Privacy Policy

Data controller

IE "Manzhosova E.I."
Tax Reg. Number: 23382844
39/3 Tairov str., Yerevan, RA, 0082
Phone: +374 93 114 675
Email: info@terav.vet

Governing law: Republic of Armenia

1. General provisions

This Privacy Policy describes how Terav (the “Service”) collects, uses, stores, and discloses
personal and related data, including processing purposes, legal bases, retention terms, and user
rights.

2. Categories of data processed

  • account identification data (email and internal account identifier);
  • uploaded lab-result PDFs and images;
  • chat prompts and messages submitted by users;
  • technical metadata and security logs;
  • billing and access records: Polar customer, subscription, and Extra Pack order identifiers, plan
    and subscription status, period dates, cancellation settings, trial information, usage counters,
    additional allowances, and payment-event identifiers;
  • billing-support correspondence and order details you choose to provide.

3. Purposes of processing

Data is processed to provide Service functionality, ensure security and reliability, deliver
support, improve quality, and meet applicable legal obligations. Billing data is used to create
checkout and customer-portal sessions, associate a purchase with the correct account, maintain
subscription and trial access, count usage, credit Extra Packs, prevent duplicate processing, and
investigate payment or access problems.

4. Legal bases

Processing may be based on user consent (where applicable), contractual necessity, the operator’s
legitimate interests (security and continuity), and compliance with legal obligations. Processing
needed to arrange a requested purchase and administer paid access is based on contractual necessity;
required accounting and tax records are processed to meet applicable legal obligations. Fraud
prevention and dispute handling may rely on legitimate interests, where recognized by applicable
law. Essential billing processing does not rely on marketing consent.

5. Retention

Uploaded lab-result PDFs, clinical documents, and images are retained for 30 calendar days by
default. In Settings, the user may choose 7, 30, 182, or 365 days. The chosen period is applied to
each file at the time of upload; changing the setting later does not change files already stored.
When the period ends, the original file is deleted. Structured values extracted for the case (for
example laboratory measurements) and the case chat may remain as part of the clinical record.

Email and minimal technical records may be retained longer where reasonably required for account
administration, security, and legal compliance.

The 30-day period for uploaded files does not apply to billing records. Billing and access records
are retained while needed to administer the account or subscription and, where necessary, to resolve
disputes, prevent fraud, or meet applicable accounting, tax, and other legal obligations. The
relevant transaction, ongoing obligations, and applicable statutory periods determine retention.
Records are deleted or anonymized when those purposes no longer require identifiable data. Polar
applies its own retention rules to records it maintains.

6. Sharing and payment services

We may engage OpenAI, Anthropic, Namecheap, and Cloudflare R2 to support Service functionality. Data
is shared only to the extent necessary for these purposes.

For a purchase through Polar, Terav sends Polar your account email, internal account identifier,
selected product and purchase-type information, and IP address where available. Polar sends Terav
customer, subscription, and order-event information needed to associate the purchase with your
account and manage access. Terav stores the billing and usage records described in Section 2, as
well as the contents of received payment events in a processing queue. These events may include
customer contact and billing details supplied by Polar, such as a billing address or tax identifier
where present. Event contents, processing status, retry information, and error records support
reliable processing, recovery, and investigation of billing issues. The billing-record retention
criteria in Section 5 also apply to these records.

Payment details are entered in Polar’s checkout and handled by Polar and its payment partners.
Terav’s billing integration does not collect or store full payment-card numbers or card security
codes. It does not send case conversations, patient information, laboratory reports, or uploaded
clinical files to Polar as part of checkout or subscription management.

Polar acts as Merchant of Record for these purchases. Its processing for checkout, payment, tax,
fraud-prevention, and related purposes is described in the
Polar Privacy Policy. Where Polar processes data
on our behalf, the applicable
Polar Data Processing Addendum
governs that processing. The linked policy also explains data collected directly by Polar, including
billing details and technical information when you use its checkout or customer portal.

7. Cross-border transfers

Due to use of international infrastructure and payment providers, including Polar and its service
providers, data may be processed outside the Republic of Armenia, including jurisdictions with
different data-protection regimes. Applicable contractual and legal transfer requirements depend on
the provider, the data, and the relevant law; Polar’s Privacy Policy and Data Processing Addendum
describe its arrangements.

8. Data subject rights

Subject to applicable law, users may request access, correction, deletion, restriction of
processing, and withdrawal of consent (where consent is the legal basis) by contacting
info@terav.vet. Some billing records may need to be retained to
meet legal obligations or resolve outstanding disputes. Before our team deletes your Terav account,
it terminates the subscription linked to the account in Terav’s billing records, if one remains in
effect. Termination takes effect immediately. If it cannot be confirmed, deletion is postponed while
the issue is resolved. Sending a deletion request alone does not cancel billing; you can cancel
renewal through billing management while the request is pending.

For data held by Polar, consult its Privacy Policy and contact
privacy@polar.sh. We will assist with requests concerning
processing on our behalf where applicable. Deleting Terav data does not automatically delete records
that Polar must retain for its own legal obligations.

9. Security measures

We implement reasonable technical and organizational measures to protect data. However, no
transmission or storage method can be guaranteed as fully secure.

10. Age limitation

The Service is intended for users aged 18 and older.

11. Policy updates

The current version, effective date, and last-updated date are shown above. We will communicate
material changes by email or in the Service and obtain consent where required by applicable law.
This Policy does not replace Polar’s separate privacy disclosures for its services.