Last updated: 19 June 2026
Terrivo is operated by OutlandWeb (Payroux, France). Contact for any privacy question: info@outlandweb.com.
You can use most of Terrivo without an account. If you create one, we store your email address, display name, a securely hashed password (or your Google sign-in identity) and your account activity. Signing in sets a strictly necessary session cookie plus a small non-secret flag that tells the app a session exists.
When you are signed in you can save events, places and stays as favorites. We store the combination of your account, the type of item and its ID, so your list stays the same after signing out, on another device and after a reload. Tapping a heart while signed out saves nothing: we only show a note asking you to sign in first.
Discovery needs a starting point, and you choose it: either you explicitly share your device location once, or you search and pick a town yourself. Your manual choice takes priority and is kept only in your browser session. Shared coordinates are used to calculate the list around you (car: up to 30 km, walking: up to 5 km) and are not saved to your account, not linked to a profile and not used to follow you. Terrivo never tracks your location in the background and keeps no location history.
If you photograph or upload a poster, the image is sent to our servers and processed by an AI extraction service (Anthropic Claude models through the Emergent platform gateway) to read title, date, time, place and description. You confirm you may use the image. The image and extracted draft are stored with your submission so a moderator can check it before the event goes public; rejected or unused submissions are removed during normal cleanup.
Places, stays, events, reviews and photos you submit are stored with your account (or as an anonymous submission) and reviewed before publication. Uploaded images are held in our object storage (Emergent-managed) and are public once the item is published. Do not upload photos you do not have the rights to.
Place and event pages may include data from OpenStreetMap, DATAtourisme, OpenAgenda, Opendatasoft, other public event sources, optional Google Places enrichment, Wikimedia photos and owner submissions — including website, phone, opening hours and any email published as a public contact. Owners can request a correction at any time.
The LocalSite preview is anonymous: no account, no email address and no payment are needed to generate and view it. We store the business details, texts, photos and logo you provide, your design and language configuration, uploaded media and your own event submissions. If you buy a LocalSite, Stripe handles the payment, a Terrivo account is created for the email you used, and we send transactional email through Resend. We keep a change history of your site and record when an administrator assisted you. Visitor statistics of a customer site are aggregated and only collected from visitors who accepted analytics.
A Local Guide contains content owned by the accommodation: practical guest information, its own programme, recommendations and nearby events. Guests open the guide through a QR code or link without signing in — we do not create guest accounts and we do not build guest profiles. Usage is measured only as aggregated counts (guide opened, which section, which language) and only from visitors who accepted analytics.
Payments run through Stripe Checkout. We never see or store card details. We keep the invoicing details you enter, the Stripe identifiers of your session/subscription and the payment status, because we need them for accounting and support.
We send transactional email (purchase confirmation, activation link, expiry reminders, support replies) through Resend. We do not send marketing email without a separate request.
Terrivo runs its own analytics in our own database: no third-party trackers, no advertising networks, no Google Analytics. Nothing is measured until you press Accept in the privacy panel: with no choice, or after Decline, no analytics request is sent at all. When you accept, we count page views, search terms, app installs and product usage (a LocalSite or Local Guide being opened, which section, which language, CTA clicks) with an opaque random visitor ID stored in your browser. We do not store your IP address, we filter bots server-side, we honour Do-Not-Track / Global Privacy Control, and analytics records are deleted automatically after 90 days.
Your interface language, your chosen Discovery starting point and travel mode, and whether you have already seen the privacy panel are stored in your own browser, not in your account.
Stripe (payments), Resend (transactional email), the Emergent platform (hosting, object storage for uploads and the AI gateway to Anthropic Claude models), Google (sign-in with Google and, where enabled, Places data/photos), OpenStreetMap Nominatim (geocoding for manual place search), and the public data sources listed above. We never sell your data and we do not add advertising partners.
Administrator actions on paid products (for example assisting a LocalSite or activating a Local Guide) are recorded with the administrator involved, and our servers keep standard technical logs for security and troubleshooting.
You can request access, correction, export or deletion of your data at any time via info@outlandweb.com. We answer within 30 days, as required by the GDPR. You can withdraw analytics consent at any time in the privacy panel.
Account data is kept while your account exists. Analytics records are deleted after 90 days. Product data (LocalSite, Local Guide) is kept for the contract period plus the retention window described in the contract, after which it is removed.
Terrivo is not directed at children under 16.
If we materially change this policy we will say so in the app and, where required, ask for your consent again.
Privacy-friendly analytics
Anonymous in-house analytics. No ads, no tracking. Read more