Privacy Policy

Who we are

TerranPage is a multi-tenant team paging service provided by Space Terran LLC (“SpaceTerran”, “we”, “us”). This Privacy Policy explains what personal data the service processes, why, and how you can exercise choices about your data.

Access may be invite-only or otherwise limited. A read-only public demo may be available for exploration without creating an account.

Data we collect

Account information: email address, optional display name, and related account identifiers needed to provide the service.

Contact methods: phone numbers and email addresses you add so your organization can reach you for paging, including verification and consent status associated with those destinations.

Service data: organizations, teams, memberships and roles, on-call schedules and overrides, escalation settings, alerts and delivery status, API key metadata (secrets are stored in irreversible form; secrets are not shown in lists), allowlists for inbound email ingest, and related records needed to run TerranPage.

Usage and billing records: records of accepted sends and organization-level usage summaries used for metering and statements. When you add a card or subscribe, payment card details are collected by our payment processor; we store payment-method references and billing records, not full card numbers.

Service operation signals: limited technical metadata needed to operate and protect the service (for example request metadata and security-relevant event logs). Logs are designed to omit message destinations, emails, phone numbers, and secrets.

Aggregate product analytics: first-party, cookieless page-view and CTA counts for marketing and product surfaces. These counters do not store cookies, device identifiers, or raw contact destinations.

How we use data

We use this information to provide and improve TerranPage: deliver pages you authorize, isolate each organization’s data, enforce fair-use and abuse controls, produce usage statements, detect and respond to misuse, and run the service reliably.

We use aggregate first-party analytics counts to understand which public pages and calls-to-action are used, without building advertising profiles.

We do not sell personal data. We do not use contact destinations for advertising.

Sharing and service providers

We rely on carefully selected third-party providers to host, deliver, and run the service. Those providers process data only as needed to perform services on our behalf.

We may disclose information if required by law, or when reasonably necessary to protect TerranPage, our users, or others from abuse, fraud, or security incidents.

A detailed inventory of providers is maintained internally and is available to customers under appropriate confidentiality arrangements upon request — contact us about privacy.

Retention and deletion

You can delete your own account from Profile in the web app or Settings in the iOS app. Deletion ends memberships and sessions. When you request account erasure, we immediately remove your personal data from live paging, authentication, and query paths (a functional tombstone) and schedule hard deletion, subject to sole-organization-admin rules so a tenant is not left without an administrator.

Organization administrators may request closure of an organization. When an organization is closed, organization-scoped personal and service data are likewise tombstoned immediately and scheduled for hard deletion.

Hard deletion of personal and operational rows occurs by a scheduled sweep at or before thirty (30) days after the erasure or closure request — our universal ceiling aligned to the GDPR one-month erasure deadline. After hard deletion we may retain a minimal non-personal deletion-audit stub (for example organization or subject identifiers, actor identifiers, timestamps, counts, and request identifiers) needed for security attribution. Billing and financial records needed for legal retention are exempt from that sweep and follow their own schedule. The closed organization identifier may be retained so it cannot be silently reused.

Transient processing artifacts (for example inbound message copies held briefly) are retained only as long as needed and then deleted. Application API, edge access, and SMS-event logs are designed not to retain destinations, emails, phones, or secrets. Hot CloudWatch retention for those streams is approximately ninety (90) days; a cold archive of the same streams is retained for one (1) year in encrypted object storage under governance object-lock retention.

Your choices

While signed in, you can view and update your profile and contact methods. You can delete your own account as described above, subject to organization-admin transfer rules.

There is no self-service data-subject export endpoint today. Formal access or correction requests: contact us about privacy — we will handle them manually. Platform super-admins may generate a redacted forensic export for security investigations; that pack is not a GDPR subject-access download.

European Economic Area, United Kingdom, and Switzerland (GDPR)

Roles. For personal data that a customer organization or its users submit so TerranPage can page teammates, route alerts, and administer that organization, the customer is the controller (or equivalent) and SpaceTerran is the processor; those processor terms are in the Data Processing Agreement available on request — contact us about legal requests. SpaceTerran is an independent controller for account administration, billing contacts we maintain with the customer, security telemetry we collect to protect the multi-tenant service, and aggregate first-party analytics described above.

Lawful bases. Where SpaceTerran acts as controller, we rely on: performance of a contract (providing TerranPage and related account services); legitimate interests (securing the service, preventing abuse, and understanding aggregate product usage in ways that do not override your interests); and consent where we ask for it (for example joining a marketing waitlist or newsletter).

International transfers. TerranPage may be hosted and operated using infrastructure and personnel in the United States and other jurisdictions where we or our providers maintain facilities. Where a transfer from the EEA, United Kingdom, or Switzerland requires an additional safeguard, we use an appropriate mechanism recognized under applicable law (such as standard contractual clauses) or another lawful basis, and will provide reasonable cooperation to document that safeguard on request.

Data-subject requests. Subject to applicable law, you may request access to, rectification of, erasure of, restriction of, or objection to certain processing of personal data we hold as controller, and you may request portability where the law provides it. There is no self-service data-subject export endpoint today; contact us about privacy and we will handle requests manually. Where we process as a customer’s processor, we will route or assist with requests as described in the DPA.

EU / UK representative. We have not designated a separate European Union or United Kingdom Article 27 representative. Privacy requests for EEA, UK, or Swiss individuals may be submitted by contacting us about privacy.

California and similar U.S. state privacy laws (CCPA / CPRA)

If you are a California resident (or a resident of another U.S. state with a comparable privacy law), this section summarizes disclosures required by the CCPA/CPRA and similar statutes.

Categories collected. In the last twelve months we have collected the categories described under Data we collect: identifiers (such as email and account ids); commercial and usage information (accepted sends and organization usage summaries); internet or other electronic activity (limited request and security metadata, plus aggregate cookieless analytics counts); and professional or employment-related information you provide for paging (such as work contact methods and on-call roles). We collect these categories from you, your organization administrators, and from the service as you use it.

Sale and sharing. We do not sell personal information. We do not share personal information for cross-context behavioral advertising. We do not use contact destinations for advertising. Because we do not sell or share personal information as those terms are defined under the CCPA/CPRA, we do not offer a separate “Do Not Sell or Share My Personal Information” opt-out link; if our practices change, we will update this Policy and provide any required opt-out mechanism.

Your California rights. Subject to verification and exceptions in the law, you may request to know/access, delete, and correct personal information, and to receive information about our collection and disclosure practices. You may also have the right to limit use of sensitive personal information where we collect it for purposes that require that limit — TerranPage uses contact methods to deliver pages you authorize, not for advertising. We will not discriminate against you for exercising these rights.

How to exercise. Contact us about privacy with enough detail for us to verify your identity and locate your records. Authorized agents may submit requests the same way; we may require proof of authorization. We respond within the timeframes the applicable law requires.

Security measures (summary)

We apply administrative, technical, and organizational measures appropriate to the nature of the service, including encryption in transit and at rest, organization-level isolation, least-privilege access for our personnel, and monitoring for abuse. Broader posture statements live on the Security & Trust page. This summary is not a certification or warranty.

Children

TerranPage is a workplace tool. It is not directed at children under 16, and we do not knowingly collect their personal data.

Changes

We may update this policy as the product or our practices change. The effective date above reflects the latest substantive revision.

Contact

Privacy questions: contact us about privacy. To erase your account, use Profile → Delete account (web) or the matching control in iOS Settings. To close an organization, contact product support.