy Policy

Data Controller

TerraLab SAS (SIREN: 104 501 861, RCS Paris), with registered office at 173 rue de Courcelles, 75017 Paris, France, is the data controller for your personal data. For any privacy-related questions, contact us at yvann.barbot@terra-lab.ai.

Data We Collect

We collect the following categories of personal data depending on how you interact with our services:

Account Data

Email address, collected when you create an account via magic link authentication.

Payment Data

Payment processing is handled entirely by our payment processor. We never store or access your credit card details.

AI Edit

The area you select, your prompt and any reference images are sent for generation, along with the location and extent of that area, its coordinate system and which basemap you are using. Generation runs at an AI provider outside the European Union; your images are stored on our servers in Paris, and reference images also stay at that provider for about 30 days. We keep them so you have your generation history and so we can support you. We train no model on them.

AI Segmentation, on your own machine

Nothing you segment leaves your computer. The plugin still checks your licence and sends the diagnostics described below. Installing the on-device model downloads it from its publisher and the usual Python package sites, the same way any Python tool does.

AI Segmentation, Cloud AI clicks

Each click sends a small square of the imagery around it to our servers in the European Union, and the outline comes back. The square is held only for the length of your session and is not archived. Your project and your files stay on your computer.

AI Segmentation, automatic detection

A run sends tiles of the zone you select, the object you type, any examples you draw, the outline of the zone itself, and the coordinates and coordinate system that place them. This runs on our servers in the European Union. We keep the tiles and the results so we can support you, check billing and measure detection quality; the detailed masks are cleared two days after archiving. When you press Finish, the polygons you kept are sent to us as well.

Diagnostics, both plugins

Both plugins report errors, the plugin and QGIS versions, your operating system and which features you use, linked to your account so we can fix what you run into. They never send your imagery, your coordinates, your layer names or full file paths. You can turn them off in each plugin's settings, and turning them off in one turns them off in both.

Subscription Data

Activation key, subscription status, usage count per billing period, and product information.

Analytics Data (with consent)

With your consent, we collect website usage data including page views, click interactions, and session recordings on product and account pages. You can decline analytics cookies at any time.

Error Tracking

We use error tracking tools to automatically capture application errors and improve service reliability. This is processed under our legitimate interest in maintaining service quality.

Plugin Registration

When you register a free plugin, we collect your email address to provide support and updates.

Website Interaction Data

When you interact with our website, we may collect approximate location (country, city), device information (operating system, browser type), and browsing behavior to improve our services.

Device Identification

For security, fraud prevention, and to enforce our license conditions, our plugins may generate a technical device identifier:

A pseudonymized, irreversible hash derived from a hardware identifier, which cannot identify you or be traced back to your machine.
Used only to detect the sharing of an activation key across multiple machines.
Legal basis: our legitimate interest in fraud prevention and the performance of your subscription contract (Articles 6.1.f and 6.1.b GDPR).
Kept only as long as necessary, then deleted automatically when you delete your account or upon request.

Legal Basis for Processing

We process your data based on the following legal grounds:

Contract performance (Article 6.1.b GDPR): to provide our services, manage your subscription, and process payments.
Consent (Article 6.1.a GDPR): for analytics cookies and session recordings. You can withdraw consent at any time.
Legitimate interest (Article 6.1.f GDPR): for error tracking, security, service improvement, and account-linked plugin telemetry.

Service Providers and Data Transfers

We use third-party service providers to operate our platform:

Service	Purpose	Location	Basis
Database and authentication	User accounts and data storage	EU	Contract
Payment processing	Subscription billing and invoicing	International	Contract
AI image processing	Plugin image analysis	EU and international	Contract
Image storage	Long-term storage of plugin inputs, outputs, reference images and segmentation image squares	EU	Legitimate interest
Website hosting	Website delivery and performance	International	Contract
Product analytics	Website usage analytics and session recordings (with consent); account-linked plugin diagnostics (legitimate interest)	EU	Consent / Legitimate interest
Error tracking	Application error monitoring	EU	Legitimate interest
Transactional emails	Authentication and notification emails	International	Contract

Some of our service providers operate internationally. We ensure appropriate safeguards are in place for any data transfers outside the EU, including Standard Contractual Clauses where applicable.

Data Retention

We retain your data only as long as necessary:

Account data: until you request account deletion.
Payment data: retained per our payment processor's policy and legal obligations.
Plugin imagery (AI Edit inputs, outputs and reference images; AI Segmentation input tiles, the image squares sent by Cloud AI clicks, and the detection masks that come back): stored on EU infrastructure for the lifetime of your account. Deleted on account deletion or earlier on request.
Usage records: retained for the duration of your subscription plus 12 months for billing purposes.
Analytics data: retained for a maximum of 24 months.
Error tracking data: retained for 90 days.

Cookies

Our website uses cookies and similar technologies:

Strictly Necessary Cookies

Authentication session cookies and error tracking cookies. These are essential for the website to function and do not require consent.

Analytics Cookies (Consent Required)

Analytics cookies for understanding how visitors use our website and improving user experience. These are only activated after you give your consent via our cookie banner.

You can manage your cookie preferences via the cookie banner.

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right of access: Obtain a copy of your personal data
Right to rectification: Correct inaccurate data
Right to erasure: Request deletion of your data
Right to restrict processing: Limit data processing
Right to data portability: Receive your data in a portable format
Right to object: Object to processing based on legitimate interest

To exercise any of these rights, contact us at yvann.barbot@terra-lab.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, www.cnil.fr.

Updates

This policy may be updated to reflect changes in our practices or legal requirements. Material changes will be communicated via email to registered users.

Last updated: May 27, 2026