1. Introduction

This Privacy Policy describes how Terradium ("we," "us," or "our") collects, uses, and protects your information when you use our AI-powered content scheduling and publishing platform (the "Service").

2. Information We Collect

2.1 Personal Information

Account Information: Name, email address, profile image
Authentication Data: Provided through Clerk authentication service
Payment Information: Processed through Paddle (we do not store payment details)
Usage Preferences: Default AI models, timezone, notification settings

2.2 Content and Project Data

Generated Content: Articles, blog posts, and other content created through our AI agents
Project Information: Sanity CMS project configurations, API tokens (encrypted)
Publishing Data: Content publishing schedules and status

2.3 Usage Data

Service Usage: Electron consumption, API usage, content generation sessions
Technical Data: IP addresses, user agents, device information
Analytics Data: Platform usage patterns, feature utilization

2.4 Third-Party Integrations

Sanity CMS: Project IDs, datasets, API tokens (encrypted at rest)
OpenAI: Content generation requests and responses
Clerk: Authentication and user management data

3. How We Use Your Information

3.1 Service Provision

Authenticate and manage your account
Generate and manage AI-powered content
Process payments and manage subscriptions
Publish content to your connected Sanity projects

3.2 Service Improvement

Monitor platform performance and usage
Develop new features and improvements
Provide customer support
Send service-related notifications

3.3 Legal and Security

Comply with legal obligations
Prevent fraud and abuse
Protect platform security
Maintain audit logs

4. Information Sharing

4.1 Third-Party Service Providers

Clerk: User authentication and management
OpenAI: AI content generation services
Paddle: Payment processing and subscription management
Sanity: Content management and publishing
Resend: Email communications
Sentry: Error monitoring and performance tracking

4.2 Legal Requirements

We may disclose your information when required by law, court order, or to protect our rights and safety.

4.3 Business Transfers

In case of merger, acquisition, or sale, your information may be transferred as part of business assets.

5. Data Security

5.1 Encryption

API tokens and sensitive data encrypted at rest
All data transmissions use HTTPS/TLS encryption
Database connections secured with industry-standard protocols

5.2 Access Controls

Role-based access to user data
Regular security audits and monitoring
Secure development practices

5.3 Data Retention

Account data retained while account is active
Content data retained according to your preferences
Usage logs retained for 2 years
Payment records retained as required by law

6. Your Rights

6.1 Access and Portability

View and export your personal data
Access content generation history
Download your generated content

6.2 Correction and Deletion

Update your account information
Delete your account and associated data
Request correction of inaccurate information

6.3 Control Settings

Manage notification preferences
Control data sharing with third parties
Opt out of non-essential communications

7. Cookies and Tracking

7.1 Essential Cookies

Authentication and session management
Platform functionality and preferences
Security and fraud prevention

7.2 Analytics Cookies

Usage analytics and performance monitoring
Feature usage tracking
Error reporting and debugging

8. International Data Transfers

Your data may be processed in countries other than your residence. We ensure appropriate safeguards are in place for international transfers in compliance with applicable privacy laws.

9. Children's Privacy

Our Service is not intended for users under 16 years of age. We do not knowingly collect personal information from children under 16.

10. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

Right to know what personal information is collected
Right to delete personal information
Right to opt-out of sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising privacy rights

11. European Privacy Rights (GDPR)

For European users, we process data under the following lawful bases:

Contract: To provide the Service you've subscribed to
Legitimate Interest: To improve our Service and prevent fraud
Consent: For marketing communications (where required)
Legal Obligation: To comply with applicable laws

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the platform.

13. Contact Information

For privacy-related questions or requests:

Email: info@terradium.io

Your Privacy Matters