Terracode

Privacy Policy

17 September 2026

1. Introduction

This Privacy Policy explains how we collect, use, store, disclose and protect personal data.

Terracode processes personal data in accordance with applicable privacy and data protection requirements, including the Personal Data Protection Act, No. 9 of 2022 of Sri Lanka, as amended and applicable.

2. Personal Data We May Collect

Depending on how you interact with Terracode, we may collect:

Identity Information

name;

username;

job title;

company or organisation name.

Contact Information

email address;

telephone number;

business address;

contact preferences.

Account Information

account credentials;

account identifiers;

subscription details;

account preferences.

Transaction Information

purchases;

invoices;

subscription history;

billing information;

transaction status;

payment references.

Payment card information may be collected directly by third-party payment processors. Terracode does not normally store full payment card numbers or card security codes.

Technical Information

We may automatically collect:

IP address;

browser type;

device information;

operating system;

login records;

application logs;

timestamps;

security events;

approximate location derived from IP information; and

diagnostic data.

Usage Information

We may collect information regarding how individuals use our websites and Services, including:

pages viewed;

features used;

actions performed;

interaction history;

session activity; and

product analytics.

Communications

We may retain communications sent through:

email;

support channels;

contact forms;

customer service;

project communication tools; and

other business communication channels.

Customer-Provided Data

Where customers use Terracode software to process information relating to their customers, employees, suppliers or other persons, Terracode may process such information on behalf of the customer.

In such circumstances, the customer may act as the primary controller of that information and Terracode may act as a processor or service provider, depending on the circumstances.

3. How We Collect Information

Information may be collected:

directly from you;

when you register an account;

when you purchase a Service;

through our websites or applications;

through cookies and similar technologies;

from your organisation;

from systems you choose to integrate with our Services;

from third-party service providers; and

through normal operation of our software infrastructure.

4. How We Use Personal Data

Terracode may process personal data to:

create and administer accounts;

deliver purchased Services;

process subscriptions and transactions;

provide customer support;

communicate service information;

maintain and improve software;

customise functionality;

maintain cybersecurity;

prevent fraud and abuse;

troubleshoot technical problems;

conduct analytics;

manage contracts and projects;

comply with legal and regulatory requirements;

maintain accounting and business records;

exercise or defend legal rights; and

send marketing communications where legally permitted.

We process personal data only where there is an appropriate lawful basis under applicable law.

5. Payment Information

Payments may be handled by external payment processors.

When payment information is entered directly into a payment processor’s system, that provider processes the information according to its own security and privacy requirements.

Terracode may receive limited payment-related information such as:

customer name;

payment status;

transaction identifier;

payment amount;

payment method type; and

limited card information such as the final digits of the card where supplied by the processor.

Terracode does not intentionally store full card numbers or card security codes unless expressly required and appropriately secured.

6. Sharing of Personal Data

Terracode does not sell personal data.

We may disclose personal data to:

cloud hosting providers;

payment processors;

email and communication providers;

analytics providers;

cybersecurity providers;

professional advisers;

contractors supporting delivery of our Services;

software integration providers;

AI service providers where an AI-enabled feature requires such processing; and

government authorities or regulators where required by law.

We seek to disclose only information reasonably necessary for the relevant purpose.

7. International Processing and Transfers

Terracode may use technology service providers located outside Sri Lanka.

Accordingly, personal data may in certain circumstances be processed or stored outside Sri Lanka.

Where applicable law requires safeguards for international transfers, Terracode will take reasonable and appropriate steps to implement the required safeguards.

8. Data Retention

Terracode retains personal data only for as long as reasonably necessary for the purpose for which it was collected, including to:

provide Services;

maintain accounts;

comply with financial and legal obligations;

maintain security records;

resolve disputes;

enforce agreements; and

establish, exercise or defend legal claims.

Retention periods may differ depending on the type of data and the applicable legal or operational requirements.

Data that is no longer required will be deleted, anonymised or securely disposed of where reasonably practicable.

9. Your Data Protection Rights

Subject to applicable law and any permitted exceptions, individuals may have rights including the right to:

request access to personal data;

request correction or completion of inaccurate personal data;

withdraw consent where processing is based on consent;

object to certain processing;

request erasure of personal data where applicable; and

request review of certain decisions made solely through automated processing.

These rights correspond with rights recognised under Sri Lanka’s PDPA.

Requests may be submitted to:

operations@terracodedev.com

We may request reasonable verification before processing a request.

10. Marketing Communications

Where legally permitted, Terracode may send information concerning:

products;

services;

updates;

offers;

events; and

relevant company information.

Recipients may unsubscribe from marketing communications using the unsubscribe mechanism provided or by contacting us.

Operational or security-related messages concerning an active account may still be sent even where marketing communications have been declined.

11. Cookies

Terracode websites may use cookies and similar technologies for:

essential website functionality;

security;

authentication;

preferences;

performance;

analytics; and

marketing where applicable.

Further information is provided in our Cookie Policy.

12. Security

Terracode uses reasonable technical and organisational measures designed to protect personal data against:

unauthorised access;

accidental disclosure;

alteration;

loss;

destruction; and

misuse.

These measures may include access controls, authentication, encryption, backups, logging and security monitoring where appropriate.

No electronic system can guarantee absolute security.

13. Data Breaches

Terracode maintains procedures for investigating suspected personal data breaches.

Where notification is required under applicable law, Terracode will take appropriate steps to notify the relevant parties and authorities.

14. Children’s Privacy

Terracode Services are primarily intended for businesses and persons legally capable of entering into contractual relationships.

We do not knowingly collect personal data directly from children where such processing would be unlawful.

If you believe a child has provided personal data to us improperly, please contact:

operations@terracodedev.com

15. Third-Party Websites and Services

Our Services may contain links or integrations with third-party websites or services.

Terracode does not control the privacy practices of independent third parties. Users should review the privacy policies of those providers.

16. Changes to This Privacy Policy

Terracode may update this Privacy Policy to reflect changes to:

applicable law;

Services;

technology;

data practices; or

regulatory requirements.

The latest version will display its effective date.

17. Contact Us

Questions, complaints or data protection requests may be directed to:

Registered Address: 274, Highlevel Road, Maharagama, Sri Lanka

Phone: +94112838640

Privacy Email: operations@terracodedev.com