Tessera

Privacy Policy

Last updated: 28th June, 2026.

This Privacy Policy explains how The Tessera Project ("Tessera", "we", "us", or "our") collects, uses, discloses, and protects personal information when you use Tessera (the "Service"), accessible at https://www.tessera-project.dev.

The Tessera Project is an independent service operated from Australia. We aim to handle personal information consistently with the Privacy Act 1988 (Cth) and the Australian Privacy Principles ("APPs"), regardless of whether we are presently bound by them.

1. Who we are

Tessera is operated by an individual based in Victoria, Australia, under the name The Tessera Project. If you have any questions about this policy or how we handle your information, contact us at info@tessera-project.dev.

2. What personal information we collect

We collect personal information that is reasonably necessary to provide the Service. This may include:

Information you provide directly

  • Account details: name, email address, password (stored in hashed form), and any profile information you choose to add.
  • Billing information: where you pay for the Service, payment is processed by our third-party payment provider (Stripe). We do not store full card numbers on our systems.
  • Content and data you submit, upload, or generate while using the Service.
  • Communications: messages you send us via support, email, or forms.

Information collected automatically

  • Usage data: pages viewed, features used, actions taken, timestamps.
  • Technical data: IP address, browser type, device identifiers, operating system, and referring URLs.
  • Cookies and similar technologies (see Section 8).

Information from third parties

  • If you sign in through a third-party provider (e.g. Google), we receive basic profile information you have authorised them to share.

We do not intend to collect sensitive information (as defined in the Privacy Act). Please do not submit sensitive information through the Service unless expressly requested and consented to.

3. How we use your information

We use personal information to:

  • Create and manage your account and authenticate you.
  • Provide, maintain, and improve the Service.
  • Process payments and manage any subscriptions.
  • Respond to your enquiries and provide support.
  • Send service-related communications (e.g. security alerts, billing notices, changes to terms).
  • Send marketing communications where you have opted in — you can opt out at any time.
  • Monitor usage, detect and prevent fraud, abuse, and security incidents.
  • Comply with our legal obligations and enforce our Terms.

We will only use your information for the purpose for which it was collected, a directly related secondary purpose you would reasonably expect, or where you have consented.

4. When we disclose your information

We do not sell your personal information. We may disclose it to:

  • Service providers who help us operate the Service (e.g. hosting, database, email delivery, analytics, payment processing) — these include Supabase, Vercel, OpenRouter. They are bound to use it only to provide services to us.
  • Professional advisers where reasonably necessary.
  • Authorities or third parties where required or authorised by law, or to protect our rights, safety, or property.
  • A successor in the event the Service is transferred to another operator, subject to this policy.

5. Overseas disclosure

Some of our service providers store or process data outside Australia, including in the United States and the European Union. Where we disclose personal information overseas, we take reasonable steps to ensure the recipient handles it consistently with the APPs.

6. How we protect your information

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. These include encryption in transit and at rest, access controls, row-level security, logging and monitoring, and regular security review.

No method of transmission or storage is completely secure. While we work to protect your information, we cannot guarantee absolute security.

7. Data breaches

We maintain procedures to detect, assess, and respond to data breaches. If a breach occurs that is likely to result in serious harm to affected individuals, we will notify those individuals and, where the Notifiable Data Breaches scheme applies to us, the Office of the Australian Information Commissioner (OAIC).

8. Cookies and tracking

We use cookies and similar technologies to keep you signed in, remember preferences, and understand how the Service is used. You can control cookies through your browser settings, though disabling them may affect functionality.

9. Data retention

We retain personal information only as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. When no longer needed, we take reasonable steps to delete or de-identify it. Some information may persist in backups for a limited period before being overwritten.

10. Your rights

Consistent with the APPs, you may:

  • Access the personal information we hold about you.
  • Correct information that is inaccurate, out of date, or incomplete.
  • Request deletion of your account and associated data (subject to legal retention requirements).
  • Withdraw consent to marketing at any time.
  • Complain if you believe we have mishandled your information.

To exercise these, contact us at info@tessera-project.dev. We will respond within a reasonable period (generally 30 days). We may need to verify your identity first.

If you are not satisfied with our response, you may contact the OAIC at oaic.gov.au.

11. Children

The Service is not directed at individuals under 16. We do not knowingly collect personal information from children. If you believe we have, contact us and we will delete it.

12. Third-party links

The Service may contain links to third-party sites. We are not responsible for their privacy practices. Review their policies before providing information.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date reflects the latest version. Material changes will be communicated via the Service or email. Continued use after changes means you accept the updated policy. This policy operates alongside our Terms and Conditions at tessera-project.dev/tcs.

14. Contact us

The Tessera Project

Email: info@tessera-project.dev