Privacy Policy
TERACLOUD, INC. ("we," "us," or "our") operates the website teracloud.ai (the "Site") and provides Managed IT Services, AI Solutions, IT Security, and Compliance as a Service (GRC). This Privacy Policy describes how we collect, use, and disclose your personal information when you visit our Site or engage with our services, including data collected via AI-driven analytics and personal data we process on behalf of business customers as part of our Compliance as a Service (GRC) offerings.
By using our Site or services, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
We collect several types of information to provide and improve our services to you. The specific information we collect depends on whether you (a) visit our Site, (b) contact us for sales/support, or (c) receive our Managed IT, AI Solutions, Cloud, Security, or Compliance services (typically as a business customer).
A. Identifiers and Contact Information
When you use our Site (for example, contact forms, quote requests, chat, scheduling tools, or newsletter sign-ups) or otherwise communicate with us, we may collect:
- First and Last Name
- Business Email Address
- Phone Number
- Company Name
- Job Title
- Message content and any information you choose to provide
B. Internet/Network Activity and Technical Information
When you visit our Site, we may collect:
- Internet Protocol (IP) address
- Browser type and version
- Pages of our Site that you visit
- Time and date of your visit
- Time spent on those pages
- Device identifiers and other diagnostic data
- Approximate location derived from IP address
C. Customer Service Data (Managed IT / Helpdesk / End-User Support)
When we provide Managed IT Services, Helpdesk Support, end-user support, or device management, we may process information on behalf of our business customers, which may include:
- User identifiers (name, username, business contact details)
- Device and system data (device identifiers, operating system details, configuration data, inventory information)
- Support tickets and communications (issue descriptions, troubleshooting steps, call recordings where enabled, chat transcripts)
- Authentication and access logs (sign-in activity, audit logs)
- Security and monitoring data (alerts, event logs, endpoint telemetry)
- Files or content accessed strictly as needed to provide support (for example, to resolve a ticket), subject to customer authorization and our access controls
D. Cloud Services Data (Microsoft 365 / Azure / Cloud Migration)
When we deliver cloud solutions (e.g., Microsoft 365, Azure, Azure Virtual Desktop, SharePoint, Dynamics 365, migrations), we may process:
- Tenant/account identifiers and administrator contact information
- Configuration data, resource metadata, and audit logs
- Migration-related data (file structures, permissions, file metadata, and content as necessary to perform the migration or requested services)
- Service usage and performance telemetry
E. AI Solutions Data
When we provide AI-driven analytics, predictive modeling, or process automation, we may process:
- Business data provided by customers for analysis (which may include personal data depending on the use case)
- Model inputs/outputs and performance metrics
- Workflow automation data (e.g., triggers, logs, and task results)
- Site and service usage data used to measure, evaluate, and improve analytics performance and outcomes (e.g., aggregated trends, telemetry, and reporting)
We do not use customer data submitted for AI services to train public, general-purpose models unless expressly agreed in writing by the customer.
F. Compliance and Security (GRC / SOC) Data
When we provide compliance services or security operations (SOC), we may process:
- Security event and audit logs
- Vulnerability and configuration assessment results
- Compliance documentation and evidence provided by customers
- Client environment data necessary to perform governance, risk, and compliance (GRC) activities (e.g., policies, procedures, asset inventories, access reviews, risk registers, control testing results, and compliance attestations), which may include personal data depending on the customer’s environment and the engagement scope
- Incident investigation artifacts, where applicable
G. Sensitive Personal Information
We do not intentionally collect sensitive personal information through the Site. In the course of providing services, we may incidentally process sensitive personal information contained in customer environments. We process such information only as necessary to provide services, under customer instructions, and with appropriate safeguards.
2. How We Use Your Information
TERACLOUD, INC. uses personal information for the following purposes (subject to applicable law and any customer instructions where we act as a service provider/processor):
- Service Delivery (Managed IT / Cloud / Security / Compliance): To provide, operate, and maintain our services; administer accounts; manage devices and environments; perform migrations; and deliver requested features and functionality.
