TERA·ENGINE Map is a geospatial mapping product operated by PT Enjin Bumi Akasa ("we", "us", "our"), a company registered in Indonesia. Contact: [email protected].
This Privacy Policy applies to the TERA·ENGINE Map web application and the marketing website at tera-engine.com (collectively, "the Service"). We process personal data as a data controller under Indonesia's Law No. 27 of 2022 on Personal Data Protection ("UU PDP").
Account data: When you register with email and password, we collect your name, email address, and hashed password. If you sign in with Google instead, we receive your name, email address, and profile picture from Google. We do not receive your Google password or access to your other Google data.
Project data: Your site polygons, viewports, and map settings are stored in your account so you can access them across sessions.
Usage data: We collect standard server logs (IP address, browser/OS, pages visited, timestamp) to diagnose errors and improve performance. These are retained for 30 days then deleted.
Diagnostic data: When the application encounters an unexpected error, we automatically collect the error message, a stack trace, the page URL, and browser/OS information so we can find and fix the problem. This is not linked to your identity beyond what naturally appears in the error itself. Retained for up to 90 days then deleted.
Location data: When you use the analysis widgets, search, or view satellite imagery, the map coordinates or place names involved are sent to the relevant data provider (see "Data sharing" below) to fetch climate, terrain, or imagery data. We do not associate these coordinates with your identity or store a history of coordinates queried.
Payment data: Your billing name, billing address, and payment method details are collected and processed directly by Xendit, our payment provider; we never receive or store your card number, expiry, or CVV. We receive from Xendit only a transaction ID, payment status, and an invoice reference linked to your account, which we use to activate your plan.
- To provide and maintain the Service (serve your map projects, authenticate your session)
- To process payments and send receipts and billing notifications
- To send essential service emails (password reset, plan changes)
- To diagnose and fix errors in the application
- To comply with legal obligations (tax invoicing in Indonesia)
We do not currently send marketing emails. If that changes, we will only do so with your opt-in consent and will give you a way to opt out.
We do not sell, rent, or trade your personal data. We share data only with the following third-party service providers, under data processing agreements or their standard terms:
- Xendit: payment processing
- MapTiler: receives your search query and/or map coordinates and IP address to provide place search and standard satellite imagery
- Esri (ArcGIS Location Platform): on the Pro plan, receives the map area and IP address (via our own proxy server, never directly) to provide high-resolution satellite imagery
- Cloud hosting, storage, and CDN providers: to run the application and serve map tiles and datasets; these may process your IP address and request metadata in transit, under data processing agreements
We may disclose data to law enforcement only where required by Indonesian law and only to the minimum extent necessary.
We use browser localStorage (not cookies) for two things: remembering your map settings, active datasets, and analysis pin positions on your device, and keeping you signed in between visits (your login session token is stored this way, not in a cookie). Settings data is never sent to our servers unless you explicitly save a project; your session token is sent only to authenticate your requests.
We do not use cookies for authentication, and we do not use third-party advertising cookies, social media pixels, or analytics trackers.
Your account data and project files are retained for as long as your account is active. If you delete your account, all data is permanently deleted within 30 days, except where we are required to retain records for tax/legal purposes (typically 5 years for transaction records under Indonesian law).
Server logs are retained for 30 days. Diagnostic error data is retained for up to 90 days. Anonymized, aggregated usage statistics may be retained indefinitely.
We implement reasonable technical and organizational measures to protect your data, including: HTTPS everywhere, password hashing (bcrypt), network-level DDoS and traffic filtering through our CDN provider, rate limiting on sensitive endpoints, restricted infrastructure access (key-only SSH, no password auth), and storage access controls that prevent public write access.
No system is 100% secure. If you discover a security vulnerability, please disclose it responsibly to [email protected].
You have the right to:
- Access the personal data we hold about you
- Correct inaccurate data from your account settings
- Export your project data (GeoJSON, SHP, DXF, KML, KMZ, SVG formats) at any time from within the app
- Delete your account and all associated data from Account Settings → Delete account
- Object to or restrict processing by contacting us
To exercise any right or make a data request, email [email protected]. We will respond within 30 days.
The Service is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us and we will delete it promptly.
We may update this policy from time to time. We will notify you of material changes by email and by updating the effective date above. Continued use of the Service after a change constitutes acceptance of the updated policy.
Questions about this policy? Contact us at [email protected]. We aim to respond within 5 business days.