1. Who is responsible for your data

The data controller is INOVA GEOPHYSICAL (UK) LIMITED("Terraglyph", "we", "us"), registered office 80/2a Commercial Street, Edinburgh, EH6 6LX, United Kingdom. For any privacy question or request, contact support@inovageo.shop or +44 7438250899.

2. What we collect

Account & contact data

Name, email address and, where you subscribe, billing contact details you provide.

Studio inputs & generated content

The world briefs you type, any sketches or reference images you upload, the structured briefs and asset references we generate, and your export activity. These are processed to produce your maps, terrain and flythrough plans.

Payment data

Subscriptions are processed by Stripe. We receive confirmation of payment, the plan, the last four digits and card brand, and billing country. We never receive or store your full card number — Stripe handles card data directly as an independent processor.

Support data

Messages you send through our contact and commission forms, including your name, email and message content.

Technical & usage data

IP address, device and browser type, and basic interaction logs used for security, debugging and service reliability.

3. Collection sources

We collect data provided by you directly (forms, user inputs, studio briefs, account creation) and automatically collect limited technical data from your device when you use the site (server logs, essential cookies). Payment confirmations come from Stripe.

4. Why we use it and our legal bases

To provide the studio — generate briefs, assets and exports (performance of a contract).
To take payment and manage subscriptions (performance of a contract).
To provide support and respond to your messages (legitimate interests / contract).
To keep the service secure and prevent abuse (legitimate interests, legal obligation).
To meet legal and accounting obligations (legal obligation).

We do not use your studio inputs or generated outputs to train AI models.

5. Studio inputs, outputs and uploads

User inputs, world briefs and generated output are stored so you can revisit and export your work. Uploaded sketches and reference images are processed only to generate your world and are cached for up to 30 days, after which they are deleted from active storage. You can request earlier deletion at any time. We do not sell your inputs or outputs, and we do not use them to train models.

6. Who we share it with

We share data only with processors that help us run the service, under contract:

Hosting & infrastructure: Vercel (application hosting and delivery).
Payments: Stripe (subscription billing).
Database & storage: Supabase (account, lead and content storage).
Email: our email provider for transactional and support messages.
AI provider: our generation provider processes your brief to produce assets; inputs are not used to train models.

We may also disclose data where required by law or to protect our rights. We do not sell your personal data.

7. International transfers

Some processors operate outside the UK/EEA. Where data is transferred internationally, we rely on adequacy decisions or Standard Contractual Clauses (and the UK Addendum) to protect it.

8. How long we keep it

Account data: for the life of your account and up to 24 months after closure.
Uploaded reference images: up to 30 days in active storage.
Billing records: as required by tax and accounting law (typically 6–7 years).
Support messages: up to 24 months.

9. Security

We use encryption in transit, access controls and reputable infrastructure providers. Payment card data is handled by Stripe under PCI-DSS and never reaches our servers.

10. Your rights (UK GDPR, EU GDPR & CCPA)

Depending on where you live, you may have the right to:

access the personal data we hold about you;
correct inaccurate data;
delete your data ("right to be forgotten");
restrict or object to processing;
data portability;
withdraw consent at any time;
for California residents: know, delete, correct, and opt out of the "sale" or "sharing" of personal information, without discrimination.

To exercise any right, email support@inovageo.shop. We respond within the time limits set by applicable law.

11. Do Not Sell or Share

We do not sell your personal information and do not share it for cross-context behavioural advertising. If this ever changes, we will provide a clear opt-out first.

12. Cookies & analytics

We use strictly necessary cookies to run the site and keep you signed in. Any analytics we use is privacy-light and described in our Cookie Policy.

13. Automated decisions & children

Studio outputs are generated automatically from your brief but have no legal or similarly significant effect on you. The service is not for children under 13; users aged 13–17 must have permission from a parent or guardian. We do not knowingly collect data from children under 13.

14. Complaints & contact

Contact us first at support@inovageo.shop. You also have the right to complain to the UK Information Commissioner's Office or your local supervisory authority.