- AI Solutions Delivery: To provide analytics, predictive modeling, and automation; to configure, test, monitor, and improve the performance of customer-specific solutions; and to generate outputs requested by customers.
- Support and Client Communications: To respond to inquiries, provide technical assistance, send service-related notices, and communicate about implementations, incidents, maintenance windows, and changes.
- Sales, Marketing, and Relationship Management: To send newsletters, event invitations, promotions, and other communications that may be of interest to you. You can opt out of marketing emails at any time by using the unsubscribe link (where provided) or contacting us.
- Security, Fraud Prevention, and Integrity: To monitor for, detect, investigate, and prevent security incidents, abuse, and unauthorized access; and to protect our systems, customers, and users.
- Compliance and Legal Obligations: To comply with applicable laws and regulations (including privacy, security, and tax requirements) and to enforce our agreements.
- Analytics and Improvement: To analyze usage trends, improve our Site, services, and customer experience, and develop new services.
3. Legal Basis for Processing (GDPR/Global Standards)
If you are located in the European Economic Area (EEA) or other regulated jurisdictions, our legal basis for collecting and using the personal information described above depends on the personal information concerned and the specific context in which we collect it:
- Consent: You have given us permission to do so (e.g., signing up for a demo).
- Contract: The processing is necessary for a contract we have with you.
- Legal Obligation: We need to comply with the law.
- Legitimate Interests: Such as protecting our IT environment and reducing the attack surface via our Security Operations Center (SOC).
4. Disclosure of Data
TERACLOUD, INC. does not sell your personal information for money. We may disclose personal information in the following circumstances:
- Service Providers / Vendors / Subprocessors: We use third parties to help us operate our business and deliver services (for example, hosting and cloud providers, communications tools, analytics, security tools, and professional advisors). Examples may include Microsoft Azure, Microsoft 365, 3CX, and Zoom. These providers are authorized to process personal information only as necessary to perform services for us (or for our customers where applicable) and are required to protect it.
- Business Transactions: If TERACLOUD, INC. is involved in a merger, acquisition, financing, due diligence, reorganization, bankruptcy, receivership, dissolution, or sale/transfer of assets, personal information may be transferred as part of that transaction, subject to appropriate safeguards.
- Legal Requirements and Protection of Rights: We may disclose personal information if we believe in good faith that disclosure is necessary to comply with law, regulation, or legal process; to respond to lawful requests by public authorities; to enforce our agreements; or to protect the rights, property, and safety of TERACLOUD, INC., our customers, or others.
- With Your Direction or Consent: We may share information with third parties when you direct us to do so or otherwise consent.
- Service Provider/Processor Context: When we provide Managed IT, Cloud, Security, Compliance, or AI services to business customers, we may process personal information on their behalf. In those situations, the customer typically determines the purposes and means of processing (controller/business), and TERACLOUD, INC. acts as a processor/service provider, handling data according to the customer’s instructions and our agreements.
5. Data Security
The security of your data is critical to us. We implement industry-standard security measures, including encryption and proactive monitoring through our SOC. However, remember that no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
6. Your Data Protection Rights
Depending on your location and applicable law, you may have the following rights regarding your personal information. If we process personal data on behalf of a business customer (e.g., as part of Managed IT, Cloud, Security, Compliance as a Service (GRC), or AI services), the customer controls the data and your request may need to be submitted to (or coordinated with) that customer.
A. GDPR / EEA (and similar laws)
If you are located in the EEA, UK, or Switzerland (or another jurisdiction with similar rights), you may have the right to:
- Access your personal data
- Rectification of inaccurate or incomplete data
- Erasure (delete) in certain circumstances
- Restriction of processing in certain circumstances
- Data portability
- Object to processing (including to direct marketing, and in certain cases processing based on legitimate interests)
- Withdraw consent at any time where we rely on consent
- Lodge a complaint with a data protection authority
B. Additional Notes
Some rights may be limited or subject to exceptions under applicable law. We may need to verify your identity before responding to a request. If we process personal data on behalf of a business customer (e.g., as part of Managed IT, Cloud, Security, Compliance, or AI services), we may need to direct your request to that customer or coordinate with them, as they control the data.
