Privacy policy

Account information. When you create an account we store your email address, an opaque user identifier from our auth provider (Supabase), and any name you provide.

Onboarding signals. The 200+ taste signals we extract from the onboarding flow — voice transcripts, image-pair choices, swipes, sliders, and ranked comparisons. These are stored in our database and used to build your taste model.

Saved places, trips, and collections. Anything you save, plan, or organize inside Terrazzo, along with the source you attached when you saved it (article URL, voice memo, screenshot, forwarded email, etc.).

Google account data. If you connect Google Calendar or Gmail, we receive the data described in the "Google account data" section below.

Usage information. Standard server logs (IP address, user agent, request paths, timestamps) and product analytics (which features you use, errors encountered) collected through our hosting provider (Vercel) and analytics tooling.

We do not collect or process payment card information ourselves. If we offer paid plans in the future, payment data will be handled by a PCI-compliant processor.

We use the information we collect to operate the product as described:

• Build and refine your personal taste model and the recommendations, match scores, and editorial content derived from it.
• Resolve places you save against Google's Places database, enrich them with intelligence (signals, anti-signals, what to order), and surface them across the library, planner, and discover feed.
• Extract reservation candidates from your calendar (and, if you opt in, your email) so you don't have to re-enter places you've already booked.
• Send transactional emails — sign-in links, account notifications, and updates about Terrazzo's service.
• Diagnose bugs, prevent abuse, and improve the product based on aggregated, de-identified usage patterns.

We do not use your data to train general-purpose AI models, sell it to third parties, or use it for advertising.

Terrazzo offers two optional integrations with your Google account. Both are read-only — we never write to your Calendar or Gmail.

Google Calendar. When you connect Calendar through the "Connect Google Calendar" button, you grant Terrazzo access to:

• calendar.events.readonly — to read events on your primary calendar so we can identify hotel stays, restaurant reservations, and trip destinations that have been auto-added by services like Resy, OpenTable, Booking.com, and Airbnb.
• userinfo.email — to record the email address of the connected account so you can manage and disconnect it later.

What we do with Google data. We extract place names, locations, dates, and organizer information from calendar events and email confirmations to identify reservations. The extracted structured data is stored in your Terrazzo library and used to populate the planner and library. Raw event bodies and email bodies are not retained beyond the parsing step.

Sharing of Google data. We do not share Google account data with any third party except service providers (subprocessors) listed below who are necessary to operate the product on our behalf. We do not sell Google account data, use it for advertising, or use it to train AI models. We do not allow humans to read Google account data except (a) with your explicit consent in a support context, (b) when required by law, or (c) when necessary for security investigations.

Limited Use disclosure. Terrazzo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke Terrazzo's access at any time from your Google Account permissions page, or by clicking "Disconnect" in the Connected Accounts panel inside Terrazzo. Revoking access stops all future reads; place candidates already extracted into your library remain there until you delete them.

Terrazzo uses third-party AI providers — Anthropic (Claude) and OpenAI — to perform taste matching, generate place descriptions, extract signals from your onboarding, and produce embeddings for similarity search.

When we send data to these providers we send the minimum needed for the task — typically place names, structured signal vectors, and short prompt context. We do not send raw Google Calendar events or raw Gmail bodies to AI providers. Both providers contractually commit to not training their models on our API traffic.

We rely on the following providers to operate the service. Each is bound by terms that restrict their use of your data to the purposes we direct.

• Supabase — authentication and primary database
• Vercel — hosting, edge runtime, and analytics
• Upstash — Redis cache and rate limiting
• Anthropic — Claude API for taste analysis and content generation
• OpenAI — embeddings for similarity search
• Google — Maps Platform (Places API) for place resolution; Calendar API for the optional calendar integration
• Resend — transactional email
• ElevenLabs — text-to-speech for the onboarding voice flow

We retain your account information and content for as long as your account is active. If you ask us to delete your account, we delete your account record, taste signals, saved places, trips, and collections from our primary database within 30 days of the request. Encrypted backups are purged on a rolling 90-day schedule.

To request deletion or a copy of your data, email hello@terrazzo.travel. Self-serve deletion and export are on the roadmap.

Depending on where you live, you may have rights under privacy laws like the EU GDPR or California's CCPA — including the right to access, correct, delete, or export your personal information, and to object to certain processing.

To exercise any of these rights, contact us at hello@terrazzo.travel. We'll respond within the timeframes the applicable law requires.

OAuth tokens are encrypted at rest using AES-256-GCM. Database connections use TLS. Access to production systems is restricted to a small number of authorized personnel and gated by SSO and 2FA. Despite these measures, no system is perfectly secure; if you believe your account has been compromised, contact us immediately.

Terrazzo is not directed at children under 13 (or 16 in the EU/UK), and we do not knowingly collect data from them. If you believe a child has provided us with information, please email us so we can delete it.

Terrazzo is operated from the United States. If you access the service from outside the US, your information will be transferred to and processed in the US. We rely on appropriate safeguards — including Standard Contractual Clauses where applicable — when our subprocessors transfer data internationally.

We may update this policy as the product evolves. The effective date at the top of this page reflects the most recent revision. Material changes will be communicated by email or in-product notice before they take effect.

Questions, requests, or complaints? Email us at hello@terrazzo.travel.