Plain-language summary of what we collect, why, where it lives, and the control you have over it. Last updated .
Account & profile data — name, email, and the details you add to a Personal, Company, Family or Employee profile. Operational data — what you create in the product: companies, people, work orders, equipment, documents, messages, invoices, requests, connections. Sensitive personal data (e.g. an employee SSN or bank details, where a company records it) is stored encrypted and only shown to people with a specific right to see it. Technical data — the minimum needed to run the service: session tokens, timestamps, and standard request logs.
To provide the platform and the features you turn on, to authenticate you, to keep an audit trail companies rely on, and to keep the service secure and working. We do not sell your data, and we do not use it for advertising or ad tracking.
Profile and metadata are held in TeranoveCore Cloud. Document content is your choice — our storage, a cloud provider you already use, or a device you control, with Cloud acting as the router. Traffic to the service is delivered over Cloudflare's network; business email is handled by Microsoft 365.
Apothos, and the AI helpers on some pages (such as a suggested invoice note), run on an outside AI provider, Anthropic, for now. When you use them, what you send, and the records needed to answer it, go to that provider to produce the answer. Nothing is sent unless you use them. A safety screen checks each message first; a message it stops isn't saved or shown, and only the fact that one was stopped is kept, never its words. Your Apothos conversations and your Notepad are saved to your own profile, and only you can read them. We don't use your conversations to train AI models. Running TeranoveCore's own models on your own device, so your prompts never leave it, is how TNC OS is designed to work; it is not how Apothos works today. A company's owner or admin can pause AI for the whole company.
Your data is visible to you, to people you or your company explicitly grant access to (through titles, roles and per-recipient sharing), and to the other party on a connection you accept. Our staff access data only to operate or support the service. We use a small number of providers (hosting, edge delivery, email, and the AI provider behind Apothos) as processors under their own terms.
For as long as your account or your company's account is active, plus the retention periods a company sets for its own audit logs. You can request deletion (see below); some records may be retained where the law requires it.
From inside the Portal you can view and correct your profile, manage notification and visibility preferences, export your data, and request a deletion review. You can also reach us directly — see below. Where local law gives you additional rights (access, correction, portability, objection, restriction), you can exercise them the same way.
The web app uses browser local storage to keep you signed in and to remember small preferences (like your theme). We do not run third-party advertising or analytics cookies.
Questions or requests about your data: [email protected] (or the contact page). We'll respond as promptly as we can.
This page describes our current practices in plain language. It is not a substitute for legal advice, and it may be updated as the product and the applicable law change — the "last updated" date above reflects the latest revision.
