Privacy Policy

The full sub-processor table, the security measures and a pre-filled data processing agreement are on one page: Sub-processors and security

Data Controller

TerraLab SAS (SIREN: 104 501 861, RCS Paris), with registered office at 173 rue de Courcelles, 75017 Paris, France, is the data controller for your personal data. For any privacy-related questions, contact us at yvann.barbot@terra-lab.ai.

Data We Collect

We collect the following categories of personal data depending on how you interact with our services:

Account Data

Email address, collected when you create an account via magic link authentication.

Payment Data

Payment processing is handled entirely by our payment processor. We never store or access your credit card details.

AI Edit

The area you select, your prompt and any reference images are sent for generation, along with the location and extent of that area, its coordinate system and which basemap you are using. Generation runs at our image-generation partner in the United States (fal.ai), under Standard Contractual Clauses. The partner uses the map area, the prompt and the reference images only to produce your result and deletes them within 30 days. Your own generations stay in your history on our servers in France until you delete them or your account; on Pro you can set that to 30 days, 90 days or 1 year in Settings. We keep them so you can come back to them and so we can support you. We do not train models on them today; if that changes, this policy and a settings switch come first.

AI Segmentation, on your own machine

Nothing you segment leaves your computer. The plugin still checks your licence and sends the diagnostics described below. Installing the on-device model downloads it from its publisher and the usual Python package sites, the same way any Python tool does.

AI Segmentation, Cloud AI clicks

Each click sends a small square of the imagery around it to our servers in the European Union, and the outline comes back. On Free we keep a technical copy of that square for 12 months, on EU infrastructure, to measure and improve detection quality; it is never shown to you, and you can object from your account settings or by email. On Pro no copy is written at all. When you save an object, we store the outline you kept and the area it covers, on EU infrastructure, so we can support you and check billing. They are deleted on account deletion, earlier on request, or on Pro at the age you choose in Settings. Your project and your files stay on your computer.

AI Segmentation, automatic detection

A run sends tiles of the zone you select, the object you type, any examples you draw, the outline of the zone itself, and the coordinates and coordinate system that place them. This runs on our servers in the European Union. We keep the tiles and the results so we can support you, check billing and measure detection quality; the detailed masks leave our database 12 hours after they are archived. When you press Finish, the polygons you kept are sent to us as well.

AI Agent

A run sends your request, any image you attach, the instructions, memory notes and profile you saved in the plugin's settings, earlier messages in the same thread, the results of the QGIS actions it runs, and a description of the open project built by the plugin: the project file path, the map extent, CRS and scale, and for each layer its name, type, CRS, feature count, field names and extent, with the attribute values of one sample feature for the first eight layers, your five most recent Processing runs and the three newest QGIS warnings. Layer contents and files stay on your computer, and secrets such as passwords in layer sources are masked before anything leaves. When the panel connects, it also sends your activation key, which we store only as a hash, a hash of the machine, the plugin and QGIS versions, your operating system and your language. When you ask for open data, the plugin queries the service that holds it directly: that service sees your IP address and the query, never your request text. Runs are handled by our agent server on Microsoft Azure in the European Union (West Europe). On Free we keep conversations, steps and tool calls for 90 days, in our database in Paris and in a diagnostic file on the agent server, so you can reopen a thread and so we can look into a problem you report. Checkpoints and undo work from copies kept on your own computer. The plugin also writes the whole conversation to your own computer on every plan, so your history stays yours whatever we keep. On Free we also read what a conversation says to fix a wrong answer, a broken tool or a failure pattern; the "Help improve AI Agent" switch in the plugin's settings stops that at no cost and changes nothing else. On Pro no transcript is stored at all, so there is nothing to read: the run keeps its summary and its counters only. Run records stay for 365 days, with the request text blanked after 90 days, so we can count quota and billing. Azure OpenAI processes each run, on our own Azure resource in the European data zone. It does not train on this data. Under Microsoft's standard terms, prompts and completions may be kept up to 30 days for abuse monitoring; we have requested the exemption from that monitoring and will update this policy when it is granted.

