Privacy policy

Who we are

Tessera is a product by 7thloop. Questions about your data go to sebastian@7thloop.io.

Two roles

For your account (your email address, your plan, your invoices) we are the controller.

For the visitors of your site, you are the controller. We process that data on your behalf and only to make your tests work.

This website

tessera-ai.io uses no tracking cookies and no analytics. When you log in to the app, it sets a cookie to keep you logged in.

Your account

We store your email address, your password (encrypted, we cannot read it), your sites and pages, your variants and your conversations in the Studio.

When you sign up, Cloudflare (Turnstile) runs a bot check, and we store a hash of your IP address to limit the number of sign-ups per address. Such a hash is not a readable address, but it is not anonymous either. It is stored in our sign-up log and kept even if you stop using Tessera, so we can keep preventing abuse.

Online payments will go through Stripe. Your card details will never reach us.

Visitors of your site

With the visitor’s consent: a random visitor ID and a session ID in the browser, the visited page, the referring page and campaign data (UTM), the device type, the language, the hour, whether it is a returning visitor, the country (derived from the request; we do not store the IP address itself), clicks with the text and position of the clicked element, scroll depth, and conversions with the order details your site passes on.

Without consent: no ID and no data per person. We only count anonymously a page view, a click on a link or goal, and the choice in the cookie banner, with the page address without parameters. The pixel remembers that choice in the browser.

You provide the cookie banner and pass your visitor’s choice on to Tessera.

AI

What you type in the Studio chat and the HTML of the part of your page you change are sent to the AI model to make your variant: by default Claude by Anthropic, or the model you choose in the Studio (for example from OpenAI or Google).

Legal basis

We process your account to perform our agreement with you. The bot check and the hash of your IP address serve our legitimate interest: limiting abuse.

For the visitors of your site, you determine the legal basis. Tessera only measures them fully when your cookie banner passes on consent; without consent, we only count anonymously, with no data per person.

Who we work with

Supabase: database, login and storage, in the EU (Paris).

Netlify: hosting of the app and this site.

Stripe: online payments and invoices, once online payment is live.

Anthropic, and the model you choose: AI in the Studio.

Firecrawl: fetching your public pages (content and a screenshot) for the Studio.

Upstash: temporary counters to limit abuse.

Cloudflare: the bot check at sign-up.

Resend: sending Tessera’s emails, such as confirming your email address, from the EU (Ireland).

The database is in the EU. Other services, such as the AI models, may process data outside the EU, including in the United States.

How long we keep data

As long as your account exists.

If you stop using Tessera, email us. There is no button yet to delete your account yourself: we look at your request and delete what we can, such as the visitor data of your sites.

Part of the data is kept: your account details with the records of your credits and usage (which include the domain of your site that received trial credits), and our sign-up log (your account, your email domain and a hash of your IP address). We keep these to keep our accounts complete and to prevent abuse.

Your rights

You can access your data, have it corrected or deleted, object to processing or ask for a copy. Email sebastian@7thloop.io; we reply within a month.

If you are not happy with how we handle your data, you can file a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be).