Privacy Notice

1. Who we are

Anterra is run by [Company name] (company number [Company number], registered office [Registered office address]). We are the "controller" of the personal data described in this notice. Our registration number with the Information Commissioner's Office (ICO) is [ICO registration number].

For anything about your personal data, email privacy@anterra.io or write to us at the address above.

2. What this notice covers

This notice covers people who visit Anterra, create an account, are invited to a workspace, contact our support, or report a problem to us.

It does not cover the people who use apps built on Anterra. If you use an app someone built on Anterra, the app's owner decides how your data is used. Their own privacy notice applies, and we handle that data for them as their "processor" under our Data Processing Agreement. Contact the app's owner first. If you can't, email privacy@anterra.io and we will help.

3. What we collect

You give us:

• Account details: your name, email address, password (we store only a scrambled "hash" of it, never the password itself), and your profile picture if you add one.
• Workspace and billing details: workspace names, the people you invite and their roles, your billing name and address, and your VAT number if you give one. Card details go straight to Stripe, our payment provider. We only see the card type, the last four digits and the expiry date.
• What you build: your app descriptions, chat messages, files and images you upload, the data you put in your apps, and the code, plans and versions we create for you.
• Support and reports: what you send us when you ask for help, report a problem or appeal a decision.
• Phone number, only if we ask you to confirm your identity by text message (for example, to stop abuse of the Free plan).

We collect automatically:

• Security and sign-in information: your IP address, browser and device type, the approximate location these suggest, when and how you sign in, and a random device identifier stored in a cookie (wc_did). We use these to keep accounts safe and to stop fake sign-ups.
• How you use Anterra: builds, credits used, errors, and pages and features used, so we can run, bill and fix the service.
• Logs: our servers record requests and errors, which include IP addresses.

We get from others:

• Google or GitHub, if you sign in with them: your name, email address and profile picture.
• Stripe: whether payments succeeded, and fraud signals.
• People in your workspace, when they invite you (your email address) or mention you.

We don't collect special category data (such as health information) about you on purpose. Please don't put it in your descriptions or chat messages unless your app needs it.

4. Why we use it, and our legal reasons

Where we rely on legitimate interests, we have balanced them against your rights. You can ask us for details, and you can object (see section 9).

5. AI and automated decisions

Anterra uses AI models from other companies to build your apps:

• OpenAI is our main AI provider. Your descriptions, chat messages, code and the files you attach are sent to OpenAI to plan, write and check your apps.
• Anthropic is our backup. If OpenAI is unavailable, the same information may be sent to Anthropic instead.
• Your apps' own AI features (if you turn them on) use these providers, and Google's Gemini models, to answer your app's users.

We have agreements with these providers that stop them using your data to train their models. We send requests with storage switched off where the provider allows it.

Automated decisions. When you sign up, an automatic check looks at signals such as your device, network and email address to spot likely abuse. It never closes an account on its own. At most it asks you for an extra check (such as a text-message code) before you can use more of the Free plan. If you think the check got it wrong, email support@anterra.io and a person will review it.

6. Who we share it with

• Our service providers ("sub-processors"), who handle data for us under contract and only on our instructions: hosting, AI, payments, email, text messages and bot checks. The full list, with what each does and where, is on our Sub-processor list.
• People in your workspaces see what you share there, such as your name, your messages and your changes.
• Services you choose to connect, such as Google or GitHub sign-in, Google Sheets, Airtable, Slack or your own Stripe account. Those companies handle your data under their own terms.
• Authorities, when the law requires it, or to protect people from serious harm.
• A buyer, if Anterra or our company is sold. They would have to treat your data as this notice says.

We don't sell your personal data, and we don't share it for advertising.

7. Where your data is stored

Your account, your apps and their data are stored by Google Cloud in London (europe-west2), and backups stay in the UK.

Some of our providers are in other countries, mainly the United States: our AI providers (OpenAI and Anthropic), Stripe, Resend (email), Twilio (text messages) and Cloudflare (bot checks). Some Google AI features for apps also run outside the UK. When data goes outside the UK, we protect it with one of:

• the UK government's "adequacy" regulations (including the UK–US data bridge, for companies certified under it);
• the ICO's International Data Transfer Agreement, or the UK Addendum to the EU standard contractual clauses; or
• binding corporate rules approved by the ICO.

Our Sub-processor list shows which applies to each provider. You can ask us for a copy of the safeguards.

8. How long we keep it

9. Your rights

You have the right to:

• get a copy of your personal data;
• correct it if it is wrong;
• delete it ("right to be forgotten");
• restrict how we use it while a concern is checked;
• take it with you in a format other computers can read ("portability");
• object to us using it for our legitimate interests, and to any direct marketing;
• withdraw consent at any time, where we rely on consent.

Doing it yourself. In Account settings, you can download your data and delete your account at any time. You can download each app's code from the app's settings. You can turn analytics and marketing consent on or off on the Privacy page at /report/privacy.

Asking us. Use the Privacy page or email privacy@anterra.io. We reply within one month. If your request is complex, we may need two more months, and we will tell you if so. We may need to confirm who you are first. Requests are free unless they are clearly unfounded or excessive.

Complaints. If you are unhappy with how we use your data, please tell us first. You can also complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or call 0303 123 1113.

10. Keeping it safe

Data is encrypted when it travels and when it is stored. Each app runs separately from other apps. Our staff can only reach your data when they need to, every access is recorded, and looking inside your apps needs your permission. We test our backups by restoring them. If a breach puts you at risk, we will tell you and the ICO as the law requires.

11. Children

Anterra is for people aged 18 and over. We don't knowingly collect data from children. If you think a child has given us data, email privacy@anterra.io and we will delete it.

12. Cookies

We only use cookies that Anterra needs to work and to stay secure, unless you agree to more. See our Cookie Policy.

13. Changes to this notice

We will tell you by email or in Anterra before important changes, and the version date at the top will change.