Terriloom1. Who we are
Terriloom is operated by Pranay Lanka, trading as Terriloom, Lockerbie, Scotland, United Kingdom ("Terriloom", "we", "us"). We are the data controller for the personal data described in this policy. You can reach us at hello@terriloom.com.
2. Data we collect
Account data. Name, email address, username, a hashed password, the workspace you belong to and your role in it, and the dates your account was created, confirmed and last used.
Content you provide. Items, comments, messages, files and other material that you or your team enter into the service. This may contain personal data about you or others; you are responsible for having the right to enter it.
Payment data. If you purchase a workspace, our payment provider processes the payment. We receive confirmation of the payment, the amount and the email address used. We do not receive or store card numbers.
Technical data. IP address, browser type and request logs, collected automatically when you use the service, and the referring website recorded at sign-up.
Correspondence. Messages you send to us.
3. How we use it
- To provide, maintain and secure the service, including sign-in, email verification, notifications you enable, and protection against abuse. Legal basis: performance of our contract with you, and our legitimate interest in operating a secure service.
- To process payments and keep the records that tax and accounting law require. Legal basis: contract and legal obligation.
- To respond to your enquiries. Legal basis: legitimate interest.
- To send service notices, such as changes to the terms or to the service. Legal basis: contract and legal obligation.
We do not sell personal data, use it for advertising, or use your content to train machine-learning models. We do not make automated decisions that have legal or similarly significant effects on you.
4. How we share it
We share personal data only with service providers who process it on our behalf and under our instructions: cloud hosting and database services, email delivery, encrypted backup storage, and our payment provider. Each is bound by a data processing agreement. We may also disclose data where the law requires it, to protect the rights or safety of Terriloom or others, or to a successor if the service is transferred, in which case this policy continues to apply.
Integrations you connect, such as a coding assistant using an access key you create or Claude using the Terriloom connector, act under your own account with that third party. Terriloom does not transmit your data to them; they retrieve it from Terriloom at your instruction, and you can revoke their access at any time in Settings.
5. Where it is stored
Personal data is stored in the European Union. Some service providers process data in the United States; where that happens, the transfer is covered by the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, as applicable.
6. How long we keep it
Account and content data are kept for as long as the workspace exists. A trial workspace that is not purchased is locked after 14 days, with nothing deleted, and may be deleted after 12 months without a sign-in. Files sent in chat are deleted 90 days after they were sent; the message itself is kept. On a verified deletion request we delete the data within 30 days; encrypted backups expire within a further 14 days. Payment records are retained for six years as required by UK law. Security logs are kept only for as long as they are needed to detect and prevent abuse.
7. Security
Data is encrypted in transit and at rest. Passwords are stored hashed and are checked against known breach lists when they are set. Access to production systems is restricted and backups are encrypted. We access the content of a workspace only when a member asks us to for support, or when the law requires it. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
8. Your rights
Under the UK GDPR and, where it applies, the EU GDPR, you have the right to access the personal data we hold about you, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Account details can be changed in Settings and workspace data can be exported from Settings at any time. For anything else, contact hello@terriloom.com; we respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office or your local supervisory authority.
9. Cookies
The application uses strictly necessary cookies and browser storage to keep you signed in and to remember your preferences. We do not use analytics, advertising or third-party tracking cookies.
10. Children
The service is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child under 13 has created an account, contact us and we will delete it.
11. Changes
We may update this policy from time to time. Material changes will be notified by email to account holders before they take effect. The date at the top shows when the policy was last revised.
12. Contact
Questions about this policy or your data: hello@terriloom.com.
Terriloom is operated by Pranay Lanka, trading as Terriloom, Lockerbie, Scotland, United Kingdom.