Privacy Policy

    Effective Date: October 30, 2026

    Sterra Labs, Inc. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, including our websites, our web application, and the Sterra Wingman browser extension (together, the "Services"). By accessing or using our Services, you agree to this Privacy Policy. If you do not agree, please refrain from using our Services.

    1. Information We Collect

    1.1 Personal Information

    We may collect personal information that you voluntarily provide when you register for an account or interact with our Services, such as:
  1. Contact Information: Name, email address, phone number.
  2. Account Credentials: Username, password, and other authentication details.
  3. Professional Information: Job title, company name, and industry.

    1.2 Usage Data

    4. When you interact with our Services, we automatically collect certain information about your device and usage, including:
  4. Log Data: IP address, browser type, operating system, access times, and pages viewed.
  5. Device Information: Hardware model, unique device identifiers, and network information.

    1.3 Publicly Available Data from Third-Party Platforms

    6. We may collect and process publicly available information from third-party platforms relevant to our Services, such as:
  6. Public User Profiles: Usernames, profile pictures, and other information made public by users on third-party platforms.
  7. User Interactions: Public contributions, followers, following lists, and other publicly visible activities.

    Note: We collect this information to enhance our Services by providing accurate and relevant data for talent acquisition and recruitment purposes.

    1.4 Information Collected Through Sterra Wingman

    8. Sterra Wingman is a browser extension for invited members of Sterra workspaces. It collects nothing from the websites you visit until you sign in with your Sterra account, and it stops collecting when you sign out. While you are signed in, it may collect:
  8. Account Information: Your name, email address, and profile picture from your Sterra account, and the sign-in session that keeps you signed in.
  9. Website Content: Information shown on the websites you use with Sterra Wingman.
  10. Your Work in Sterra: Profiles you save to your projects, and your settings.
  11. Activity and Technical Information: Records of the extension's activity, its version, your time zone, and when it last connected to our Services.

    We do not sell information about you that Sterra Wingman collects, and we do not use it for advertising.

    2. How We Use Your Information

    We use the information we collect for purposes including, but not limited to:

  12. Service Delivery: To operate, maintain, and provide you with the features and functionality of our Services.
  13. Browser Extension Features: To show information about companies and professionals alongside the websites you use, to save profiles to your projects, and to support network features in your workspace.
  14. Accurate Professional Records: To keep the professional information in our Services accurate and current, including with information collected through Sterra Wingman, consistent with Section 1.3.
  15. Personalization: To tailor content and recommendations to your preferences.
  16. Communication: To send you service-related notices, updates, and support messages.
  17. Analytics and Improvements: To analyze usage trends and improve the quality of our Services.
  18. Safety and Limits: To apply usage limits, prevent abuse, and keep our Services secure.
  19. Legal Compliance: To comply with legal obligations and protect our rights and interests.

    3. Disclosure of Your Information

    We may share your information under the following circumstances:

    3.1 Service Providers

    20. We may engage third-party companies to perform services on our behalf, such as:
  20. Data Hosting and Storage: Providers that store or process data securely.
  21. Authentication: Providers that operate sign-in for our Services.
  22. Data Enrichment: Providers of company and professional information that we use to provide insights.
  23. Artificial Intelligence: Providers of artificial intelligence services that process content on our behalf to provide features such as profile analysis.
  24. Analytics Services: Companies that help us understand how our Services are used.

    3.2 Within Your Workspace

    25. Information you add to a Sterra workspace, including profiles you save and network information collected through Sterra Wingman, is available to other members of that workspace, and to other organizations that you or your workspace choose to share with, according to your workspace's settings and your sharing choices.

    3.3 Legal Requirements

    We may disclose your information to:
  25. Comply with Laws: Respond to legal processes or governmental requests.
  26. Protect Rights: Enforce our Terms of Service and protect the rights, property, or safety of our users and the public.

    3.4 Business Transactions

    27. In the event of a merger, acquisition, or asset sale, your information may be transferred to the acquiring entity.

    4. Third-Party Services

    Our Services may include links or integrations with third-party services, and Sterra Wingman works on third-party websites that we do not control. We are not responsible for the privacy practices of these third parties, and your use of their websites is governed by their own terms and policies. We encourage you to review their privacy policies before providing them with your personal information.

