Privacy policy

Effective from 6 October 2026, updated 28 October 2026. This policy explains what data TeraLoads collects, why we use it, who we share it with and what rights you have.

1. Who controls your data

TeraLoads (the website teraloads.com and the “TeraLoads” app) is operated by UAB „GEOMANAI“, company code 303049379, Žvalgų g. 8, Vilnius, Lithuania (“we”). Questions about personal data: info@teraloads.com.

2. What TeraLoads is

TeraLoads is a map where people and companies post that they are looking for or offering construction machinery, haulage, bulk building materials (soil, gravel, sand, crushed stone and similar) and earth or road works. We are not a party to any deal: we only help people find and contact each other.

3. What data we collect

3.1. Account data:

• phone number and/or email address — for signing in and verification codes;
• if you sign in with Google, Facebook or Apple — we receive your name, email address, your account identifier on that service and a link to your profile picture (we do not show or use the picture). Apple lets you hide your email address — we then receive a random Apple address (…@privaterelay.appleid.com) that forwards emails to you, and Apple shares your name only the first time and only if you provide it. Facebook may not share an email address (for example, if the account was created with a phone number). We do not receive your password for these services, and they do not receive your TeraLoads listings, messages or phone number.
• password — stored only as an irreversible hash, we cannot see it;
• your name or company name, the roles you choose (customer, machinery and haulage, material supplier), language;
• if you act as a company — company name, code, VAT code, address, country, website.

3.2. Profile and machinery data: base location and service radius, your machines (type, number, axles or payload, with or without operator), machine availability calendar, company vehicle registration numbers.

3.3. Listings: listing location (exact or approximate — within about 500 m), a second “deliver to” point, quantities, prices, dates, description and photos.

3.4. Communication: chat messages, photos and locations sent in chats, read time; price requests to suppliers; when and by whom your phone number was revealed (for reveal limits and protection against number harvesting).

3.5. Location (GPS): used only if you allow it on your phone — to open the map where you are and to mark a listing location quickly. The company fleet feature (“My company”) collects a driver’s location only during a shift (see 4.7).

3.6. Notifications: device identifiers for push notifications, your notification settings (which orders you want, quiet hours).

3.7. Usage data: when you used the service, which listings you viewed or where you pressed “Call” / “Message”, whether you opened a notification, which shared link you came from, your answer to “Did you find what you were looking for?”. We count this in our own database. If you agree (“Statistics”), we also measure visits with Google Analytics (see 4.9a and 8).

3.8. Technical data: error log (error description, browser, device type), feedback you send and its screenshots, IP address and browser signals checked by the bot protection service when you sign in.

3.9. Place claims: if you claim that a place on the map (quarry, yard) belongs to your company — the data you provide to verify it.

3.10. Consents and email settings: when you accepted the terms and privacy policy, whether you agreed to receive TeraLoads news and when you changed it, whether you want emails about unread messages, your choice in the consent window (“Statistics”, “Ad measurement”). Which source you came from when signing up (e.g. “facebook”, “youtube” — only the source name from the link).

3.11. Data we receive from others: publicly listed business contacts and activity data when we call companies (see 4.11).

4. Why we use data and on what legal basis

4.1. To provide the service — your account, listings, showing contacts, chats, notifications about new messages and orders that match you. Legal basis: performance of a contract (GDPR Art. 6(1)(b)) — you want others to contact you. If you sign in with Google, Facebook or Apple, we use the data they share to create your account and sign you in, your name as your profile name (you can change it) and your email for signing in and account notifications. A phone number is still required to post listings and to receive calls — you confirm it with an SMS code. Legal basis — performance of a contract.

4.2. For security and abuse prevention — verification codes, bot protection, limits on number reveals and messages, moderation of inappropriate listings. Legal basis: legitimate interest (Art. 6(1)(f)).

4.3. To improve the service — fixing errors and understanding whether the platform helps people find what they need (usage statistics). Legal basis: legitimate interest.