Diagnostics, all three plugins

All three plugins report errors, the plugin and QGIS versions, your operating system and which features you use, linked to your account so we can fix what you run into. They never send your imagery, your coordinates, your layer names or full file paths. You can turn them off in each plugin's settings, and turning them off in one turns them off in all three.

Subscription Data

Activation key, subscription status, usage count per billing period, and product information.

Analytics Data (with consent)

With your consent, we collect website usage data including page views, click interactions, and session recordings on product and account pages. You can decline analytics cookies at any time.

Error Tracking

Errors raised by the plugins and the website are recorded in our own event log and in our analytics tool, both in the EU, for 12 months, so we can fix them. This is processed under our legitimate interest in maintaining service quality.

Plugin Registration

When you register a free plugin, we collect your email address to provide support and updates.

Website Interaction Data

When you interact with our website, we may collect approximate location (country, city), device information (operating system, browser type), and browsing behavior to improve our services.

Device Identification

To secure licences and keep the free plans fair, our plugins create a technical device identifier:

A pseudonymous code: a one-way hash of a random value the plugin stores in your QGIS settings, or of your operating system's machine identifier. We never receive the underlying value, your computer's name, its hardware or your files. Because it can single out a computer, we treat it as personal data.
Used to detect an activation key shared between different people, and to count free-plan usage per computer, so that extra accounts on the same computer do not add free usage. A paid key works on every machine you use.
For each plugin, we also record which accounts are used on a computer, and when each was first and last seen there. Per plugin, only the first two free accounts active on a computer in the last 60 days keep free use; paid and former paid accounts never count, and an account idle there for more than 60 days comes back as a new one. This links the free accounts that share a computer. We only use sightings from the last 60 days for this and delete these records 60 days after an account was last seen on that computer. If you delete a free account that was active in the last 60 days, we keep a pseudonymous marker for that computer (the computer code, the plugin and the dates, with no link to your account or email) that holds its place until 60 days after its last use, then delete it. A computer used to abuse the free plans can be excluded from free use; we keep that exclusion for as long as it lasts and review it on request.
Legal basis: our legitimate interest in preventing fraud and abuse of our free plans (Article 6.1.f and Recital 47 GDPR) and the performance of your subscription contract (Article 6.1.b GDPR).
We keep per-computer free-usage counts for 60 days and records of refused free runs for 90 days. If you share a computer (a lab, a classroom) or think a limit is wrong, write to us: we can review it and give that computer its own allowance. You can also object to this processing by email.
Kept only as long as necessary, then deleted automatically when you delete your account or upon request, except the pseudonymous marker described above, which is deleted 60 days after its last use.

Legal Basis for Processing

We process your data based on the following legal grounds:

Contract performance (Article 6.1.b GDPR): to provide our services, manage your subscription, and process payments.
Consent (Article 6.1.a GDPR): for analytics cookies and session recordings. You can withdraw consent at any time.
Legitimate interest (Article 6.1.f GDPR): for security, service improvement, and account-linked plugin telemetry.
Legitimate interest (Article 6.1.f GDPR), improving the product: on Free we keep technical copies of Cloud AI click squares for 12 months to measure and improve detection quality, and we read the AI Agent conversations kept for 90 days to fix wrong answers, broken tools and failure patterns. You can object to either at no cost, from the plugin's settings or by email, and refusing changes nothing else about the service. Pro accounts are excluded from both: no technical copy is written and no conversation is ever read for this. We do not train models on customer data today; if that changes, this policy and a settings switch come first.

Service Providers and Data Transfers

We use third-party service providers to operate our platform:

Service	Purpose	Location	Basis
Database and authentication	User accounts and data storage	EU	Contract
Payment processing	Subscription billing and invoicing	International	Contract
AI image generation (AI Edit)	Image generation from the area you select, your prompt and reference images	United States (fal.ai, Standard Contractual Clauses, inputs kept about 30 days)	Contract
AI detection (AI Segmentation)	Object detection on the tiles and click squares you send	EU (our own infrastructure)	Contract
AI Agent language model	Planning and answering AI Agent runs	EU (Azure OpenAI, European data zone; abuse-monitoring exemption requested)	Contract
AI Agent server	Running AI Agent conversations and the QGIS actions they plan, with one diagnostic file per run kept 90 days (none on Pro)	EU (Microsoft Azure, West Europe)	Contract
Image storage	Long-term storage of plugin inputs, outputs, reference images, segmentation tiles and Cloud AI click squares	EU	Legitimate interest
Website hosting	Website delivery and performance	International (functions run in Paris; EU-US Data Privacy Framework)	Contract
Product analytics	Website usage analytics and session recordings (with consent); account-linked plugin diagnostics (legitimate interest)	EU	Consent / Legitimate interest
Transactional emails	Authentication and notification emails	United States (EU-US Data Privacy Framework)	Contract
Website translation	Machine translation of website pages (Google Translate)	International	Legitimate interest

