Legal

Privacy Policy

Last updated: July 30, 2026

Terra helps immigrants navigate their case, and doing that well means asking for information that can be genuinely sensitive — including, in some cases, whether someone currently has legal status at all. We take that seriously. This policy explains what we collect, why, who else touches it, and the control you have over it.

What we collect

  • Account information: your name, email address, and a securely hashed password when you create a Terra account.
  • Case information: what you share through the Get Started form — country of origin and destination, immigration category, case stage, sponsorship status, current status, legal representation, deadlines, and any notes you add.
  • Community content: questions and answers you post publicly on the Community board.
  • Chat messages: conversations with Jay, Terra's AI assistant.
  • Usage data: basic, aggregated analytics about how the site is used (pages visited, general interactions) — this does not include the content of what you type.

How we use it

We use your information to operate your account, send you the policy alerts and case guidance you sign up for, respond to your questions (via Jay or, on Premium, a licensed attorney), moderate community content, and improve the product. We do not sell your personal information.

Who processes it

We rely on a small number of service providers to run Terra, each bound to only use your data to provide their service to us:

  • Supabase — stores your account and case data, and handles authentication.
  • Google (Gemini API) — processes chat messages and community posts to generate responses and check content against our community guidelines.
  • Vercel — hosts the site and provides aggregated, anonymized usage analytics.
  • Resend — delivers transactional emails, such as case confirmations and password reset links.

We do not share your case details with employers, government agencies, or any other third party unless you explicitly direct us to (for example, connecting with an attorney on Premium) or we're legally required to.

Cookies

Terra uses a single essential cookie to keep you logged in. It's marked HttpOnly and Secure, meaning it can't be read by page scripts and is only ever sent over an encrypted connection. We don't use advertising or cross-site tracking cookies.

Your controls

  • You can update or remove your case notes at any time by contacting us.
  • You can delete your account and associated case data yourself, at any time, from your account page — this is permanent and cannot be undone.
  • You can ask us what data we hold about you by contacting privacy@terra.example.

Retention

We keep your data for as long as your account is active, or as needed to provide the service. If you delete your account, your case data is permanently removed; a small amount of information may be retained where required by law or to prevent fraud.

Security

Case data is stored with row-level access controls so it's only ever reachable through your authenticated session or our backend — never directly from the browser. Passwords are never stored in plain text.

Changes to this policy

If we make material changes to this policy, we'll update the date above and, where appropriate, notify you directly.

Contact

Questions about this policy or your data? Email privacy@terra.example.