4.4. Notices and emails about your account and using the service: verification codes, unread messages, reminders about expiring listings, your requests with no response yet, tips on getting started (e.g. adding your machinery to receive nearby orders). Legal basis — performance of the contract; for tips — our legitimate interest in helping you use the service. You can opt out of tips at any time via the link in the email or Profile → Email.

4.5. To comply with legal obligations and defend legal claims. Legal basis: legal obligation and legitimate interest.

4.6. News and offers by email — only if you want them: you ticked "Receive TeraLoads news" when signing up or in your profile. We send them at most once a week: platform news, new requests and offers in your region, tips. Legal basis — your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time via "Unsubscribe" in every email or Profile → Email; withdrawal does not affect earlier emails or your use of the service.

4.7. Company fleet. A company may invite drivers and see their vehicle location, trips and fuel entries. Location is collected only after the driver starts a shift, the history is kept for 30 days, and a tracking link for a customer is valid for 12 hours and shows the location only during working time.

4.8. Social media. When you comment on or message our pages on Facebook, Instagram, TikTok, YouTube or X, we see your public name and what you wrote, in order to reply. We process this together with the network operator (e.g. Meta Platforms Ireland as joint controller for Page Insights); see the networks' own privacy policies. Legal basis — legitimate interest in communicating with visitors of our pages.

4.9. Advertising effectiveness. In ads and on social networks we use links with a source tag (e.g. teraloads.com/?s=facebook). The tag is saved with a new account so that we can count how many people came from each ad. Legal basis — legitimate interest in assessing the value of advertising.

If you came from a Meta (Facebook, Instagram) ad and agreed (“Ad measurement”), after you sign up we tell Meta Platforms Ireland Ltd. that you registered. We send: your phone number and email converted to a hash (SHA-256), your account identifier (also hashed), IP address, browser type and the ad click identifier. We do not store the IP address or browser data ourselves; the notice is sent once. Meta uses this to measure ad results and find similar people; for this we and Meta are joint controllers (Art. 26 GDPR), and Meta then processes the data under its own privacy policy and may transfer it to the USA (EU–US Data Privacy Framework). Legal basis — your consent; you can withdraw it at any time (“Cookie settings” at the bottom of this policy), but a notice already sent cannot be recalled from Meta. We do not share any other data with ad networks.

4.9a. Visit statistics. If you agree (“Statistics”), we use Google Analytics 4 (Google Ireland Ltd.): how many people visit, which pages they open, on which device, from which country and city (derived from the IP address; Google Analytics does not store the IP address itself) and whether they signed up. We do not enable Google signals or ad personalisation; data is kept for 14 months. Google may transfer data to the USA (EU–US Data Privacy Framework). Legal basis — your consent; you can withdraw it at any time.

4.10. Listing ads. To help listings get answers faster, we may show public listings free of charge in TeraLoads ads and posts on social networks and search engines (Terms 4.3a). An ad shows only what is already visible in the public listing: what is wanted or offered, quantity, price, date, photo and the location on the map (only the approximate location if you chose it). We never show your name, phone number or email address in ads. Ad platforms (e.g. Meta Platforms Ireland, Google Ireland, TikTok Technology) receive only the ad image, text and a link to the public listing. Legal basis — legitimate interest in helping your listing get answers. You can object: write to info@teraloads.com and we will stop advertising your listing within 1 business day.

4.11. Calls to companies. To get more machinery on the map, we call companies that publicly advertise construction machinery hire, earthworks or road works, haulage or bulk materials, and offer to add their machinery to TeraLoads. The calls are made on our behalf by the call centre UAB „Infomedia“ (Increla, Vilnius), our data processor.

