Security and data
Where your imagery goes
Forward this page to whoever signs off before your team installs a plugin. It says what leaves QGIS, who processes it, in which country, how long we keep it and how to have it erased.
Last updated 3 September 2026
Read the full privacy policyWhat leaves QGIS
What each mode sends
The plugin asks before the first upload. Nothing is sent in the background.
Semi-Auto on your own machine
No imagery. You download the model once, then it runs on your CPU. The plugin still checks your licence and sends the diagnostics described below.
AI Segmentation in the cloud
A Cloud AI click sends a small square of imagery around the point you clicked. An Automatic run sends the tiles inside the zone you drew, the word you typed, up to 8 example boxes you drew, the outline of the zone and the coordinates that place it. The polygons you keep at the end come back to us too.
AI Edit
The area you select, your prompt and any reference images, plus that area's extent, its coordinate system and the name of the basemap under it.
What we never receive
- Your project file and your other layers. We open neither.
- Your layer names, your file paths and the URL of your imagery source. The basemap field carries a provider name and a host, and the plugin strips the rest before sending.
- Any imagery in the diagnostics. They carry errors, the plugin and QGIS versions, your operating system and which features you use, tied to your account. The Privacy setting in the plugin's account dialog turns them off, and turning them off in one plugin turns them off in both.
Where it is processed
Every service we send your data to
One row per thing we hold. The country is where the data sits. Some of these companies are registered elsewhere.
| Data | Service | Where |
|---|---|---|
| Accounts, quota, and the record of each generation and each detection | Supabase Postgres | Paris, France |
| AI Edit inputs, outputs and reference images. AI Segmentation tiles and results | Google Cloud Storage, bucket terralab-ai-edit | Paris, France (europe-west9) |
| AI Edit generation itself | fal.ai | Outside the European Union, under Standard Contractual Clauses. Images and payloads expire there after 30 days. |
| AI Segmentation detection itself | Our own service on Google Cloud Run | Belgium (europe-west1). It never leaves the EU. |
| The website and the plugin API | Vercel | Functions run in Paris (cdg1). Vercel Inc. is a United States company. |
| Card payment, invoices and VAT | Stripe | International. You enter the card on Stripe's own page, so our servers never see a card number. |
| Product analytics and error tracking | PostHog | European Union (eu.i.posthog.com). No imagery reaches it. |
| Request counters, one integer per activation key or IP address, kept 65 seconds | Upstash Redis | Ireland (eu-west-1). The activation key is stored as a truncated SHA-256 hash. |
| Your email address, country, city, language, plan and usage flags, for account and lifecycle email | Loops | Outside the European Union, under Standard Contractual Clauses |
| Encrypted database backups | Google Cloud Storage Coldline | Paris, France. Erased automatically after 365 days. |
Retention and deletion
How long we hold each thing
- Account data: until you ask us to delete it.
- Plugin imagery: for the lifetime of your account, then erased on account deletion or earlier on request. We keep no copy anywhere else.
- Detection masks in the database: dropped 12 hours after the run is archived. The staging area for uploads empties after 7 days.
- Usage records: your subscription, plus 12 months, for billing.
- Analytics: 24 months at most. Invoices: 10 years, which French commercial law requires (Code de commerce, article L123-22).
Asking for deletion
Write to yvann.barbot@terra-lab.ai and say what you want erased. If you never paid us, everything goes, the account included. If you did pay, we strip the personal data and keep the billing record alone, because the 10-year rule above is not ours to waive. You can also ask us to erase the imagery and keep the account. We answer within the 30 days the GDPR sets. Encrypted backups still holding erased rows expire on their own within 12 months.
Sub-processors
The companies that process your data for us
Nobody else touches it. We train no model on your imagery and we sell it to no one.
| Company | What it does for us | Where the data sits |
|---|---|---|
| Supabase | Database, sign-in by email link, file storage | Paris, France |
| Google Cloud | Imagery archive, AI Segmentation inference, backups | Paris and Belgium |
| fal.ai | AI Edit image generation | Outside the European Union |
| Vercel | Website and API hosting | Functions in Paris. United States company |
| Stripe | Card payment and invoicing | International |
| PostHog | Product analytics and error tracking | European Union |
| Upstash | Rate-limit counters | Ireland |
| Loops | Account and lifecycle email | Outside the European Union |
What we do not have
Ask us for these and the answer is no
We are a two-person French company. Here is what we cannot hand your procurement team.
- No SOC 2 report. We have never been audited against it.
- No ISO 27001 certificate.
- No on-premise or private-cloud install. Cloud detection and generation run on our servers only. Semi-Auto is the offline path, and it is free.
- No single sign-on. You sign in with a link sent to your email address.
- No public status page yet.
Who to write to
A data processing agreement, or a security questionnaire
Send either to yvann.barbot@terra-lab.ai and one of the two founders answers you in writing. Fill in your own form and we sign it. We have no form of our own to push on you. We have named no data protection officer, which the GDPR does not require at our size, so the address above is the controller contact.
yvann.barbot@terra-lab.aiWho you are contracting with
- TerraLab, société par actions simplifiée, share capital 1,000 euros
- SIREN 104 501 861, RCS Paris B 104 501 861
- Intra-EU VAT FR43104501861
- 173 rue de Courcelles, 75017 Paris, France
- President and publication director: Yvann Barbot