Privacy Policy

For the processing activities described in this Privacy Policy where Teros determines the purposes and means of processing, the Data Controller is Teros AI, S.L., with VAT/NIF number B-88787445, and registered office at Calle Jacinto Camarero 8, entreplanta, 28019 Madrid, Spain. You can contact our Data Protection Officer (DPO) at pablo@teros.ai.

We collect information you provide directly to us when you create an account, subscribe to our plans (Starter, Growth, Pro, Ultra, or Enterprise), or communicate with us. This includes your name, email address, billing information, and account credentials.

When you use our Services, we automatically collect data about your interactions, including log data, device information, and usage metrics (such as Agent Time consumed). If you choose to integrate third-party tools (e.g., Gmail, Notion, GitHub, Linear, Figma), we collect the necessary OAuth tokens or API keys to facilitate these connections.

We process your personal data for the following purposes. For each purpose, we indicate the legal basis under the GDPR and the applicable retention period.

3.1. Provision of Services

We process your name, email address, account credentials, subscription data, and usage metrics (including Agent Time consumed) to create and maintain your account, facilitate the operation of AI agents, manage your subscriptions, and provide customer support. The legal basis for this processing is the performance of a contract to which you are a party (Art. 6.1.b GDPR). We retain this data for the duration of your account and for a period of five (5) years after account closure, in order to comply with our legal and contractual obligations.

3.2. Billing and Financial Records

We process your billing information, payment method details, and invoicing records to manage subscription payments and comply with applicable tax and accounting obligations. The legal basis is the performance of a contract (Art. 6.1.b GDPR) and compliance with a legal obligation (Art. 6.1.c GDPR). We retain billing records for a period of ten (10) years in accordance with Spanish commercial and tax law.

3.3. Security, Fraud Prevention, and Service Improvement

We process log data, device information, and usage analytics to monitor the performance of our Always-On containers, detect and prevent fraud, investigate security incidents, and improve the quality of our Services. The legal basis is our legitimate interest in maintaining a secure, reliable, and functional service (Art. 6.1.f GDPR). We retain this data for a maximum period of twelve (12) months from the date of collection, unless a longer retention period is required for the investigation of a specific security incident.

3.4. Administrative and Technical Communications

We process your email address and account information to send you administrative notices, service updates, technical alerts, and security notifications. The legal basis is the performance of a contract (Art. 6.1.b GDPR) and our legitimate interest in keeping you informed about the Services you use (Art. 6.1.f GDPR). We retain this data for the duration of your account.

3.5. Commercial Communications and Marketing

We process your email address and usage profile to send you promotional communications, product updates, and information about new features or plans, provided you have opted in to receive such communications. The legal basis is your consent (Art. 6.1.a GDPR). You may withdraw your consent at any time by clicking the unsubscribe link in any marketing email or by contacting us at pablo@teros.ai. We retain your data for this purpose until you withdraw your consent or request erasure.

Our platform utilizes third-party Large Language Models (LLMs) such as OpenAI, Anthropic, and Google. When you submit Inputs or when our agents execute Actions, relevant data may be transmitted to these providers via API.

Given the global nature of our infrastructure and our reliance on third-party LLMs, your data may be transferred to and processed in countries outside the European Economic Area (EEA), particularly the United States. We ensure that such transfers are protected by appropriate safeguards, such as the EU-US Data Privacy Framework or Standard Contractual Clauses (SCCs) approved by the European Commission.

Under the GDPR, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability. You can exercise these rights by contacting us at pablo@teros.ai. If you believe your rights have been violated, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with personal data, we will take steps to delete such information immediately. Parents or guardians can contact us at pablo@teros.ai to request deletion.

Some of our integrations connect to Google Workspace APIs — Gmail, Google Calendar, Google Drive and Google Contacts — so that our AI agents can carry out the tasks you ask them to perform. Access is granted by you through OAuth, is limited to the scopes you approve, and can be revoked by you at any time from your Google Account.

In practice, this means that:

• We limit our use of Workspace API data to providing and improving the user-facing features you requested and that are prominent in the Teros interface.
• We do not use Workspace API data to develop, improve or train generalised or non-personalised artificial intelligence or machine learning models. Data obtained through Workspace APIs is never used to train our foundational models, and our agreements with third-party model providers prohibit them from training on data we send via API.
• We do not transfer Workspace API data to third parties, except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets — and in that last case only after notifying users and obtaining their consent.
• We never sell Workspace API data, and we never use it for advertising, including personalised, retargeted or interest-based advertising.
• We do not allow humans to read Workspace API data, unless we have your explicit consent for specific items, it is necessary for security purposes such as investigating abuse, it is required to comply with applicable law, or the data has been aggregated and anonymised for internal operations.