• Data we process: company name and code, the company's publicly listed phone number and email address, location, field of activity and, if listed, machinery types. Also the date and outcome of the call (e.g. “call back”, “not interested”, “do not call”), the contact person's name if you give it, and the call recording.
• Where we get it: public business directories (1551.lt, rekvizitai.lt), Sodra open data on employers (company name, code, type of activity) and companies' own websites.
• Legal basis: our legitimate interest in offering our service to companies (Art. 6(1)(f) GDPR). We only call publicly listed business contacts, on working days and from a displayed number. We do not make these calls to natural persons, for example self-employed persons or farmers.
• Call recording: at the start of the call we tell you that it is recorded. We use recordings to check service quality and to prove what we told you and what you agreed to. Legal basis — legitimate interest. Recordings are kept in the call centre's system in the EU for no longer than 6 months.
• If you agree: during the call the operator enters the details you give: company name, mobile phone number, email, contact person's name, machinery type, number and location. We then send an SMS and, if you gave an email address, an email with a link to confirm. Nothing is published before you confirm. In the link you can press “Not us — delete our data”, and the data is deleted at once. If you do not confirm within 30 days, we delete it automatically. Legal basis — your request (steps prior to entering into a contract, Art. 6(1)(b) GDPR). Once you confirm, the other sections of this policy apply to you as to any user.
• Your right to object: you can refuse our calls at any time. Tell the operator during the call or write to info@teraloads.com. We then add the company to a “do not call” list (company name, code, phone number and date of objection) and do not call again. We keep this entry so that we can respect and prove your objection. You can also ask us to delete your other data.

5. Who sees your data

5.1. Other users see your listings, your name or company name and the listing location. Your phone number is shown only to signed-in users who tap “Call”, and only if you have not hidden it (you can choose “In-app chat only”). Messages are seen only by chat participants.

5.2. Service providers that process data on our behalf:

• Supabase — database, sign-in, file storage (servers in the EU, Frankfurt);
• Vercel — website hosting (functions run in the EU, Frankfurt; US company);
• Twilio — SMS verification codes (USA);
• Resend — email (EU region); also newsletters, if you agreed;
• Metricool (Metricool Software S.L., Spain) — scheduling social media posts and handling comments; no access to our user database;
• Google Workspace (Google Ireland) — our mailbox info@teraloads.com (your emails to us);
• UAB „Infomedia“ (Increla, Lithuania) — calls to companies on our behalf and call recordings (see 4.11); no transfers outside the EU/EEA;
• Cloudflare — map files and bot protection (USA);
• Google (Firebase Cloud Messaging) and browser vendors’ push services — notifications to your phone;
• Komoot (Photon) — address search: only the text you type is sent (Germany);
• Esri — satellite map imagery, only if you turn it on (USA);
• Google (Google Analytics, Google Ireland Ltd.) — visit statistics, only if you agree.

5.2a. Ad platforms (Meta, Google, TikTok) — only the content of a public listing when we promote it (see 4.10) and — for Meta — the sign-up notice for people who came from its ad, if they agreed (see 4.9). These platforms show ads as independent controllers under their own privacy policies.

5.2b. Sign-in services. If you choose “Continue with Google”, “Continue with Facebook” or “Continue with Apple”, the sign-in is confirmed by Google Ireland Ltd., Meta Platforms Ireland Ltd. or Apple Distribution International Ltd. They learn that you are signing in to TeraLoads and process this as independent controllers under their own privacy policies (they may transfer data to the USA under the EU–US Data Privacy Framework). TeraLoads does not send them any of your data. Using these buttons is optional — you can sign in with your phone number or email. If the sign-in page shows the “Continue with Google” button, a Google script is loaded when you open the page: Google receives your IP address and browser data, and if you are signed in to Google in your browser, the button may show your name; your sign-in data is shared with us only after you tap the button and confirm in the Google window.

5.3. Public authorities — only when required by law.

We do not sell your data.

