Privacy Policy

Version 2026-08-11 · Controller: Ovelha Negra (operator of TerraSignal) · Contact: privacy@terrasignal.ca

TerraSignal shows neighbourhood reports built from official statistics. This policy explains what personal data we collect, why, who sees it, how long we keep it, and the rights you have under the GDPR/UK GDPR, Canada's PIPEDA and CASL, the California Consumer Privacy Act, Australia's Privacy Act and Nigeria's NDPA.

1. What we collect

Account: your email address, the name you give us (optional), and — if you use Google sign-in — the email, name and Google account identifier Google returns.
Searches: for registered accounts, the addresses, links and areas you look up, whether you chose renting or buying, any asking price or size you entered, and the time of the search.
Consent evidence: the exact wording you agreed to, its version, the time, a one-way hashed form of your IP address and your browser's user-agent string. We do not store raw IP addresses.
Usage analytics: Microsoft Clarity and Vercel Analytics record page views and interactions; these are aggregated and are not sold.

2. Why (legal bases)

Running your account and showing reports — performance of a contract (GDPR Art. 6(1)(b)).
Keeping your search history available to you and improving the product — our legitimate interests (Art. 6(1)(f)).
Sharing your search interests and contact details with licensed real-estate professionals — only with your separate, explicit consent (Art. 6(1)(a)).

Usage statistics (every visitor). When a report is generated we record an anonymous event: the area searched (district and neighbourhood level, coordinates rounded to about 100 m), rent or buy, any asking price and size you typed, the official comparison value, the listing portal, how you arrived (search-engine page, typed address, pasted link), your approximate location (country and city, from the connection) and device type. We do not store your email, your IP address or the full address text; a one-day hashed identifier is used only to avoid counting the same person twice in a day and cannot link days together. Legal basis: legitimate interest (running, improving and reporting on the service, including aggregated market intelligence). Raw events are kept for 24 months, aggregates indefinitely. Nothing in this dataset identifies you.

No account is needed. Every report on terrasignal.ca is free and open; we do not ask you to register, and we do not sell or share visitor data. Accounts created earlier remain under the choices below.

United States — "connect me with local agents". Under reports for US addresses we show an optional card. Nothing is pre-ticked. If you tick it and send, we share the property/area you checked, your rent-or-buy intent and budget, and your name, email and (if given) phone with up to three licensed real-estate professionals (agents, brokers, lenders) serving that area, so they can contact you. If you give a phone number and tick the separate call/text box, they may call or text you, including with automated technology; consent is not a condition of any purchase and you can reply STOP. This is a "sale" or "sharing" of personal information under California law: you can opt out at any time at Do not sell or share my personal information, and we honour Global Privacy Control signals for new sharing. We do not knowingly collect information from anyone under 18, and we do not offer this card outside the United States.

How sharing works (accounts only). When you create an account you choose between "Report only" and "Report + local agent matches"; neither is pre-selected and both give you the same free report. If you choose agent matches, we may pass the areas and listings you searched, your rent-or-buy intent and budget, and your name and email to licensed estate agents, brokers, property developers and mortgage providers who operate where you searched, so they can contact you about relevant properties. Registration is free whichever you choose; the full report is a one-off purchase and is never conditional on sharing. You can withdraw at any time at My account or by emailing us; withdrawal stops all future sharing immediately (data already passed to a professional before you withdrew is held by them under their own privacy notice). If you chose "Report only", your details are never shared with third parties for marketing. We never sell data of people who have not agreed.

3. Recipients and processors

Hosting and serverless functions: Vercel (USA). Database: Supabase (EU or US region). Email: Resend. Geocoding: Mapbox. Maps: OpenStreetMap/CARTO. Analytics: Microsoft Clarity, Vercel. Payments (if you buy anything): Stripe. These providers process data on our instructions. Transfers outside the EEA/UK rely on the providers' standard contractual clauses.

4. Retention

Account and search data: until you delete your account, or after 24 months of inactivity. Consent evidence: kept for 5 years after withdrawal or deletion, with your email removed and only a one-way hash retained, so we can prove what was agreed. Analytics: per the providers' retention (Clarity: 30 days of recordings).

5. Your rights

You can access, correct, export or delete your data, and withdraw consent, at My account or by emailing privacy@terrasignal.ca. We answer within 30 days. You may complain to your supervisory authority (for example the CNPD in Portugal, the ICO in the UK, or the OPC in Canada). California residents: the sharing described above is a "sale or sharing" under the CCPA only if you opted in; you can opt out at any time via Do not sell or share my personal information. We do not knowingly collect data from anyone under 18.

6. Cookies

A single first-party session cookie (ts_sess, 180 days) keeps you signed in. Analytics cookies are set by Clarity/Vercel. No advertising cookies.

7. Changes

We will post changes here with a new version date; material changes to the sharing consent will be asked for again, not assumed.