Privacy policy
1. About this policy
This policy describes the Tero website and macOS application. The publisher and controller of personal data processed by Tero is Aymen Kadri, based in Paris 15th arrondissement, France. Contact: aymen@teroflow.app.
2. Information on your Mac
Tero stores clipboard history, local preferences and folder-access bookmarks on your Mac. Clipboard history is not uploaded as a history database. Accessibility and other macOS permissions allow supported features to work with selected text, application context, files, calendars and reminders. You can manage these permissions in macOS System Settings. Clearing local history does not remove information already shared with an external service for an AI action.
3. Information sent for AI features
Online recommendations can send selected text or file metadata and relevant application context, such as application name, window title, nearby text, web hostname, language and local time, to TypeSafe’s Jev service through Tero’s backend. Requested AI actions can send the text, instructions and relevant file content needed to perform the action to OpenAI through that backend. Web-search features can send queries derived from your request. These transmissions are separate from storing clipboard history locally. Avoid using online features with information you are not authorised to share.
4. Accounts, usage and billing
Supabase handles authentication and account records. Signing in with Google or Apple supplies identity information such as your email address, provider identifier and, where available, name and profile image. Email sign-in uses Supabase and Resend to deliver verification messages. Tero uses account identifiers, plan status and usage records to manage access and allowances. Usage records include action identifiers, model/provider information, timing, status, token counts and cost or allowance data. These usage logs exclude selected text, customer prompts, response bodies, file contents and clipboard history. When paid plans become available, Paddle handles checkout and billing; Tero receives subscription, transaction and payment-status information. Payment-card details are handled by the payment provider.
5. Purposes and legal bases
Account access, requested online actions and subscription management are processed to provide the service you request, on the basis of contract where applicable. Security, abuse prevention, troubleshooting and usage accounting rely on legitimate interests, subject to your rights. Records required for tax, accounting or legal obligations are processed on that basis. Where a feature or local law requires consent, it must be obtained separately and can be withdrawn. A macOS permission or Google consent screen does not replace this information about processing.
6. Service providers and international processing
The current integration includes Supabase for authentication, database and backend functions; Resend for sign-in email; OpenAI for generative AI and supported search; TypeSafe for Jev recommendations; and Paddle for payments when enabled. Vercel hosts the website. Hosting and these providers may process data outside your country, including outside the European Economic Area. International transfers are subject to applicable data-protection requirements, including adequacy decisions or appropriate safeguards where required. Contact us for information about the locations and safeguards applicable to your data. External providers may retain submitted content under their own service terms and data-handling policies; this policy does not promise zero provider retention or EU-only processing.
7. Cookies, security and retention
The website uses authentication and short-lived connection cookies to maintain sessions and connect the Mac app. Its current code does not include an advertising or analytics integration. Infrastructure providers may process technical request information for hosting and security. Native session credentials are stored using the macOS Keychain. Tero limits access to account and usage records, but no system can guarantee absolute security. Account information is kept while needed to provide your account; technical and usage records are kept while needed for security, accounting and resolving disputes; billing records may require longer legal retention. Retention depends on the category of information and the purpose described above. On a verified deletion request, information no longer needed for those purposes is deleted or anonymised; records required by law or for legal claims may be retained. Backup copies follow the relevant infrastructure provider’s lifecycle. Contact us for details about retention applicable to your account. External providers apply their own retention rules.
8. Your choices and rights
You can sign out, revoke macOS permissions and manage locally stored information through available app controls. Contact aymen@teroflow.app to request account deletion or exercise applicable rights of access, correction, erasure, restriction, objection and portability. We may need to verify your identity. Some records may remain where required by law or necessary for legal claims. Where processing relies on consent, you can withdraw it. Where the GDPR applies, you may complain to the supervisory authority in your country of residence, work or the alleged infringement; in France this is the CNIL.
9. Updates and contact
We will update this page when processing changes and provide appropriate notice of material changes. For privacy questions or to report a concern, email aymen@teroflow.app. The date above identifies this version.