Privacy Policy

TeraQuant is a Hong Kong construction-tech company that provides verification-first MEP tender takeoff software (the “Service”). We help quantity surveying and engineering teams upload Peak-style PDF drawings and Schedule of Rates workbooks, run evidence-linked AI extraction, reconcile quantities against Schedule C, and maintain an audit trail.

This Privacy Policy explains how we collect, use, store, and share personal data and related project information when you visit our websites (including teraquant.ai and www.teraquant.ai), create an account, or use the Service.

For privacy questions or requests, please use our contact form at /contact, or write to privacy@teraquant.ai. We do not publish personal staff email addresses on this page.

This policy applies to personal data we process as a data user in connection with the Service and our marketing sites. It is an operational draft intended to support product and authentication consent flows; it is not a substitute for legal advice tailored to your organisation.

Where your organisation is the customer of record, certain project and account data may also be subject to the agreement between TeraQuant and that organisation. Individuals who access the Service on behalf of a customer should also review any policies set by their employer or client.

Depending on how you interact with us, we may collect and process the following categories of information:

• Account identity and authentication data — name, email address, and related profile or session information provided through our authentication provider (Clerk), including sign-in events and session tokens necessary to keep you signed in.
• Usage, technical, and security logs — IP address or approximate network location, browser and device type, request timestamps, error logs, and similar telemetry needed to operate, secure, and debug the Service.
• Project and workspace metadata — project names, drawing file names, discipline or sheet associations, user roles within a project context, and configuration needed to display and organise work.
• Uploaded construction documents and related files — PDF drawings, Schedule of Rates (SOR) workbooks (for example Peak-style xlsx), and other files you or your organisation upload for takeoff, comparison, or review.
• AI extract outputs and verification records — vision extract results, symbol or label claims, evidence links and bounding regions, geometric length or legend takeoff outputs, Schedule C comparison context, and audit-related records that support reviewable quantities.
• Support and communications — messages you send via /contact or other support channels, and related correspondence needed to respond.

We use the information described above for the following purposes:

• Provide and operate the Service — host projects, render drawings, run extract and takeoff workflows, store claims and evidence, and show Schedule C and audit context.
• Authentication and account administration — create and manage user sessions via Clerk, enforce access controls, and process account-related requests.
• AI processing for takeoff and extract — send relevant page imagery, text, or structured inputs to AI providers (including Google Gemini and, where configured, other model APIs) to generate draft quantities, labels, and related outputs that remain reviewable against evidence.
• Security, abuse prevention, and reliability — detect fraud or misuse, investigate incidents, maintain availability, and protect the integrity of customer data.
• Customer support — respond to enquiries, troubleshoot issues, and communicate about Service status when appropriate.
• Product improvement (bounded) — understand feature usage in aggregate, fix defects, and improve accuracy and usability of extract and takeoff tools. We do not sell personal data.

TeraQuant is based in Hong Kong. We process personal data in a manner consistent with the Personal Data (Privacy) Ordinance (PDPO) and with commonly recognised bases for lawful processing where those concepts apply to our operations:

• Contract / necessary for the Service — processing needed to provide the Service you or your organisation request (for example account login, storing uploaded drawings, and running extract jobs you initiate).
• Legitimate interests — security, fraud prevention, product reliability, and limited product improvement, balanced against individuals’ rights and expectations.
• Consent — where we rely on consent (for example express acceptance of Terms and Privacy at sign-up via Clerk Legal settings, or optional communications where required), you may withdraw consent in accordance with applicable law and product controls, subject to limits needed to continue providing the Service or meet legal obligations.

If you believe personal data has been processed in a way that does not meet PDPO data protection principles, please contact us using the channels in Section 1 so we can investigate and respond.

We use trusted infrastructure and product vendors to operate the Service. At a high level, these include:

• Clerk — authentication, session management, and related user identity services.
• Supabase — application database, storage, and related backend services for project data, files, claims, and evidence records.
• Google Gemini / Google AI (and, where configured, other model providers such as those accessed via API keys for extract or supporting AI features) — processing of drawing-related inputs to produce AI extract and takeoff outputs.
• Vercel — hosting, edge/network delivery, and deployment of the web application.

These providers process data on our instructions or as needed to deliver their services. We do not sell personal data to third parties for their independent marketing. We may disclose information if required by law, regulation, legal process, or to protect the rights, safety, and security of TeraQuant, our customers, or others.

Drawings, SOR workbooks, and related project files often contain business-confidential information about buildings, systems, quantities, and commercial terms. Customers and authorised users are responsible for ensuring they have the right to upload such materials and to grant TeraQuant permission to process them for Service delivery.

We handle uploaded materials and derived extract outputs for the purpose of providing the Service (including AI vision extract, evidence overlays, Schedule C comparison, and audit features), securing the platform, and supporting authorised users. You should not upload data that you are not authorised to process, and you should follow your organisation’s document-control and confidentiality rules when using TeraQuant.

We retain personal data and project-related records for as long as reasonably necessary to provide the Service, maintain audit and security logs, resolve disputes, enforce agreements, and meet legal or accounting obligations. Retention periods vary by data type (for example active project files versus short-lived security logs).

When data is no longer needed for these purposes, we aim to delete or de-identify it in line with our operational practices and technical constraints of our processors.

You may request account closure or deletion of personal data associated with your account by contacting us via /contact or privacy@teraquant.ai. Where your access is managed by an organisation (for example an employer workspace), we may need to coordinate with that organisation’s administrator.

Deletion is subject to residual copies in backups, legal hold, security logs, and retention required by law or legitimate operational needs. Project content owned by a customer organisation may remain available to that organisation after an individual user leaves.

Our Service is delivered using cloud infrastructure. Processors such as Clerk, Supabase, Google AI services, and Vercel may process or store data in data centres outside Hong Kong. By using the Service, you acknowledge that personal and project data may be transferred to and processed in such locations, subject to the safeguards and practices of those providers and applicable law.

We implement technical and organisational measures appropriate to the nature of the Service, including access controls, encrypted transport (HTTPS), authentication via a specialised identity provider, and environment-separated secrets for production systems. No method of transmission or storage is completely secure; we cannot guarantee absolute security, and you should use strong credentials and organisational access policies.

We and our authentication provider (Clerk) use cookies, local storage, and similar technologies that are necessary for sign-in sessions, security, and basic application function. Our marketing and product surfaces are not built around third-party advertising pixels or marketing trackers in the application codebase.

You can control cookies through your browser settings; disabling essential cookies may prevent sign-in or other core features from working.

Subject to the PDPO and other applicable law, individuals may request access to personal data we hold about them, correction of inaccurate personal data, and, where appropriate, erasure or restriction of processing. To exercise these rights, contact us via /contact or privacy@teraquant.ai. We may need to verify your identity and, where relevant, confirm authority if you act on behalf of another person or an organisation.

We will respond within a reasonable period consistent with applicable requirements. Some requests may be limited where we must retain data for legal, security, or contractual reasons, or where the request would adversely affect others’ rights.

The Service is a business product directed at construction, quantity surveying, and related professional users. It is not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so we can take appropriate steps.

We may update this Privacy Policy from time to time to reflect product, legal, or operational changes. When we do, we will revise the “Last updated” date below and, where changes are material, take additional steps as appropriate (for example a notice in the product or on this page). Continued use of the Service after an update constitutes acceptance of the revised policy where permitted by law.