Privacy Policy.

Introduction

Re_Tera ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web platform (the "Service"). The Service helps users document their belongings, understand their insurance policies, and prepare for insurance claims.

Information We Collect

Information You Provide

• Account Information: Email address, name, authentication credentials
• Property Information: Address, property type, ownership status, trust information
• Inventory Data: Photos of your belongings, item descriptions, purchase information, condition notes
• Insurance Policy Data: Policy documents (PDFs), policy numbers, coverage details, carrier information, named insureds
• Investigation Data: Conversation messages with the investigation assistant, health scores, and coverage gap findings
• Financial Account Data (only if you link a bank): If you opt in to Auto-Declare, we receive purchase transaction metadata from your linked accounts through Plaid: the amount, merchant, date, and category of a transaction. We do not receive your bank login credentials, account numbers, or balances, and we do not access statements.

Information Collected Automatically

• Device information (browser, operating system version)
• Usage data (features used, error logs)
• Aggregate analytics (page views, session duration, approximate country and city, referring site) collected via Google Analytics 4. See "Cookies and Analytics" below for details and opt-out options.

How We Use Your Information

• Provide core services: inventory documentation, policy investigation, and investigation conversations
• Generate health scores and coverage gap assessments
• Manage your account and subscription
• Improve the Service and fix bugs
• Send important notifications (deadline reminders, policy expirations)
• If you link a bank, flag high-ticket purchases that may exceed a policy sublimit so you can choose to declare them (Auto-Declare)
• Comply with legal requirements

We Do Not Sell Your Data

We will never sell your personal information, inventory data, or policy information to third parties.

Third-Party Services

Cookies and Analytics

We use Google Analytics 4 (delivered through Firebase) to measure how many people visit Re_Tera, which pages they read, and roughly where they are coming from (country and city, not street address). This helps us understand whether the product is reaching the homeowners it's built for.

Google Analytics 4 sets first-party cookies (such as _ga and _ga_*) to recognize returning browsers and stitch a session together. The data sent to Google is pseudonymous: no name, no email, no policy contents, no inventory data. IP addresses are truncated by Google before storage. We do not run Google Ads, we do not enable cross-site tracking features, and we do not share this data with advertisers.

You can opt out of Google Analytics measurement at any time by installing the Google Analytics Opt-out Browser Add-on, enabling your browser's "Do Not Track" or tracking-protection setting, or using any standard tracking blocker. Opting out has no effect on the Service itself.

Financial Account Data and Plaid

Auto-Declare is optional and stays off until you explicitly link a bank. When you link, Plaid (our financial-data processor) handles your bank credentials. Re_Tera never sees or stores them. We receive only transaction metadata (amount, merchant, date, and category) and use it for a single purpose: to flag purchases that may exceed a policy sublimit so you can choose to declare the item. We do not sell, share, or reuse this financial transaction data for any other purpose. You can unlink at any time, which removes the connection at Plaid and deletes the related records.

AI Disclosure

Re_Tera uses AI to investigate insurance policies and conduct Investigation conversations. When you use these features:

• Your policy data and conversation messages are processed by OpenAI's GPT-5 family of models
• Your data is not used to train AI models. OpenAI runs under its standard commercial API agreement, under which customer inputs and outputs are not retained for model training. We do not enroll in any data-sharing programs at the production API layer.
• Policy retention.Your uploaded policy PDF stays in your Firebase Storage account; only the extracted markdown text is stored in OpenAI's vector store (per-user, indexed for retrieval). When you delete your account, all OpenAI artifacts (your vector store + every uploaded file) are removed in the same flow that wipes Firestore and Firebase Storage.
• Health scores are computed by a deterministic algorithm based on policy extraction data, with AI adjustments clamped to prevent inaccurate results
• AI-generated investigation output is informational and does not constitute professional insurance advice

Data Storage and Security

Data is stored using Google Firebase on Google Cloud Platform servers in the United States. All data is encrypted in transit (TLS/HTTPS) and at rest. For a full description of our encryption, access controls, monitoring, and secure-development practices, see our Security page.

Your California Privacy Rights (CCPA)

Under the California Consumer Privacy Act (CCPA), you have the right to:

• Know what personal data we collect and how it is used
• Delete your personal information via Account
• Opt-out of sale of personal information (we do not sell data)
• Non-discrimination for exercising your privacy rights

Categories of personal information we collect include identifiers (email, name), property and insurance policy information, inventory content, and, only if you link a bank for Auto-Declare, financial transaction information (which we treat as sensitive personal information). We do not sell any of these categories.

To exercise your rights, use the "Delete Account" or "Export Data" features in Account, or contact us at support@getretera.com. We will respond within 45 days as required by California law.

Data Retention

We retain your data as long as your account is active. When you delete your account, all data is permanently removed within 30 days, except data we are legally required to retain.

If you use Auto-Declare, we keep the financial data to the minimum needed: flagged purchases expire automatically after 180 days, and unlinking your bank immediately removes the connection and deletes the related records. We do not store your full transaction history. For full details on how long each type of data is kept and how it is securely disposed of, we maintain an internal Data Retention and Disposal Policy, available to partners and auditors on request.

Children's Privacy

Re_Tera is not intended for users under 18. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last Updated" date and notify you of material changes via email or in-app notification.

Contact Us

For privacy-related questions or CCPA requests: support@getretera.com