    4.1 Google User Data

    When you connect a Google account to Sterra, we ask only for the access that the feature you choose needs:

  27. Gmail (send): to send the emails you or your team approve in Sterra, from your address.
  28. Gmail (read): to read replies to those emails and the email conversations in a mailbox you connect that relate to your work in Sterra, and to see the addresses Gmail lets you send as.
  29. Google Calendar, Meet and Docs (read): to find your meetings, their attendees, and the notes and transcripts Google creates for them.
  30. Google Drive (read): to find the documents you point us to.

    Who sees it: data from a connected Google account is available to you, to the members of your Sterra workspace who work with you, and to other organizations that you or your workspace choose to share with, as described in Section 3.2.

    AI processing: we use artificial intelligence service providers to classify, summarize and extract information from this data so that Sterra can show you the right context and help you draft messages. These providers process it only on our instructions, under terms that do not allow them to train their models on it.

    We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models. We do not sell Google user data, use it for advertising, or transfer it to others, except as needed to provide the features described above, for security, to comply with the law, or as part of a merger, acquisition or asset sale.

    Disconnecting and deletion:

  31. You can disconnect a Google account at any time in Sterra, or by removing Sterra under Security in your Google Account. Either way, we stop accessing that account.
  32. Access tokens are encrypted at rest.
  33. You can ask us to delete the data we received from a Google account by writing to privacy@sterra.ai. We delete it within 30 days of your request.

    Sterra's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

    5. Data Security

    We implement reasonable administrative, technical, and physical safeguards to protect your information. Sterra Wingman keeps your sign-in session in storage on your device that only the extension can access, and it does not expose that session to the websites you visit. However, no security measures are entirely foolproof, and we cannot guarantee absolute security.

    6. Data Retention

    We keep personal information for as long as your account is active or as needed to provide the Services, and as needed to meet legal, accounting, or reporting obligations or to resolve disputes. Operational records, such as Sterra Wingman's activity records, are kept only briefly. When we no longer need information, we delete or de-identify it. Sterra Wingman removes your sign-in session from your device when you sign out, and everything it stores on your device when you uninstall it.

    7. International Data Transfers

    Your information may be transferred to and processed in countries other than your country of residence. By using our Services, you consent to such transfers.

    8. Your Rights and Choices

    8.1 Access, Correction, and Deletion

    34. You may access, update, or delete your personal information by logging into your account settings or contacting us directly.

    8.2 Opt-Out Options

  34. Marketing Communications: You may opt out of receiving promotional emails by following the unsubscribe instructions provided.
  35. Cookies and Tracking Technologies: Adjust your browser settings to refuse cookies or alert you when cookies are being used.
  36. Sterra Wingman: You can sign out of Sterra Wingman at any time, which stops it from collecting information, or uninstall it.

    8.3 Rights Regarding Publicly Collected Data

    37. If we have collected your personal information from publicly available sources or third-party platforms, including through our users' use of the Services, and you prefer that we do not process this information, you have the right to request its removal.
  37. Opt-Out Requests: Please contact us at privacy@sterra.ai to request the deletion of your personal information obtained from public sources.

    8.4 Do Not Track

    38. Our Services do not respond to "Do Not Track" signals from your browser.

    9. Data Protection Compliance

    We are committed to complying with applicable data protection laws and regulations, including but not limited to the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

  38. Legal Bases (EEA and UK): We process personal information to perform our contract with you, for our legitimate interests in providing, securing, and improving the Services and in maintaining accurate professional information for talent acquisition and recruitment, to comply with legal obligations, and with your consent where the law requires it.
  39. Your Rights Under GDPR: If you are located in the European Economic Area (EEA), you have the right to access, rectify, or erase your personal data, restrict or object to its processing, and the right to data portability.
  40. Your Rights Under CCPA: If you are a California resident, you have the right to know what personal information we collect, disclose, and sell about you, and the right to request that we delete your personal information.

    To exercise any of these rights, please contact us at privacy@sterra.ai.

    10. Children's Privacy

    Our Services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16.

    11. Changes to This Privacy Policy

    We may update this Privacy Policy periodically. Changes will be effective upon posting the updated policy with a new effective date. We encourage you to review this Privacy Policy regularly.

    12. Contact Us

    If you have questions about this Privacy Policy or our privacy practices, please contact us at privacy@sterra.ai.

    41. For any questions regarding this Privacy Policy, please contact us at privacy@sterra.ai