Some of our service providers operate internationally. We ensure appropriate safeguards are in place for any data transfers outside the EU: the EU-US Data Privacy Framework where the provider is certified (email delivery, hosting), and Standard Contractual Clauses otherwise (image generation, payments).

Data Retention

We retain your data only as long as necessary:

Account data: until you request account deletion.
Payment data: retained per our payment processor's policy and legal obligations.
Plugin imagery (AI Edit inputs, outputs and reference images; AI Segmentation input tiles and the detection masks that come back): stored on EU infrastructure for the lifetime of your account. Deleted on account deletion, earlier on request, or on Pro at the age you choose in Settings.
Cloud AI click squares (AI Segmentation Semi-Auto): kept as technical copies on EU infrastructure for 12 months to measure and improve detection quality, never for Pro accounts. You can object from your settings or by email. The outlines you save, and the area each one covers, are kept on EU infrastructure for the lifetime of your account. They are deleted on account deletion or earlier on request. Hover previews are never stored.
Usage records: retained for the duration of your subscription plus 12 months for billing purposes. AI Agent keeps run records and connection records (plugin and QGIS versions, operating system, language, hashed key and machine) for 365 days and blanks request text after 90 days.
Per-computer free-usage counts: 60 days. Records of refused free runs: 90 days.
Accounts seen per computer: 60 days after the account was last seen on that computer. Pseudonymous markers left by deleted free accounts: 60 days after their last use. Computers excluded from free use after abuse: for as long as the exclusion lasts.
Analytics data: retained for a maximum of 25 months.
Free and Pro side by side. Pro is the paid plan and carries the private tier.
Technical copies (click squares, tiles, run exports): Free, kept 12 months to measure detection quality, opt-out in Settings; Pro, never written.
AI Agent transcripts: Free, 90 days; Pro, never stored: the run keeps its summary and its counters only.
Operational logs: Free, 12 months; Pro, 90 days.
Product analytics: Free, usage linked to your account, opt-out; Pro, lifecycle and counts only, no content.
Your history: Free, until you delete it or your account; Pro, your choice in Settings, 30 days, 90 days, 1 year or until you delete it.
Product improvement: Free, technical copies may be measured and AI Agent conversations may be read, refused for free from AI Agent's settings or by email; Pro, never.

Cookies

Our website uses cookies and similar technologies:

Strictly Necessary Cookies

Authentication session cookies. These are essential for the website to function and do not require consent.

Analytics Cookies (Consent Required)

Analytics cookies for understanding how visitors use our website and improving user experience. These are only activated after you give your consent via our cookie banner.

You can manage your cookie preferences via the cookie banner.

Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

Right of access: Obtain a copy of your personal data
Right to rectification: Correct inaccurate data
Right to erasure: Request deletion of your data
Right to restrict processing: Limit data processing
Right to data portability: Receive your data in a portable format
Right to object: Object to processing based on legitimate interest

You can download a copy of the personal data we hold about you at any time from the Account section of your dashboard (right to data portability, GDPR Art. 20). The file is JSON and links to stored images stay valid for 24 hours. To exercise any other right, contact us at yvann.barbot@terra-lab.ai. We will respond within one month, extendable by two months for complex requests (GDPR Art. 12(3)).

You also have the right to lodge a complaint with the French data protection authority (CNIL), 3 place de Fontenoy, 75007 Paris, www.cnil.fr.

Updates

This policy may be updated to reflect changes in our practices or legal requirements. Material changes will be communicated via email to registered users.

Last updated: September 13, 2026