Privacy
Privacy Policy
Last updated 2026-07-23
Summary
Terrave is a B2B platform for construction product environmental declarations. We collect personal data only as needed to operate the platform, support customers, and comply with regulations. We do not sell customer data. We use Google Analytics 4 on public marketing pages for aggregate traffic measurement (details below). EU/UK and California residents have additional rights described below.
Data controller
Terrave
606 Liberty Ave, Ste 300
Pittsburgh, PA 15222
United States
For all privacy inquiries, data-subject requests, and GDPR/CCPA notices, contact privacy@terrave.ai.
Data we collect
- — Account data: name, email, employer, role — captured at sign-up via Clerk.
- — Product data: BOMs, plant data, supplier declarations, and EPD evidence files uploaded by your organisation. Stored under organisation-level isolation.
- — Marketing form submissions: the fields you enter on our landing pages (typically work email, company, and one or two qualifying questions), used to contact you about the service you asked about.
- — Aggregate analytics: server logs, API access timestamps, and — on our public marketing pages — Google Analytics 4 (see the next section).
- — Billing data: handled by our payment processor (Stripe). We never store full card numbers.
Analytics and cookies
On our public marketing pages (this site's terrave.ai domain, including product pages and paid-traffic landing pages) we use the following services. Our authenticated app (the /dashboard area and everything behind sign-in) does not run advertising or analytics scripts.
Google Analytics 4
Property ID G-82DWEE4Z2N. We use GA4 to measure aggregate visitor counts, page performance, and paid-traffic campaign effectiveness. GA4 sets first-party cookies (prefixed _ga) and may transmit visitor IP addresses to Google in the United States; we run GA4 with IP-anonymisation and the Google-provided regional data-processing settings for EU/UK visitors. Data retention: 14 months. To opt out entirely, install Google's Analytics Opt-out Browser Add-on.
LinkedIn Insight Tag — planned, not yet active
We intend to enable the LinkedIn Insight Tag on paid-traffic landing pages once our LinkedIn Ads campaigns launch, for conversion measurement only. At that point this page will be updated to name the partner ID and describe the specific cookies. Until then, no LinkedIn tracking script is loaded.
Do Not Track and Global Privacy Control
Where technically feasible, we honour the browser Do Not Track header and the Sec-GPC signal as an opt-out of non-essential analytics. Our consent mechanism for EU/UK visitors (rolling out alongside our paid-traffic launch) will surface a manage-cookies control on every page.
How we use it
To operate the platform (generate EPDs, host DPPs, run verifier workflows), to provide support, to communicate service updates, and to meet legal and verifier-audit obligations. We use aggregate analytics on public marketing pages to measure paid-traffic performance and improve the site. We do not sell personal data and do not share it with third parties for advertising beyond the measurement tags described above.
Sub-processors
We use the following service providers: Clerk (authentication), Neon (Postgres database), Vercel (hosting/edge), Cloudflare R2 (evidence file storage), Stripe (billing), Resend (transactional email), Anthropic (AI features), Google (Analytics 4 on public pages). Each is bound by a data processing agreement.
Your rights
EU/UK GDPR and California CCPA residents may request access, correction, export, or deletion of their personal data, and may withdraw consent for non-essential analytics at any time. Send requests to privacy@terrave.ai.
Contact
Privacy questions: privacy@terrave.ai. General contact: greg@terrave.ai.