TerraNavitas Privacy Policy

1. Scope & Who We Are

This Privacy Policy describes how TerraNavitas, Inc. (“TerraNavitas,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when individuals visit our websites, use the TerraNavitas platform and related services, contact support, or otherwise interact with us.

2. Personal Information We Collect

We collect information in three main ways:

• Information you provide: account profile (name, email, employer, role), billing details, content you upload, and support communications.
• Information collected automatically: device and usage data (log files, IP address, identifiers, pages viewed, feature use, timestamps), and cookies or similar technologies.
• Information from third parties: single sign-on providers, integration partners, and resellers, consistent with your settings and their privacy policies.

3. Purposes of Processing

We use personal information to: (i) provide, maintain, and improve the Services; (ii) secure and prevent abuse; (iii) personalize and analyze usage; (iv) process transactions and provide customer support; (v) communicate about features and updates; (vi) comply with law and enforce agreements; and (vii) for other purposes with your consent.

4. Legal Bases (if applicable)

Where required (e.g., in the EEA/UK/Switzerland), we rely on legal bases including performance of a contract, legitimate interests (such as service improvement and security), legal obligation, and consent where appropriate.

5. Cookies & Similar Technologies

We use cookies, SDKs, and similar technologies for authentication, analytics, and feature functionality. You can manage cookies through your browser settings. Where required, we will obtain consent and provide granular controls.

6. De-identified, Aggregated, and Usage Data

We may create and use aggregated, de-identified, or anonymized data that does not reasonably identify an individual or household to analyze usage, benchmark, and improve the Services. We will not attempt to re-identify such data.

7. Sharing & Disclosures

We disclose personal information to: (i) service providers and subprocessors who process data on our behalf under contract; (ii) integration partners at your direction; (iii) professional advisors; (iv) authorities, where required by law or to protect rights; and (v) in connection with a corporate transaction. We do not sell personal information. We do not share personal information for cross-context behavioral advertising without your opt-out rights where applicable.

8. International Transfers

If we transfer personal information internationally, we will use appropriate safeguards such as Standard Contractual Clauses or other lawful transfer mechanisms.

9. Retention

We retain personal information for as long as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, and enforce agreements. Specific retention periods may vary by data category and use.

10. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including access controls, encryption in transit, vulnerability management, and logging/monitoring. However, no method of transmission or storage is 100% secure.

11. Your Rights & Choices

Depending on your location, you may have rights to access, correct, delete, or port your personal information; to object to or restrict certain processing; and to withdraw consent. You can exercise rights by contacting us as described in Section 16. Where applicable, you may appeal a rights request decision and lodge a complaint with a regulator.

12. U.S. State Privacy Disclosures (CA, CO, CT, VA, UT, IA, TN, TX)

We provide the following state-specific disclosures: categories of personal information collected; sources; purposes; categories of recipients; and data retention. California residents have the right to know, delete, correct, opt-out of sale/share, and limit the use/disclosure of sensitive personal information. We honor applicable opt-out preference signals (e.g., Global Privacy Control) where required.

13. Notice at Collection (California)

At or before the point of collection, we provide a Notice at Collection that includes the categories of personal information collected, purposes, retention, whether we sell or share personal information, and how to exercise rights. A link to the relevant section of this Policy is provided where collection occurs, consistent with applicable regulations.

14. Children’s Privacy

Our Services are not directed to children under 13 (or other age as defined by law). We do not knowingly collect personal information from children. If we become aware of such collection, we will delete it.

15. Third-Party Links & Integrations

The Services may include links or integrations with third-party products subject to their own privacy practices. We are not responsible for their policies or practices.

16. Contact Us

TerraNavitas, Inc. • 220 N Green St, Suite 300, Chicago, IL 60607 • support@terranavitas.ai. If you are in the EEA/UK/Switzerland and wish to contact a representative or data protection officer (if applicable), use the contact above and include your region in the subject line.

17. Changes to this Policy

We may update this Policy from time to time. We will post the updated version with a new effective date, and if changes materially affect your rights, we will provide additional notice (e.g., email or in-product notification).

18. Definitions

“Personal information” or “personal data” means information that identifies, relates to, describes, or could reasonably be linked to an identified or identifiable individual. Other capitalized terms have the meanings given in the TerraNavitas MSA or applicable law.