Privacy Policy
Last updated: July 17, 2026
Introduction
TerraKode LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and safeguard your information when you visit our website, use our customer portal, or otherwise engage with our services. This policy also covers how we handle voice and SMS communications. Effective date: July 17, 2026.
Information We Collect
We collect only the information necessary to deliver TerraKode services, maintain security, and communicate with you. All data collected is for company use only. **Account Information.** When you register for an account, we collect your name, email address, company name, timezone, and a password hash. We do not store plaintext passwords. **Phone Numbers.** We may collect a phone number for account security (such as multi-factor authentication), billing notifications, fraud alerts, and customer care communications. Providing a phone number is optional unless it is required to enable a specific MFA method. **Communications Data.** This includes SMS messages, voice call metadata (such as timestamps, duration, and caller ID), support tickets, contact form submissions, and email correspondence. **Automatically Collected Data.** Our servers collect standard logs, including IP addresses (hashed for privacy), device type, browser type, referrer, and page views. Analytics data is aggregated and never tied to individuals. **Cookies and Tracking.** We do not use cookies for tracking, advertising, or profiling. We may use essential cookies for session management, authentication, and security.
How We Use Your Information
We use your information solely to deliver TerraKode services, manage your account, maintain security, process billing, provide customer support, and comply with legal obligations. We use your information solely to deliver TerraKode services. We never sell, rent, or share your personal information with third parties for marketing, advertising, or data brokerage purposes. We will not provide your information to any third party without your explicit consent, except where strictly necessary to deliver the service (e.g., passing a phone number to a telecommunications provider solely to route an SMS or voice call). We do not use your data to train AI models or for automated profiling. We maintain a security-first mindset in all data handling practices. Information may also be used for legal compliance, fraud prevention, and dispute resolution.
SMS and Voice Communications
When you create an account, you may opt in by checking the communications consent checkbox during registration to receive SMS messages for login verification codes and MFA, security alerts, account alerts, and billing notifications. Texting is optional and not a condition of using the service. After you opt in, we send one confirmation text to the number you provided. - **How to opt out:** Reply STOP to any message to unsubscribe. You will receive no further messages. - **How to get help:** Reply HELP for assistance or contact us at [email protected]. - **Message frequency:** Msg frequency varies based on account activity. - **Rates:** Message and data rates may apply. - **Data use:** Mobile opt-in data and consent will not be shared with third parties or affiliates for marketing or promotional purposes. We do not sell or share your phone number with third parties. Your number is used solely to deliver TerraKode services. We may also place voice calls to the phone number you provide for login verification codes and MFA, security alerts, account alerts, and billing notifications. Calls are placed only when necessary for service delivery and only between 8:00 a.m. and 9:00 p.m. local time. You may opt out of non-essential voice calls by using the automated opt-out option during any call or by contacting us at [email protected]. Emergency security and fraud alerts may still be delivered by voice when required for account protection. We comply with CTIA guidelines, TCPA regulations, and applicable carrier requirements for SMS and voice communications.
Data Security
Security is central to how we operate. We implement industry-standard security measures to keep private and sensitive data secure at all times. - **Encryption:** TLS 1.3 for data in transit and AES-256 encryption at rest. - **Infrastructure:** Secure server infrastructure with network segmentation and strict access controls. - **Access control:** Principle of least privilege and multi-factor authentication for all administrative access. - **Audits and testing:** Independent security assessments and vulnerability management; third-party penetration testing is scheduled as part of our compliance roadmap. - **Incident response:** Documented incident response plan and breach notification procedures. We follow the same security practices we implement for our clients' applications.
Data Retention
We retain data only for as long as necessary for the purposes described in this policy. - **Contact form submissions:** up to 12 months, then securely deleted. - **Account data:** retained while your account is active, then up to 30 days after a deletion request. - **SMS and voice communication logs:** retained for the minimum period necessary for security, billing, and compliance (typically 12 months), then securely deleted. - **Server logs:** retained for 90 days for security, then anonymized or deleted. You may request earlier deletion at any time by contacting [email protected].
Third-Party Services and Service Providers
Our website does not integrate with third-party analytics, advertising, or tracking services. We believe your browsing history is none of our business. For SMS and voice delivery, we rely on third-party telecommunications service providers. These providers receive only the phone number and message content necessary to complete transmission. They are contractually prohibited from using your data for any purpose other than message delivery. We do not share your data with third parties for marketing, advertising, or data resale. Hosting and infrastructure providers may process data on our behalf but are bound by data processing agreements. All subprocessors are vetted for security and privacy compliance.
International Data Transfers
Primary data storage is in the United States. If data is transferred internationally, we use Standard Contractual Clauses (SCCs) and ensure adequate protection measures are in place. All transfers comply with applicable data protection laws, including GDPR and CCPA where relevant.
Your Rights and Choices
You have the right to access, correct, or delete your personal information. You may also request a copy of your data (data portability). You may opt out of SMS and voice communications at any time by replying STOP to any SMS or contacting [email protected]. You may opt out of marketing emails at any time. We do not currently send marketing emails, but if we ever do, you will be able to unsubscribe. You may withdraw consent for data processing where consent is the legal basis, and you have the right to lodge a complaint with a supervisory authority. To exercise any of these rights, contact [email protected].
Children's Privacy
Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected such information, we will delete it promptly. Please contact us at [email protected] if you believe a child has provided information to us.
Cookies and Similar Technologies
We do not use cookies for tracking, advertising, or profiling. We may use essential cookies and similar technologies for session management, authentication, and security. We do not integrate third-party cookie or tracking services.
Changes to This Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with an updated effective date. Material changes will be notified via email or a prominent notice on the site before they take effect.
Contact Us
If you have questions about this Privacy Policy, contact us at [email protected]. For legal matters, contact [email protected].