Privacy Policy

Last updated: February 2026

1. Who We Are

Terrain is operated by Ambrosia Ventures LLC ("we", "us", "our"), a Delaware limited liability company. Terrain is a market intelligence platform for life sciences professionals. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at terrain.ambrosiaventures.co.

2. Information We Collect

Account Information

When you create an account, we collect your email address, full name, company name, and professional role. You may optionally provide therapy areas of interest.

Usage Data

We collect information about how you use the platform, including the analyses you run (indication, geography, development stage), reports you save, features you access, and your subscription tier. This data is used to enforce usage limits, improve the platform, and provide customer support.

Payment Information

Payment processing is handled by Stripe, Inc. We do not store your credit card number, CVC, or full card details on our servers. We receive and store your Stripe customer ID, subscription status, and billing period dates.

Technical Data

We automatically collect standard technical information including IP address, browser type and version, device type, operating system, referral URLs, and pages visited. This data is collected via server logs and, where applicable, analytics services.

3. How We Use Your Information

  • Provide, operate, and maintain the Terrain platform
  • Process your transactions and manage your subscription
  • Enforce usage limits based on your subscription tier
  • Send service-related communications (account confirmations, billing receipts, security alerts)
  • Improve and personalize your experience on the platform
  • Monitor and analyze usage patterns to improve our analytics engines
  • Detect and prevent fraud, unauthorized access, or illegal activity
  • Comply with legal obligations

We do not sell your personal information to third parties. We do not use your analysis inputs or outputs to train machine learning models.

4. Data Sharing

We may share your information with:

  • Stripe — for payment processing
  • Supabase — for secure data storage and authentication
  • Vercel — for application hosting and delivery
  • Resend — for transactional email delivery

Each service provider is bound by their own privacy policies and data processing agreements. We do not share your data with any other third parties except as required by law.

5. Data Security

We implement industry-standard security measures including: encryption in transit (TLS 1.3), encryption at rest (AES-256 via Supabase), row-level security policies ensuring users can only access their own data, secure authentication via Supabase Auth, and regular security reviews. No method of transmission over the Internet is 100% secure, but we strive to use commercially acceptable means to protect your data.

6. Data Retention

We retain your account data for as long as your account is active. Analysis reports you save are retained until you delete them or close your account. Usage event logs are retained for 12 months for limit enforcement and then aggregated and anonymized. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Delete your personal data ("right to be forgotten")
  • Export your data in a portable format
  • Object to or restrict certain processing
  • Withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@ambrosiaventures.co.

8. Cookies

We use essential cookies for authentication and session management. These are strictly necessary for the platform to function. We do not use advertising or tracking cookies. Analytics, where used, rely on privacy-respecting, cookie-free approaches.

9. International Data Transfers

Your data may be processed in the United States, where our servers and service providers are located. By using Terrain, you consent to the transfer of your information to the United States, which may have different data protection laws than your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the platform. Your continued use of Terrain after changes are posted constitutes acceptance of the updated policy.

11. Contact

For privacy-related inquiries, contact us at privacy@ambrosiaventures.co.

Ambrosia Ventures LLC