Privacy policy
Terra Loom is operated by EZIO DESIGN STUDIOS, an Ontario sole proprietorship. This policy covers terra-loom.com, the Terra Loom workspace and its reporting and AI connections. Contact areeb7676@gmail.com with privacy questions or requests.
Information we handle
- Account and workspace information: your name, email, sign-in identifiers, workspace membership, invitations, preferences and connection permissions.
- Your work: documents, reports, trackers, files and images you upload or create, their versions, and conversations or context you explicitly save.
- Connected reporting: account and resource identifiers, names, authorization scopes and tokens, selected reporting resources, and the metrics you request.
- Service and security information: request and error records, timestamps, IP addresses and browser information processed to operate, secure and troubleshoot the service.
What reporting connections access
When a connection is available and you authorize it, Google reporting can read the Analytics properties, Search Console sites or Ads accounts you select, and Google Sheets sync reads and updates only the spreadsheets you connect to a tracker. Meta Ads reads ad-account information and advertising performance, including Facebook and Instagram placements. Instagram Insights reads the authorized professional profile and its insights. TikTok reporting reads the authorized advertiser or business account and its analytics.
These reporting connections do not publish content, send messages, change campaigns or purchase advertising. Availability depends on the provider, your account type and the permissions it grants. Connecting one service does not authorize another.
Why we use this information
We use information to sign you in, provide workspace collaboration and reporting, carry out your requested actions, deliver service messages, maintain security and respond to support or legal requests. We do not sell personal information or use connected reporting data to target advertising or train general-purpose AI models.
Information received through Google APIs is handled under the Google API Services User Data Policy, including its Limited Use requirements. We use it for the reporting features you authorize; transfers are limited to consented features, security and legally permitted purposes.
Sharing and AI access
Workspace members can access content according to their roles and sharing grants. Publishing a report or sharing a link can expose the content included in that release to its permitted audience.
Reporting connections are private to their author. A connected AI client can retrieve reporting data only when you separately enable the appropriate provider permission for that exact AI connection. Data returned to that client is then processed under its provider's terms and privacy policy. Review the client and its permissions before enabling access.
Our infrastructure providers include Cloudflare for application hosting, storage and processing; Neon for the database; WorkOS for authentication; and Resend for product email. Optional Google, Meta, Instagram and TikTok connections communicate with those providers' official APIs. Service providers may process information outside Canada. We may disclose information when legally required or necessary to address security incidents.
Storage and safeguards
Connections use encrypted transport. Provider tokens are encrypted before database storage and are not returned to AI clients. Access checks, workspace isolation and per-connection permissions restrict access. No system can guarantee absolute security.
Retention and deletion
We retain information for as long as needed to provide the workspace, maintain security, resolve requests and meet legal obligations. Versions, trash, audit records and backups can have different retention needs from active documents.
Disconnecting a reporting service removes its stored authorization token and selected reporting resource. It does not delete documents, reports or AI conversations where you previously saved results, or remove information held by the source provider. You can separately revoke access in the provider's account settings.
For account, workspace or retained-data deletion, follow our data deletion instructions. We verify the requester's authority, explain its scope, and confirm the outcome or any information that must be retained. Copies held by collaborators, public recipients or independent AI providers require requests to those recipients.
Your choices and requests
You can review reporting connections and AI permissions in workspace settings. Contact us to request access to, correction of or deletion of personal information, withdraw consent, or raise a privacy concern. We may need information to verify your identity and authority; do not send passwords or access tokens.
Cookies and changes
We use cookies and similar storage for sign-in, authorization, security and preferences. Connected providers apply their own cookie policies. We will update this page when our practices change and seek renewed consent where required before using connected data for a new purpose.