Privacy Policy

Your privacy is important to us. It is Terrastruct's policy to respect your privacy regarding any information we may collect from you across our website, http://terrastruct.com, and other sites we own and operate.

We only ask for personal information when we truly need it to provide a service to you. We collect it by fair and lawful means, with your knowledge and consent. We also let you know why we’re collecting it and how it will be used.

We only retain collected information for as long as necessary to provide you with your requested service. We don’t share any personally identifying information publicly or with third-parties, except when required to by law.

Data Retention Policy

Terrastruct, Inc. shall retain data as long as the company has a need for its use, or to meet regulatory or contractual requirements. Once data is no longer needed, it shall be securely disposed of or archived. Data owners, in consultation with legal counsel, may determine retention periods for their data. Retention periods shall be documented in the Data We Collect section below.

What data we store, we’ll protect within commercially acceptable means to prevent loss and theft, as well as unauthorized access, disclosure, copying, use or modification.

Data & Device Disposal

Data classified as restricted or confidential shall be securely deleted when no longer needed. Terrastruct, Inc. shall assess the data and disposal practices of third-party vendors in accordance with the Third-Party Management Policy. Only third-parties who meet Terrastruct, Inc. requirements for secure data disposal shall be used for store and process of restricted or confidential data.

Terrastruct, Inc. shall ensure that all restricted and confidential data is securely deleted from company devices prior to, or at the time of disposal.

Data We Collect

Terrastruct will collect and receive information through operating the Services and Websites, and through other interactions with other Terrastruct services. Such information will include Customer Data and other information and data (“Other Information”) in a variety of ways:

• Customer Data. Users routinely submit Customer Data (such as diagrams, images, comments, or other data) to Terrastruct when using its services. This data is retained for up to 60 days after contract termination.
• Other Information. All data listed below is retained indefinitely.
  • Customer support data
    • Customer instance data and metadata
    • Debugging data
  • Support Tickets and Cases
  • Security Event Data
    • Security and system event and log data
    • Network data flow logs
  • Customer Sales Data
  • QA and Testing Data

Our website may link to external sites that are not operated by us. Please be aware that we have no control over the content and practices of these sites, and cannot accept responsibility or liability for their respective privacy policies.

Your Rights

You are free to refuse our request for your personal information, with the understanding that we may be unable to provide you with some of your desired services.

Third-Party Subprocessors

In accordance with GDPR and CCPA requirements, we maintain a list of third-party subprocessors that may process your data on our behalf. These services are carefully selected and contractually bound to protect your data.

Payment Processing

• Stripe - Payment processing, subscription management, and billing for transaction data and payment information.

Cloud Infrastructure

• Google Cloud Platform - Cloud storage, autolayout processing, and reCAPTCHA verification for user diagrams, exported files, and form submissions.

Authentication & Integration Services

• GitHub - OAuth authentication and repository integration for user profile information, repository data, and authentication tokens.
• Google - OAuth authentication for user profile information and authentication tokens.
• WorkOS - Single Sign-On (SSO) authentication for enterprise users, processing user profile information and authentication data.

Communication & Collaboration

• Slack - Bot integration for D2 diagram generation, processing workspace data, user messages, and generated diagrams.
• Discord - Bot integration for D2 diagram generation, processing server data, user messages, and generated diagrams.
• Atlassian - Integration with Jira, Confluence, and other Atlassian products for workspace data and user information.

Email Services

• SendGrid - Transactional email delivery for notifications, password resets, and other communications using email addresses and content.

Analytics & Monitoring

• Sentry - Error tracking and application monitoring, processing error logs, performance data, and user context for debugging.
• LogRocket - Session recording and debugging tool, processing user interactions, session recordings, and application state for debugging purposes.
• Elastic APM - Application performance monitoring, processing performance metrics, transaction traces, and system metrics.

All subprocessors are contractually required to implement appropriate security measures and use your data only for the specific purposes outlined above. We regularly review our subprocessors and will update this list as our services evolve.

Data Processing Addendum (DPA)

For enterprise customers and those subject to GDPR, CCPA, or other data protection regulations, we provide a comprehensive Data Processing Addendum that governs our processing of personal data on your behalf. Our DPA includes detailed information about:

• Legal roles and responsibilities
• Data processing purposes and lawful bases
• Security measures and incident response
• Cross-border data transfer mechanisms
• Data subject rights and deletion procedures
• Complete subprocessor list with audit rights

View our complete Data Processing Addendum →

Your continued use of our website will be regarded as acceptance of our practices around privacy and personal information. If you have any questions about how we handle user data and personal information, feel free to contact us at info@terrastruct.com. To explicitly request for the deletion of your data, please make a request to us at support@terrastruct.com.