Terralyn Privacy Policy

Effective Date: June 01, 2025
Last Updated: January 21, 2026

1. Introduction

Climate Data Inc., doing business as Terralyn ("Terralyn," "we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our AI-powered workflow automation platform.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email, job title, company name, password (encrypted), phone (optional)
  • Business Information: Sustainability data, corporate documents, user content
  • Communication Information: Support requests, feedback, marketing preferences

2.2 Information Collected Automatically

  • Usage Data: IP address, browser type, device info, pages visited, feature usage, interactions, error logs
  • Cookies and Tracking: Essential cookies, analytics cookies (with consent). See our Cookie Policy

3. How We Use Your Information

  • Service Delivery: Provide platform, process data, generate reports, authenticate users, customer support
  • Service Improvement: Improve features, develop capabilities, analytics, optimize UX, troubleshoot
  • Communication: Respond to inquiries, service updates, marketing (with consent), security notifications
  • Legal and Compliance: Comply with laws, enforce terms, prevent fraud, respond to legal requests

4. Legal Basis for Processing (GDPR)

For EU/EEA users:

  • Contract: Necessary to provide requested services
  • Consent: Marketing, optional features
  • Legitimate Interest: Service improvement, security, analytics
  • Legal Obligation: Compliance with laws

5. How We Share Your Information

5.1 We DO NOT Sell Your Data

Terralyn does not sell, rent, or trade personal information.

5.2 Service Providers

Table listing service provider categories, examples, and purposes: AI Model Providers (Anthropic, OpenAI) for data analysis and report generation, Infrastructure (AWS) for cloud hosting with encryption, Business Tools (analytics, customer support, email services) for platform operations.

5.3 Legal Requirements

We may disclose information when required by law or to protect rights and safety.

5.4 Business Transfers

In merger/acquisition, your information may be transferred. You will be notified.

6. AI and Automated Processing

6.1 Use of AI

Terralyn uses AI to analyze data, generate reports, provide recommendations, and automate workflows.

6.2 Human Oversight

  • AI outputs subject to human review
  • Critical decisions involve human oversight
  • Users can override AI recommendations

6.3 Your Rights Regarding AI

  • Know when AI is used in processing your data
  • Request human review of AI-generated outputs
  • Opt-out of certain AI features (where feasible)

7. Data Security

Industry-standard measures including:

  • Encryption: TLS 1.2+ (transit), AES-256 (at rest)
  • Access Controls: Role-based access, MFA
  • Monitoring: 24/7 security monitoring
  • Audits: Regular security assessments

No system is 100% secure, but we continuously work to protect data.

8. Data Retention

Table showing data types and their retention periods: Account Data is kept for account duration plus 3 years, Business Data for 3-7 years as per regulations, Logs/Analytics as needed, and Marketing Data until unsubscribe or deletion request.

9. Cookies and Tracking Technologies

We use cookies and similar technologies for essential platform functionality, analytics, and user preferences.

Cookie Categories:

  • Essential Cookies: Required for platform operation (always active)
  • Analytics Cookies: Understanding usage patterns (optional, with consent)
  • Functional Cookies: Remembering preferences (optional)
  • Marketing Cookies: Campaign tracking (optional, with consent)

Your Choices:

  • Manage preferences via cookie banner on first visit
  • Update settings via "Cookie Settings" link in website footer
  • Configure browser settings to block/delete cookies

For detailed information including specific cookies used, see our Cookie Policy.

10. Your Privacy Rights

10.1 All Users

  • Access your personal data
  • Correct inaccurate data
  • Delete your data
  • Data portability (export in usable format)
  • Opt-out from marketing communications

10.2 GDPR Rights (EU/EEA)

  • Object to processing
  • Restrict processing
  • Withdraw consent at any time
  • Lodge complaint with supervisory authority

10.3 CCPA Rights (California)

  • Right to know what data is collected
  • Right to delete personal information
  • Right to opt-out of sale (we do not sell data)
  • Right to non-discrimination

Do Not Sell My Personal Information: We do not sell personal information. To submit a request or learn more about your California privacy rights, visit California Consumer Privacy Act (CCPA).

10.4 How to Exercise Rights

Email: privacy@terralyn.ai
Response Time: 30 days (CCPA), 1 month (GDPR, extendable to 3 months for complex requests)

11. International Data Transfers

Terralyn is US-based. Data from international users may be transferred to the United States.

Safeguards:

  • Standard Contractual Clauses (SCCs)
  • GDPR-compliant vendor Data Processing Agreements

12. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect data from children.

13. Third-Party Links

The platform may link to third-party sites. Review their privacy policies before providing information.

14. Marketing Communications

  • Sent only with consent or based on existing business relationship
  • Unsubscribe via email link, privacy@terralyn.ai, or account settings
  • Transactional emails (account, security) cannot be opted out

15. State-Specific Disclosures

California Residents (CCPA)

Categories Collected: Identifiers, commercial information, internet activity, professional information

Sources: Directly from you, automatically from platform use, third-party integrations (with your authorization)

Business Purposes: Service delivery, security, analytics, marketing

Third Parties Receiving Data: Service providers (AI vendors, cloud hosting, analytics)

Sale of Personal Information: We do not sell personal information

Shine the Light: California Civil Code Section 1798.83 permits California residents to request information regarding disclosure of personal information to third parties for direct marketing. We do not disclose personal information to third parties for direct marketing purposes.

16. Changes to This Privacy Policy

Updates posted with "Last Updated" date. Material changes notified via email or platform notification.

17. Supervisory Authority

EU/EEA users may contact their local data protection authority if concerns are not addressed.

18. Contact Us

Email: privacy@terralyn.ai
Data Protection Officer: privacy@terralyn.ai
Address: Climate Data, Inc. (DBA Terralyn), [Company Address]
Website: https://www.terralyn.ai/privacy

19. Summary of Key Points

  • We protect your privacy: Industry-standard security, encryption, access controls
  • We use AI responsibly: Transparent about AI use, human oversight, contractual protections with AI providers
  • We don't sell your data: Used only to provide and improve services
  • You have rights: Access, delete, correct, opt-out
  • We comply with regulations: GDPR, CCPA, SOC 2
  • Contact us anytime: privacy@terralyn.ai