Privacy Policy

1. General provisions

This Policy describes how the WebTerra AI service at webterra-ai.com(the “Service”) processes the personal data of its Users. It is based on the Law of Ukraine “On Personal Data Protection” and follows the principles of the EU General Data Protection Regulation (GDPR): lawfulness, transparency, purpose limitation, data minimization and storage limitation.

The controller of personal data is the WebTerra AI service. For any data protection questions, email [email protected].

By signing up and using the Service, the User agrees to the processing of their personal data in accordance with this Policy.

2. Data we collect

• Registration data: email, name, avatar (if uploaded)
• Authentication data: Google account ID (when signing in with Google)
• Payment data: transaction history (card details are processed by the payment provider and are not stored by us)
• Technical data: IP address, browser and device information, cookies
• User content: prompts, uploaded references, generated materials, usage history
• Support correspondence: messages via Telegram and email

3. Purposes and legal bases

We process data to:

• provide the Service and perform the Terms of Service
• charge and add credits
• process payments
• communicate with the User (support replies, important changes to the Service)
• ensure security and prevent fraud and content rules violations
• improve the Service
• comply with legal obligations

The legal bases are the User’s consent, performance of a contract (the Terms of Service), the Service’s legitimate interests (security, abuse prevention) and compliance with legal obligations.

4. Who we share data with

Data is shared only with processors the Service cannot work without, and only to the extent necessary:

• Supabase — database and authentication (account, balance, transaction history)
• fal.ai and the AI model providers available through it — the prompt text and uploaded references are sent to perform the generation
• S3-compatible object storage — storage of uploaded files and generation results
• WayForPay — card payment processing
• Resend — sending emails (support replies, service notifications)
• Telegram — the support channel, if the User contacts us there
• Public authorities — only upon a lawful request

We do not sell personal data and do not use third-party analytics or advertising tracking.

Some processors are located outside Ukraine (including in the EU and the US). Cross-border transfers are made only to the extent needed to provide the Service and only to processors that apply appropriate data protection safeguards.

5. Storage and security

5.1. Data is transmitted over encrypted connections (TLS) and stored in the infrastructure of the processors listed in section 4.

5.2. Access to data is limited to people who need it to operate the Service.

5.3. Retention periods: account data — while the account is active; transaction history — 3 years after account deletion (for accounting and fraud prevention).

6. Your rights

Under applicable law, the User has the right to:

• know what data is processed, for what purpose and by whom
• access their data and receive a copy of it
• have inaccurate data corrected
• request erasure of their data or restriction of processing
• object to processing
• withdraw consent (this will result in account deletion)
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights, the data protection authority of their country, or a court

To exercise these rights, send a request to [email protected] from the email address your account is registered with. We respond within 30 days.

7. Cookies

The Service uses only strictly necessary cookies: to keep you signed in, for security and to remember your interface language. There are no analytics or advertising cookies.

You can disable cookies in your browser settings, but signing in will not work without them.

8. Changes to this Policy

The current version is always available on this page. We also notify Users of material changes by email.