Terrainica Privacy Policy
1. Who We Are (Data Controller)
Terrainica is operated by [YOUR FULL NAME], registered as individuali veikla (sole trader) under Lithuanian law. Personal identification code: [INSERT VMI CODE AFTER REGISTRATION].
Contact for privacy matters:
Email: privacy@terrainica.com
Address: [INSERT ADDRESS, Lithuania]
2. What Data We Collect and Why
| Data | Purpose | Legal Basis |
|---|---|---|
| Email address and password (hashed) | Account creation and authentication | Contract performance |
| First name, company name | Personalising your experience | Legitimate interest |
| Parcel search history and report generation logs | Delivering the service, security monitoring | Contract performance |
| Credit balance and transaction ledger | Billing and subscription management | Contract performance, legal obligation |
| Support conversation messages | Resolving support requests | Legitimate interest |
| Payment method details | Processed entirely by Stripe — Terrainica never stores card numbers | Contract performance |
| Usage logs (IP address, browser type, timestamps) | Security, fraud prevention, service reliability | Legitimate interest |
We do not collect any special categories of personal data (health data, biometrics, political opinions, etc.).
3. Who We Share Your Data With
We use the following third-party processors to operate the platform. All are bound by data processing agreements:
- Supabase (authentication and database hosting) — supabase.com
- Stripe (payment processing) — stripe.com — EU Standard Contractual Clauses apply
- Oracle Cloud (server hosting, Frankfurt, Germany) — oracle.com
- Resend (transactional email delivery) — resend.com
- Google (AI support features, if enabled) — google.com — EU DPA applies
We do not sell your data. We do not share your data with advertisers.
4. How Long We Keep Your Data
| Data type | Retention period |
|---|---|
| Account data (email, name) | Until account deletion + 30 days |
| Financial records (invoices, credit ledger) | 10 years (Lithuanian accounting law) |
| Support conversation messages | 2 years after resolution |
| Usage logs | 90 days rolling |
| Parcel search and report history | Duration of account + 30 days |
5. Your Rights Under GDPR
As a data subject under the EU General Data Protection Regulation (GDPR), you have the following rights:
- Access — Request a copy of all personal data we hold about you
- Rectification — Correct inaccurate or incomplete data
- Erasure — Request deletion of your account and associated data (subject to legal retention requirements for financial records)
- Portability — Receive your data in a machine-readable format
- Objection — Object to processing based on legitimate interest
- Restriction — Request that we limit processing of your data
To exercise any of these rights, email privacy@terrainica.com. We will respond within 30 days.
6. Cookies
Terrainica uses one session cookie to maintain your login state. This cookie is strictly necessary for the service to function and does not track you across other websites.
We do not use advertising cookies, analytics cookies, or third-party tracking.
7. Supervisory Authority
If you believe we have not handled your personal data correctly, you have the right to lodge a complaint with the Lithuanian data protection supervisory authority:
Valstybinė duomenų apsaugos inspekcija (VDAI)
Website: vdai.lrv.lt
Email: ada@ada.lt
Address: L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania
8. Changes to This Policy
We may update this policy as the platform evolves. When we make material changes, we will notify registered users by email at least 14 days before the change takes effect. The date at the top of this page always shows when it was last updated.