Legal

Privacy Policy

Last updated: September 5, 2026

1. Who We Are

This Privacy Policy describes how Forestech Uruguay SRL ("Timbermap", "we", "us"), a limited liability company organized under the laws of the Oriental Republic of Uruguay, collects, uses, and protects personal data in connection with the Timbermap platform (the "Service"). This Policy is issued in accordance with Uruguay's Law No. 18.331 on the Protection of Personal Data and Habeas Data Action, its regulatory decree, and the guidance of the Unidad Reguladora y de Control de Datos Personales ("URCDP").

2. Data We Collect

We collect: (a) account data — name, email address, username, and authentication data, collected via our authentication provider (Clerk) at sign-up; (b) Customer Content — the geospatial imagery and vector files you upload, and the Model Outputs generated from them; (c) usage data — logs of jobs run, storage consumed, and features used, for billing, quota enforcement, and service reliability; and (d) communications — messages you send us via the contact form or support channels.

3. How We Use Data

We use personal data to: provide and maintain the Service, including running AI models against Customer Content you submit; authenticate accounts and manage team access; enforce plan storage and processing limits; send transactional notifications (e.g. job completion, billing); respond to support requests; and improve the reliability and accuracy of the Service. We do not sell personal data.

4. Legal Basis for Processing

We process personal data on the basis of: performance of the contract formed by our License Terms (to provide the Service you signed up for); our legitimate interest in operating and securing the Service; and, where applicable, your consent, which you may withdraw at any time by contacting us or deleting your account, without affecting the lawfulness of processing carried out before withdrawal.

5. Where Data Is Stored

The Service is hosted on Google Cloud Platform infrastructure located in the United States. By using the Service, you acknowledge that your account data and Customer Content are transferred to and stored in the United States, a jurisdiction whose data-protection framework may differ from Uruguay's. We contract with our infrastructure providers under terms requiring appropriate technical and organizational safeguards for the data they process on our behalf.

6. Data Sharing

We share personal data only with: (a) infrastructure and service providers who process it on our behalf under contract (e.g. Google Cloud for hosting and storage, Clerk for authentication, Resend for transactional email) — each bound to use the data solely to provide their service to us; (b) other members of your team or account, if you join or create one, to the extent inherent in the Service's shared-workspace design; and (c) authorities, where required by law or a valid legal process. We do not share Customer Content with other customers or use it to train Models made available to third parties, except as described in the EULA.

7. Data Retention

We retain account data and Customer Content for as long as your account remains active, and for a reasonable period thereafter to allow recovery of an accidentally deleted account, comply with legal obligations, and resolve disputes. You may request deletion of your account and associated Customer Content at any time; deletion is generally completed within a commercially reasonable period, except for data we are required to retain by law.

8. Security

We apply technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction, including access controls, encryption in transit, and restricted internal access to Customer Content. No system is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Under Law No. 18.331, you have the right to access, rectify, update, and — where applicable — request deletion of your personal data, and to be informed of any assignment of it (habeas data). You may also object to processing carried out on the basis of our legitimate interest. To exercise these rights, contact us at contacto@timbermap.com. If you believe your rights have not been adequately addressed, you may lodge a complaint with the URCDP.

10. Cookies

We use essential cookies to maintain your authenticated session and basic preferences (such as sidebar state). We do not use third-party advertising cookies. Our authentication provider (Clerk) may set additional cookies necessary for sign-in to function.

11. Children's Privacy

The Service is intended for business use and is not directed at individuals under 18. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email to your registered address. The "Last updated" date above reflects the most recent revision.

13. Contact

Questions or requests regarding this Privacy Policy can be sent to contacto@timbermap.com.

Related documents

License Terms·End User License Agreement (EULA)