Privacy Policy

This Privacy Policy explains how Terglos LLC ("Terglos", "we", "us") collects, uses, shares and protects personal information when you visit tercela.com, create an account or use the Tercela APIs, dashboards and related services (the "Services").

1. Information we collect

Information you provide

• Account data — name, username, email address, password (stored hashed) and organization details.
• Billing data — plan, invoices and payment details processed by our payment providers; we do not store full card numbers.
• Connected account data — identifiers and access tokens for the third-party platforms you connect (WhatsApp, Instagram, X, TikTok and others). Tokens are encrypted at rest.
• Support communications — messages you send to us, such as emails to our support address.

Information processed on your behalf

• Customer Content — posts, messages, media and recipient identifiers (such as phone numbers) that you submit through the APIs so we can deliver them to Connected Platforms, plus delivery events and webhooks received back from those platforms.

For Customer Content we act as a processor/service provider: you are the controller responsible for having a legal basis to contact your recipients.

Information collected automatically

• Usage and log data — API request metadata, IP address, browser and device information, pages visited and timestamps.
• Cookies — strictly necessary cookies for authentication and session management, and, where enabled, analytics cookies you can control in your browser.

2. How we use information

• Provide, operate and secure the Services, including delivering your content to Connected Platforms;
• authenticate users, prevent abuse, enforce rate limits and debug issues;
• process payments and manage subscriptions;
• communicate with you about the Services (transactional emails, security notices, product updates you can opt out of);
• analyze aggregate usage to improve the Services;
• comply with legal obligations.

We do not sell personal information, and we do not use Customer Content to train advertising profiles.

3. How we share information

• Connected Platforms — we transmit your Customer Content and tokens to the platforms you have connected, as instructed by your API calls. Their handling of data is governed by their own policies.
• Service providers — hosting, database, email and payment providers that process data under contract and only as needed to run the Services.
• Legal — when required by law, to protect rights and safety, or in connection with a merger, acquisition or asset sale (with notice where required).

4. Data retention and deletion

We keep account data while your account is active and as needed for legal, tax and audit purposes. Access tokens are deleted or invalidated when you disconnect an account. Customer Content and delivery logs are retained according to your plan's retention window and are deleted or anonymized afterwards. You may request deletion earlier (see Section 7) — the full instructions are on our User Data Deletion page.

5. Security

We use technical and organizational safeguards including encryption in transit (TLS), encryption of platform access tokens at rest (AES-256-GCM), hashed passwords, scoped API keys and role-based access within organizations. No method of transmission or storage is 100% secure; please report suspected vulnerabilities to contact@tercela.com.

6. International transfers

We are based in the United States and process data there and in the regions of our hosting providers. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for transfers of personal data from other jurisdictions.

7. Your rights

Depending on where you live (for example, under the GDPR, UK GDPR, LGPD or the CCPA/CPRA), you may have rights to access, correct, delete, port or restrict the processing of your personal information, and to object to certain processing. You can exercise these rights by emailing contact@tercela.com. We will respond within the timeframe required by applicable law and will not discriminate against you for exercising your rights. If we process data on behalf of one of our customers, we may redirect your request to that customer.

8. Children

The Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

9. Third-party links and platforms

The Services interoperate with third-party platforms and may link to third-party sites. Their privacy practices are governed by their own policies, and we encourage you to review them.

10. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice (such as email or an in-dashboard message).

11. Contact us

For privacy questions or to exercise your rights, contact: