TerraTech 360, Inc. Privacy Policy

This Privacy Notice (this “Notice”) describes how TerraTech 360, Inc. (“TerraTech,” “we,” “us,” or “our”) collects, uses, discloses, and protects your information when you use our services or otherwise interact with us. Please read this Notice carefully to understand our practices regarding your information.

Scope of this Notice

This Notice describes the information we collect from you and how we use, share, and protect it when you:

• Visit or interact with our website at terratech360.com (our “Website”);
• Access or use our real estate and development management software platform, including related implementation services and any associated software, technologies, documentation, and deliverables (collectively, our “Platform”);
• Register for a waitlist or trial account;
• Create a paid user account;
• Communicate with us, including through channels such as email, phone, or contact forms (your “Communications”); or
• Otherwise interact with us.

Throughout this Notice, we refer to our Website and Platform collectively as our “Services”.

This Notice does not apply to third-party websites, services, or applications that may be linked to or accessible through our Services, or to employment-related information we collect in connection with TerraTech employees or job applicants.

Please read this Notice carefully. By using our Services or otherwise interacting with us, you acknowledge that you have read and understood this Notice. If you do not agree with this Notice, please do not use our Services or otherwise interact with us.

Children’s Privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect information from anyone under 18 years of age. If we learn that we have collected personally identifiable information from someone under 18, we will take steps to delete that information as soon as possible. If you believe we may have collected personally identifiable information from someone under 18, please contact us at privacy@terratech360.com.

Data We Collect

When you use our Services or otherwise interact with us, we collect certain information, including information that identifies you or could be used to identify you (“Personal Data”). We collect this information to provide our Services, improve your experience, ensure security, and fulfill our legal obligations.

Here’s what we collect, how we collect it, and why:

What We Collect	How We Collect It	Why We Collect It
Name and email address	When you register for the waitlist, create a trial or paid account, or contact us	To create and manage your account, authenticate you, and communicate with you
Contact information (physical address and telephone number)	When you provide it during registration or in your profile	To provide customer support and communicate with you
Geographic location (physical address)	When you provide it during project setup	To provide project-specific daily weather details
Company/organization name, job title, company size, and bio/description	When you provide it during account setup or in your profile	To understand your use case, provide appropriate features, and send marketing communications such as newsletters and product updates
Profile picture	When you upload one to your profile	To personalize your account
Payment information (credit card details and billing address)	Collected and processed by Stripe, Inc. (“Stripe”), our third-party payment processor when you purchase a subscription	To process payments; we do not store your full payment card details
User-uploaded content and project data	When you upload or input information into the Platform, including document URLs, progress photo URLs, text content (notes, descriptions, comments), AI chat messages, and files attached to contracts, change orders, and other project records	To provide the Platform’s functionality, including project scheduling, financial tracking, resource management, and document control
AI prompts and responses	When you use the AI Chat module or other AI features	To provide AI functionality, monitor for abusive or harmful uses, and improve AI accuracy
Usage data (login times, features accessed, actions taken, session duration)	Logged automatically when you use the Platform	To monitor performance, diagnose issues, improve user experience, and understand feature usage
Device and technical information (IP address, browser type and version, device type, operating system)	Captured automatically when you access our Services	For security, fraud detection, troubleshooting, and optimization
Session and deployment data	Placed on your device through local storage and cookies used by our third-party authentication and hosting providers	To maintain user sessions, keep you logged in, provide secure access, and ensure that open browser sessions continue to load the appropriate version of the Platform across software releases
Support request information (messages, error descriptions, account details, screenshots)	When you contact our support team	To respond to inquiries, troubleshoot problems, and improve our Services
User preferences (dashboard preferences, data organization settings)	When you customize your account settings	To personalize your experience

Customer Data. You (or your organization) retain ownership of all data and information entered into the Platform, including project data, documents, and files (“Customer Data”). We process Customer Data on your behalf to deliver the Platform’s functionality. All Customer Data is scoped to your tenant organization and is only visible to members of that organization — it is not public-facing. We do not monitor or review Customer Data except when you share it with us for support purposes, when necessary to enforce our Terms of Service, to comply with legal obligations, or to ensure the security and integrity of the Platform.

Cookies and Tracking Technologies. We use cookies to provide and maintain the Platform. Specifically, our authentication and database hosting provider uses local storage and cookies to maintain user sessions. Our hosting provider also sets a first-party cookie that stores only a deployment identifier, so that a browser tab you leave open continues to load a matching version of the application across our releases. The deployment identifier does not contain information about the user and is not used to identify or track users. These cookies are strictly necessary for the Platform to function. We do not currently use cookies for marketing, advertising, or behavioral tracking purposes. We may implement analytics or usage tracking in the future to better understand how users interact with the Platform. If we do, we will update this Notice accordingly.

Your Communications. When communicating with us, you should provide only the information reasonably necessary for us to respond to your inquiry. We do not request or require that you submit sensitive personal information (such as Social Security numbers, driver’s license numbers, financial account numbers, payment card details, or health information) through our communication channels. Please do not transmit such information to us unless specifically requested through a secure method designated by us. If you nevertheless choose to provide sensitive personal information through these channels, you do so at your own risk, and you acknowledge that we are not responsible for any security incidents arising from information transmitted outside of our designated secure systems. We will process any such information in accordance with applicable law and this Notice.

How We Use Your Personal Data

In addition to the specific purposes described in the table above, we use the information we collect for the following business purposes:

• Security, fraud prevention, and Platform integrity: Monitor for suspicious activity, detect and prevent fraud, abuse, and security incidents, and enforce our Terms of Service and other policies.
• Business analytics and improvement: Analyze trends and usage patterns to improve our Services, develop new features, and enhance user experience.
• De-Identified, aggregated data and benchmarking: Create anonymized, aggregated data that cannot identify you or your organization for business purposes such as market research, industry benchmarking, and understanding land development cost trends.
• Legal compliance and protection: Comply with applicable laws and regulations, respond to legal requests and processes, and protect our rights, property, and safety and those of our users.
• Business operations: Maintain records for accounting, auditing, and other internal business purposes.

Sharing Information With Others

We share your information, including Personal Data, only in the following circumstances:

1. Service Providers and Third-Party Partners. We work with third-party service providers who help us deliver and improve the Services. These providers may have access to your Personal Data only to perform services on our behalf, are obligated to protect your information, and are not permitted to use your information for their own marketing purposes. Our service providers include:
   • Authentication and database hosting providers
   • Application hosting providers
   • Payment processors
   • Email marketing and delivery services
   • Weather data providers
   • AI service providers (to power AI chat and other AI features)
   • Project management and scheduling tools

   Payment information is collected and processed directly by Stripe. Stripe may collect your payment details, billing information, IP address, and transaction metadata to process payments, prevent fraud, and comply with legal obligations. TerraTech does not receive or store your full payment card number. Stripe’s processing of your payment information is governed by Stripe’s Privacy Policy.

2. Your Organization. If you access our Platform through a tenant organization (e.g., your employer), administrators of that organization may have access to your account information, usage data, and content you create within the Platform. All data within the Platform is scoped to your tenant organization and is only visible to members of the same tenant.
3. Legal and Compliance Requirements. We may disclose your information when required by law, legal process, or governmental request, or to:
   • Comply with applicable laws, regulations, subpoenas, or court orders
   • Enforce our Terms of Service and other agreements
   • Protect the rights, property, or safety of TerraTech, our users, or the public
   • Detect, prevent, or address fraud, security issues, or technical problems
4. Business Transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of TerraTech assets, your data may be transferred as part of that transaction. Any such transfer will remain subject to the protections described in this Notice.
5. Aggregated or Anonymized Data. We may share aggregated, anonymized data that cannot identify you or your organization with third parties for industry analysis, benchmarking, research, or other business purposes.
6. With Your Consent. We may share your information with third parties when you give us your explicit consent to do so.

AI Features and Related Data Processing

The Platform includes AI features, including an AI chat module and other AI-powered functionality. Here’s what you should know about how we handle data in connection with AI:

• What we send to AI providers: When you use AI features, your prompts and certain contextual information may be sent to third-party AI service providers to generate responses and provide functionality.
• What we log: We log AI prompts and outputs for the purposes of monitoring and preventing abusive or harmful uses, troubleshooting, and improving the accuracy and performance of AI features.
• Your responsibility: You are solely responsible for reviewing AI-generated content and ensuring compliance with applicable laws. AI features are not substitutes for professional advice.
• No profiling: We do not use AI to build psychological profiles of you or to make decisions that have legal or significant effects on you without human involvement.

Your Controls and Choices

We provide you with several options to manage your Personal Data:

1. Access and Update Your Personal Data. You can sign in to the Platform at any time to view and update your profile information, including your name, email address, contact details, company information, bio, and profile picture.
2. Marketing Communications Opt-Out. You can opt out of receiving marketing communications (such as newsletters and product updates) at any time by updating your preferences in your user profile within the Platform or by following the unsubscribe link in any marketing email we send you. Please note that even if you opt out of marketing communications, you will still receive service-related communications (such as account notifications, security alerts, and billing notices) that are necessary to provide the Services.
3. Do Not Track Signals. The Platform respects “Do Not Track” signals from your browser.
4. Request Personal Data Deletion. You may request deletion of your account and associated Personal Data by contacting us at privacy@terratech360.com. Please note that we may retain certain anonymized data (such as cost data and project metrics without identifying information) for analytical and benchmarking purposes, and we may retain certain information as required by law or for legitimate business purposes (such as fraud prevention and legal compliance).
5. Organization Administrators. If you access the Platform through a tenant organization, your organization’s administrator may have additional controls over your account, data (including Personal Data), and permissions.

U.S. State Privacy Rights

Depending on where you live and whether we meet applicable thresholds under state privacy laws, you may have additional rights regarding your Personal Data beyond those described in the “Your Controls and Choices” section above. To exercise any state privacy rights that may apply to you, please contact us at privacy@terratech360.com. When you submit a request, we may need to verify your identity to protect your Personal Data from unauthorized access. We will respond to your request within the timeframe required by applicable law. Please note:

• We may not be able to fulfill certain requests if an exception applies (for example, if we need to retain records for legal, security, or contractual purposes).
• If you are an employee or authorized user of a tenant organization, certain rights may need to be exercised through your organization.
• We will not discriminate against you for exercising your privacy rights.
• We do not sell, rent, or otherwise exchange your Personal Data for monetary or other benefits.
• We do not share Personal Data for cross-context behavioral advertising as defined under applicable state privacy laws.

International Users and Data Transfers

Our Services are currently designed for users in the United States. However, we do not restrict international users from accessing our Services.

If you are located outside the United States, please be aware that your information will be transferred to, processed, and stored in the United States. U.S. data protection laws may be different from those in your country. By using our Services, you consent to the transfer of your information to the United States. If you wish to submit a request related to your international privacy rights, please contact us at privacy@terratech360.com.

Data Security

We use commercially reasonable administrative, technical, and physical safeguards to protect your Personal Data. These measures include encryption of data in transit and at rest, access controls, authentication mechanisms, and regular security monitoring. Access to Personal Data is limited to employees and contractors who need it to perform their duties.

Despite these measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your Personal Data, we cannot guarantee its absolute security.

Data Retention

We retain your Personal Data for as long as necessary to fulfill the purposes described in this Notice, unless a longer retention period is required or permitted by law.

• Account data: We retain your account information for as long as your account is active. After account deletion, we may retain certain information as required by law or for legitimate business purposes (such as fraud prevention and legal compliance).
• Customer Data: We retain your project data and user-uploaded content for as long as your subscription is active and in accordance with our Terms of Service.
• Anonymized data: We may retain anonymized, aggregated data (such as cost data, lot details, and market averages) indefinitely for analytical and benchmarking purposes. This data cannot be used to identify you or your organization.
• Support communications and logs: We retain support requests, communications, and usage logs for a reasonable period to provide ongoing support, troubleshoot issues, and improve our Services.

When we no longer need your Personal Data, we will securely delete or anonymize it in accordance with our data retention policies and applicable law.

Changes to This Notice

We may update this Notice from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the “Last Updated” date at the top of this Notice.

If we make material changes to this Notice, we will notify you by email or through a notification on our Website and/or Platform. Your continued use of our Services after the updated Notice becomes effective constitutes your acceptance of the changes. We encourage you to review this Notice periodically to stay informed about how we protect your information.

Contact Us

If you have any questions, concerns, or complaints about this Notice or our data practices, or if you wish to exercise your privacy rights, please contact us at:

TerraTech 360, Inc.
Email: privacy@terratech360.com
Mailing Address: 15905 Brookway Drive, Suite 4205, Huntersville, NC 28078

We will respond to your inquiry within a reasonable timeframe and in accordance with applicable law.