Privacy Policy

This policy describes how the Terra Nova Limited Partner Portal (the “Portal”) collects, uses, and protects your personal data.

1. Who we are

The Portal is operated by Terra Nova for the exclusive use of its limited partners and authorized personnel. Access is invite-only; there is no public registration.

2. Data we collect

We collect and store the following personal data:

• Your name and email address
• A cryptographic hash of your password (we never store the password itself)
• Your role, LP-entity membership, and notification preferences
• Login timestamps and a log of content-notification emails sent to you
• Timestamps recording when you accepted our Terms of Service and this Privacy Policy
• Short-lived IP address records used solely to enforce login and registration rate limits; these are held in volatile memory and are not persisted to our database

When you are signed in, we set a single strictly necessary session cookie that identifies your authenticated session. The Portal sets no analytics, advertising, or tracking cookies.

3. How we use your data

We process your data to:

• Authenticate you and maintain your session
• Grant access to investor documents (LP letters, capital statements, fund financials, K-1 tax documents) scoped to your LP entity
• Deliver content notifications for categories you have opted into
• Maintain an audit trail of communications sent to you
• Enforce rate limits and protect the Portal from abuse

4. Sub-processors

The Portal relies on the following third-party services:

• Vercel (US) — application hosting and edge delivery
• Neon (US) — managed PostgreSQL for user accounts and preferences
• Sanity (US/EU) — content management and document delivery
• Resend (US) — transactional email delivery

Each sub-processor is bound by its own data processing terms. Your personal data may be processed in or transferred to the United States in the course of operating the Portal.

5. How we protect your data

We encrypt your data in transit, store passwords in hashed form, and enforce role- and entity-scoped access controls so that each user only sees documents associated with their own account. Access to the underlying database and content management system is restricted to authorized Terra Nova personnel.

6. Retention

We retain your account data for as long as you have access to the Portal and for a reasonable period thereafter as required for legal, audit, and tax purposes.

7. Your rights

You may request access to, correction of, or deletion of the personal data we hold about you by contacting your Terra Nova representative. Because Terra Nova operates as a private fund manager with a closed investor base, we handle these requests manually.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the version and date at the top of this page. For material changes, we will notify you by email before the update takes effect. Continued use of the Portal after a change constitutes acknowledgement of the updated policy.