6. How long we keep data

• Account, profile, machinery data and listings — as long as you have an account. Expired listings are no longer shown on the map but stay in your “My listings” until you delete them.
• When you delete your account, your profile, listings, machines, photos and photos sent in chats are deleted immediately. Text messages you wrote stay with the other person, but without your name — shown as “Deleted user”.
• Data received from Google, Facebook or Apple — while you have an account; deleted together with your account.
• Sign-in codes — up to 24 hours.
• Vehicle location history — 30 days; customer tracking link — 12 hours.
• Error log, feedback and usage statistics — up to 24 months.
• Consent records (when you agreed or withdrew) — while you have an account and 3 years after withdrawal or account deletion, as evidence.
• Email delivery log (to whom and when) — up to 30 days at Resend.
• Comments and messages on social networks — under the network's rules; Metricool shows them while they exist on the network.
• List for calls to companies (company contacts and call outcome) — while the call campaign runs, but no longer than 12 months after the last call.
• Recordings of calls to companies — no longer than 6 months (in the call centre's system).
• Company details entered by an operator but not confirmed — 30 days.
• Record of who added a company and when, and when it confirmed — 12 months after confirmation, to reconcile the call centre's invoices; then it is deleted automatically.
• “Do not call” list — while we make such calls and 3 years after the last call, as proof of the objection.

7. Your rights

You have the right to access your data, correct it, delete it, restrict processing, object to processing based on legitimate interest, and receive your data in a portable format.

You can change most data yourself in your profile. You can delete your account at any time: Profile → Password and account → Delete account. In other cases write to info@teraloads.com — we will reply within 30 days. You can also revoke TeraLoads access in your Google, Facebook or Apple account settings; you will then sign in with your phone number or email, and the data we hold remains until you delete your TeraLoads account.

You can withdraw consent to news at any time — via the link in the email or Profile → Email. You also have the right to object to the use of your data for direct marketing.

If our call centre called you, you can object to the calls at any time: tell the operator or write to info@teraloads.com — we will not call again.

If you believe your data is processed unlawfully, you can lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt) or your local data protection authority.

8. Cookies and local storage

Necessary (no consent): to keep you signed in (cookies) and to save your choices on your phone or computer (browser storage): language, map view, filters, whether you closed the tips window, your choice in the consent window, a random device identifier (so we do not count the same visitor several times) and the source from a link (up to 7 days).

Only with your consent: “Statistics” — Google Analytics cookies (_ga, _ga_*, up to 14 months); “Ad measurement” — the Meta ad click identifier (in browser storage for up to 7 days or until you sign up).

On your first visit we show a consent window with equal “Accept” and “Refuse” buttons and an option to choose. You can change your choice at any time with the “Cookie settings” button at the bottom of this policy. We do not use these tools in the apps (Android, iPhone).

9. Age

TeraLoads is intended for people aged 18 and over. We do not knowingly collect data of younger people.

10. Security

Data is sent only over encrypted connections (HTTPS/TLS), stored encrypted in the database and file storage (AES-256), and passwords are stored only as hashes. Database access is restricted by row-level rules so that each user sees only data meant for them. Your phone number is never sent together with the list of listings, and reveals are limited and logged. We use bot protection, rate limits, monitor unusual activity and keep access logs.

No system is completely secure. If a personal data breach occurs that may put your rights at risk, we will notify the State Data Protection Inspectorate within 72 hours and, where the risk is high, you as well (GDPR Art. 33–34).

10a. Other users’ data you see

You may use other users’ phone numbers, names and messages only to contact them about a specific listing. Collecting, copying, storing, transferring them or using them for advertising is forbidden — in that case you become the controller of that data and are liable under the GDPR and section 8 of the terms (contractual penalties). Other users are responsible for how they use the data you disclose to them.

10b. Automated decisions

We do not make decisions with legal effects on you solely by automated means. Only protective limits (e.g. how many numbers can be revealed per hour) and the selection of order notifications according to your settings are applied automatically — you can change them in your profile.

11. Changes

If this policy changes, the latest version will be published at teraloads.com/privacy, and we will notify you about significant changes in the app or by email.