Privacy Policy

1. Who We Are

Tercet is operated by Symbolics Lab, based in Montreal, Canada. This policy describes how we collect, use, and protect your information when you use the Tercet API and website (tercet.dev).

2. What We Collect

• Email address — provided at signup, used for account identification and transactional email (welcome email, tier changes).
• API usage data — prediction counts, model counts, and timestamps. Used for rate limiting, billing, and service monitoring.
• Training data — feature vectors and labels you send to the /train endpoint. Stored as model files scoped to your API key.
• Payment information — processed by Stripe. We do not store credit card numbers, bank account details, or other payment credentials on our servers.

3. How We Use Your Data

• To provide the Service: authenticate requests, train models, return predictions, enforce rate limits.
• To send transactional email: welcome email with your API key, tier upgrade confirmations.
• To process payments: via Stripe for paid tiers.

We do not:

• Use your training data to improve our algorithms or train our own models.
• Sell or share your data with third parties for marketing.
• Track you across websites or use advertising cookies.

4. Third-Party Services

We use the following third-party services:

• Stripe (stripe.com) — payment processing. Stripe processes your payment information under their own privacy policy.
• Resend (resend.com) — transactional email delivery. Receives your email address to send welcome and account emails.
• Fly.io (fly.io) — infrastructure hosting. Our API and database run on Fly.io servers in Toronto, Canada.
• Vercel (vercel.com) — website hosting for tercet.dev.

5. Data Retention

• API keys and account data — retained as long as your account is active. Deleted upon account termination.
• Models and training data — retained until you delete them or your account is terminated.
• Usage logs — retained for billing purposes. Monthly counts reset at each billing cycle.

6. Your Rights

You have the right to:

• Access your data — request a summary of what we store about you.
• Delete your data — request account deletion, which removes your API keys, models, and usage data.
• Export your models — download your trained models via the API.
• Correct your information — update your email address by contacting us.

To exercise any of these rights, contact sales@tercet.dev.

7. Security

All API communication is encrypted via HTTPS/TLS. API keys are generated using cryptographically secure random values. Database queries use parameterized statements. We follow security best practices appropriate to the sensitivity of the data we handle.

8. Cookies

The tercet.dev website does not use tracking cookies or analytics services. The API does not use cookies.

9. Children

The Service is not directed to children under 16. We do not knowingly collect information from children.

10. Changes

We may update this policy. Material changes will be communicated via email. The "last updated" date at the top reflects the most recent revision.

11. Contact

Privacy questions: sales@tercet.dev