7. California Privacy Rights (CCPA/CPRA)
This section applies to California residents to the extent the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), applies to our processing.
A. Categories of Personal Information We Collect
In the last 12 months, we may have collected the following categories of personal information (depending on your interactions with us):
- Identifiers: name, business contact information, IP address, online identifiers
- Professional or employment-related information: company, job title
- Internet or other electronic network activity: browsing activity on our Site, device and network information
- Geolocation data (approximate): derived from IP address
- Customer service and support information: communications and support ticket details
- Inferences: limited inferences to improve services and communications (where applicable)
We do not knowingly collect information that is considered “sensitive personal information” for purposes of inferring characteristics about you, and we do not use it for purposes that would require a “Limit the Use of My Sensitive Personal Information” link under CPRA.
B. Purposes for Collection/Use
We collect and use personal information for the purposes described in Section 2 above, including providing services, customer support, security, compliance, marketing (where permitted), and improving our Site and services.
C. Sources of Personal Information
We may collect personal information from:
- You (directly)
- Your device/browser when you use our Site
- Our service providers and business partners (as applicable)
- Business customers when we provide services on their behalf
D. Disclosures of Personal Information
We may disclose personal information to service providers/vendors for business purposes as described in Section 4.
E. Selling / Sharing (CCPA/CPRA)
We do not “sell” personal information as that term is defined under the CCPA/CPRA. We also do not “share” personal information for purposes of cross-context behavioral advertising.
F. Your California Rights
Subject to applicable law, California residents may have the right to:
- Know/Access the categories and specific pieces of personal information collected, used, disclosed, and the purposes
- Delete personal information (with certain exceptions)
- Correct inaccurate personal information
- Opt out of sale/share (if applicable)
- Limit the use and disclosure of sensitive personal information (if applicable)
- Non-discrimination for exercising CCPA/CPRA rights
G. How to Exercise Your Rights
To submit a request, contact us at info@teracloud.ai. We will verify your request as required by law. You may designate an authorized agent to make a request on your behalf, subject to verification.
H. Do Not Track
Our Site may not respond to “Do Not Track” signals. California residents can contact us with questions about our privacy practices.
8. Texas Privacy Rights (TDPSA)
This section applies to Texas residents to the extent the Texas Data Privacy and Security Act (TDPSA) applies to our processing.
A. Categories of Personal Data and Purposes
We collect and process the categories of personal data described in Sections 1 and 2 for purposes including: providing and securing our Site and services; communicating with you; delivering Managed IT, Cloud, Security, Compliance as a Service (GRC), and AI solutions; performing AI-driven analytics and reporting; and complying with law.
B. Consumer Rights (Texas)
Subject to applicable law and verification requirements, Texas residents may have the right to:
- Confirm whether we process your personal data and access it
- Correct inaccuracies in your personal data
- Delete personal data provided by or obtained about you
- Obtain a copy of your personal data in a portable and readily usable format (data portability)
- Opt out of certain processing, including targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects
C. How to Exercise Texas Rights / Appeals
To submit a request, contact us at info@teracloud.ai. If we decline to take action on your request, you may appeal our decision by replying to our response or emailing info@teracloud.ai with the subject line “TDPSA Appeal.”
9. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to track activity on our Site and hold certain information. Cookies are files with a small amount of data which may include an anonymous unique identifier. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.
10. Third-Party Links
Our Site may contain links to other sites that are not operated by us (e.g., Microsoft, 3CX). If you click on a third-party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
11. Children's Privacy
Our services are not directed to anyone under the age of 18. We do not knowingly collect personally identifiable information from children. If we become aware that we have collected personal data from a child without verification of parental consent, we take steps to remove that information from our servers.
12. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the “Effective Date” at the top of this policy. You are advised to review this Privacy Policy periodically for any changes.
13. Contact Us
If you have any questions about this Privacy Policy, please contact us: