Effective Date: September 22, 2025 Last Updated: September 22, 2025

1. Introduction

Terraback ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Terraback CLI tool and related services (collectively, the "Service").

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name (optional), and company name (optional) when you register for the beta program or purchase a license
• Payment Information: Processed through third-party payment processors (we do not store credit card details)
• Support Communications: Information you provide when contacting support or participating in our Slack community

2.2 Information Collected Automatically

• Usage Data: Commands executed, scan frequencies, resource types scanned, and error logs (anonymized)
• Device Information: Operating system, CLI version, machine fingerprint (hashed), and IP address
• Performance Metrics: Scan duration, resource counts, and feature usage patterns

2.3 Cloud Infrastructure Data

• Important: Terraback scans your cloud infrastructure locally. We do NOT collect or store:
  • Your cloud credentials
  • Resource configurations
  • Infrastructure details
  • Generated Terraform files
  • Any sensitive cloud data

All scanning and processing happens on your local machine. Only anonymized usage metrics are transmitted.

3. How We Use Your Information

We use collected information to:

• Provide and Maintain the Service: Activate licenses, verify beta access, and ensure service availability
• Improve Our Service: Analyze usage patterns to enhance features and fix bugs
• Customer Support: Respond to inquiries and provide technical assistance
• Communications: Send important updates, security alerts, and product announcements
• Compliance: Fulfill legal obligations and enforce our Terms of Service

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information in the following situations:

• Service Providers: With trusted third parties who assist in operating our service (e.g., AWS for infrastructure, Slack for community)
• Legal Requirements: When required by law or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Aggregated Data: We may share anonymized, aggregated data that cannot identify you

5. Data Security

We implement appropriate technical and organizational measures to protect your information:

• Encryption: All data transmission uses TLS/SSL encryption
• Access Controls: Limited access to personal data on a need-to-know basis
• Infrastructure Security: Hosted on AWS with industry-standard security practices
• Regular Audits: Periodic security reviews and updates

6. Data Retention

• Account Data: Retained while your account is active and for 90 days after closure
• Usage Metrics: Anonymized and aggregated after 12 months
• Support Communications: Retained for 2 years
• Beta Program Data: Deleted 30 days after beta period ends (except for converted customers)

7. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information
• Opt-out: Unsubscribe from marketing communications
• Data Portability: Receive your data in a machine-readable format

To exercise these rights, contact us at privacy@terraback.io

8. International Data Transfers

Our services are hosted in the United States (US-East-1 region). By using Terraback, you consent to the transfer and processing of your information in the United States.

9. Children's Privacy

Terraback is not intended for use by individuals under 18 years of age. We do not knowingly collect information from children.

10. Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

11. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Updating the "Last Updated" date
• Sending an email to registered users
• Posting a notice in our Slack community

13. Contact Information

For questions about this Privacy Policy or our privacy practices, contact us at:

Email: privacy@terraback.io Website: terraback.io Slack Community: terrabackio.slack.com

14. Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at dpo@terraback.io