Privacy Policy

Last Updated: October 16, 2026

Tetranomics SE, Hindenburgstraße 15, 82343 Pöcking, Germany ("we", "us", "our") operates the Tetranomics service (the "Service"). This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable German data protection law.

I. Information We Collect.

When you create an account, we collect your name, email address, and authentication provider (such as Google or GitHub). If you allow analytics, we also collect usage data: the pages you visit and the product features you use. When you use the support chat, we collect the messages and any attachments you send. When you use the AI features of the Service, we process the chat messages, voice audio and transcripts, documents and images, and derived embeddings that you submit or that the Service generates for you.

II. How We Use Your Information.

We use your information to provide and maintain your account, provide the chat, retrieval, document-analysis, and realtime voice features, send transactional emails (such as verification, password reset, and support replies), send occasional service-related communications, and, if you allow it, understand how the Service is used so we can improve it. We do not sell, share, or rent your personal data to third parties for marketing purposes.

III. Legal Basis for Processing.

We process your data on the following legal bases under the GDPR: contract performance (Art. 6(1)(b)) to provide your account and the Service, legitimate interest (Art. 6(1)(f)) to ensure security, and consent (Art. 6(1)(a)) for product analytics and optional communications. You can withdraw consent at any time; this does not affect processing before the withdrawal.

IV. Third-Party Services and Processors.

We use the following third-party services to operate the Service: Hetzner Online GmbH (Germany) for hosting the Service, its self-hosted Convex backend, and its database; OpenAI for AI inference, document processing, and realtime voice; Deepgram for speech transcription; Resend for transactional email delivery; PostHog for product analytics, only if you allow analytics; and Google and GitHub as optional sign-in providers. Our primary application database and file storage are hosted in Germany. The 14 most recent daily database backups are retained on the same infrastructure. Each of these processors maintains appropriate technical and organizational measures to protect your personal data.

V. Product Analytics.

Analytics runs only after you choose Allow in the analytics banner. Before that, no analytics code is loaded and nothing is stored or sent. If you allow it, PostHog receives the pages you visit, the product features you use, your browser and device type, the website that referred you (its domain only), and campaign tags in the link you followed. Page titles, search terms, project and chat names in addresses, and query parameters other than campaign tags are removed before sending, and addresses that do not match a page of the Service are recorded as "404". If you are signed in, events are linked to your account's internal ID, not your name or email address. Nothing is sent while an administrator views the Service as you for support. PostHog receives your IP address with each request; whether it is stored depends on our analytics project settings.

To recognise you across visits, the analytics library keeps a random identifier in your browser's local storage. Next to it, it stores the first address you opened and the website that referred you, which can include parts of those addresses that are never sent. Both are removed when you decline. You can change your choice at any time from Privacy Settings in the footer or in your account settings. When you decline, analytics stops, the identifier is removed from your browser, and a later consent starts with a new identifier. Your choice is valid for 180 days, after which we ask again.

VI. Cookies and Browser Storage.

We use essential cookies for authentication and session management, and one essential cookie (analytics_consent) that stores your analytics choice. We do not use advertising cookies. Product analytics uses browser storage only with your consent, as described above.

VII. Data Retention.

We retain your personal data for as long as your account is active. When you delete your account, your personal data is removed from active systems. Database records may remain in the 14 most recent daily backups until those backups are rotated out. Deleting your account does not automatically delete analytics records already sent to PostHog; those records remain associated with your analytics profile until we delete them in response to your deletion request. Some data may be retained as required by applicable law.

VIII. Your Rights.

Under the GDPR, you have the right to access your personal data (Art. 15), rectify inaccurate data (Art. 16), request deletion of your data (Art. 17), restrict processing (Art. 18), data portability (Art. 20), and object to processing (Art. 21). To exercise any of these rights, please contact us using the details below. You also have the right to lodge a complaint with a supervisory authority.

IX. Changes to This Policy.

We may update this Privacy Policy from time to time. If we do this, we will post the changes on this page and will indicate the date these terms were last revised. Your continued use of the Service after the date any such changes become effective constitutes your acceptance of the updated Privacy Policy. If a change extends what analytics collects, we will ask for your consent again.

Questions?