Privacy policy

Who we are

TerraSov ("we") is operated by Héctor Cruz Aranda, Spain — see theimprint. We are the controller for the data described here.

What we process, and why

• Checkout and billing — handled by Paddle as merchant of record (their privacy policyapplies). We receive your email address and subscription status, not your payment details. Legal basis: contract performance (Art. 6(1)(b) GDPR).
• Access management — the email you used at checkout and the GitHub username(s) you assign to seats, stored in our AWS account in the EU (eu-central-1, Frankfurt), encrypted with customer-managed keys. Legal basis: contract performance.
• Support email — whatever you send us, kept as long as needed to resolve the issue. Legal basis: legitimate interest (Art. 6(1)(f)).

What we don't do

• No analytics or advertising trackers on this site.
• No cookies set by us. Paddle's checkout sets its own strictly-necessary cookies when opened.
• No sale or sharing of personal data.

Processors and transfers

Paddle (merchant of record), Amazon Web Services EMEA SARL (hosting, EU regions), GitHub (repository access management), Cloudflare (website delivery). Where a processor may transfer data outside the EEA, transfers rely on adequacy decisions or Standard Contractual Clauses.

Retention

Subscription records are kept while your subscription is active and for the retention periods Spanish tax law requires afterwards. Seat records are deleted when revoked.

Your rights

Access, rectification, erasure, restriction, portability and objection — emailsupport@terrasov.dev. You can also lodge a complaint with the AEPD (aepd.es).