Solutions
Products
Your privacy is important to you and to us. We are committed to protecting the information you share with us in accordance with applicable law and the terms of this Privacy Policy.
This Privacy Policy relates to the personal information that Terra Dotta, LLC (“Terra Dotta,” “we,” “us,” or “our”) receives and collects through your access and use of (i) any websites we own, control, or otherwise operate, including without limitation, www.terradotta.com (collectively “Sites”), and (ii) hosted software services, applications, resources, content, and material provided by Terra Dotta (the “Services”). This Privacy Policy also describes how we use, disclose, and protect such information, and the choices you have regarding our use of such information.
In addition, please review our Terms of Use, available at www.terradotta.com/terms-of-use, which governs your use of the Sites and Services. By using the Sites and Services, or by clicking to accept or agree to our Privacy Policy when this option is made available to you, you acknowledge that you have read and understood this Privacy Policy and the Terms of Use. Where required by applicable law, we will obtain your separate, informed consent for our collection, use, and disclosure of your information and data, and other activities, as described below. If you do not agree to the terms of this Privacy Policy, please do not use the Sites or Services.
This Privacy Policy does not impact or change any of the privacy policies, terms, and/or agreements between you and any educational institution and other organizations that purchased the Services (“Customers”). Terra Dotta remains responsible for ensuring that its processing of personal information complies with applicable data protection laws when acting as a data controller. When acting as a data processor or service provider on behalf of Customers, Terra Dotta will process personal information in accordance with Customer instructions and applicable data processing agreements. However, Terra Dotta retains independent obligations under applicable law to implement appropriate technical and organizational security measures, respond to certain individual rights requests, and ensure lawful processing, even when acting in a processor capacity. Customers retain primary responsibility for compliance with data protection laws in their capacity as data controllers or businesses. We encourage you to review any applicable institutional privacy policies, terms, and agreements to see how your personal information may be used or disclosed by that institution.
We will inform you when we need information that personally identifies you (“personal information”) or allows us to contact you or provide you with the Services. Personal information may include, but is not limited to, your name, email address, phone number, postal address, and any other information that can be used to identify you individually. Generally, this information is requested when you register for the Services or when you fill out our contact form on our main Site, or sign up for our newsletter or a webinar.
Terra Dotta may receive certain information about you from Customers during the implementation and provision of Services. For example, Customers may provide basic student or staff information, manually or through integration with information management or human resource systems, when they are setting up the Services for their use. Customers represent and warrant that they have obtained all necessary consents, authorizations, and rights required under applicable law to provide such information to Terra Dotta for processing, and that such provision and processing complies with all applicable data protection laws. Terra Dotta is entitled to rely on Customers’ representations regarding the lawfulness of data collection and transfer, provided that Terra Dotta has no actual knowledge of any violation of applicable law.
You may be able to log into the Services using single sign-on providers or single sign-on features of other products. These products will authenticate your identity and may share certain personal information with us such as your name and email address. Terra Dotta is not responsible for the privacy practices of such third-party authentication providers, and your use of such services is subject to their respective privacy policies and terms of service.
We use various methods and technologies to store or collect usage information (“Tracking Technologies”), subject to your consent where required by applicable law. A few of the Tracking Technologies used with the Sites and Services, include, without limitation, cookies, web beacons, embedded scripts, browser fingerprinting, entity tags, UTM codes (i.e., a code that you can attach to a custom URL in order to track a source, medium, and campaign name), and recognition technologies that make assumptions about users and devices. You can manage your cookie preferences through your browser settings or our cookie management tool, where available. We use Tracking Technologies for a variety of purposes, including:
After you sign up for the Services (subject to your consent where required by applicable law), we may send you text messages as part of a two-factor authentication process. In addition, we and/or our Customers may send you text messages that provide marketing, promotional, and/or other information. We, our third-party service providers, and Customers use a variety of technologies that automatically (or passively) store or collect certain information whenever we and/or our Customers send you a text message. This information will be stored or accessed using a variety of technologies that will be downloaded to your mobile device whenever you receive a text message.
In connection with use of the Services we may use location-based services in order to verify your location and, with your consent where required by applicable law, deliver relevant content based on your location. We may share your location with third parties (as set out below) as part of the location-based services we offer and for other commercial purposes, subject to your consent where required by applicable law. You can change the settings on your device to prevent it from providing us with such information. This location data is collected in a form that personally identifies you and will be used by us, our Customers, our partners, and our licensees to provide and improve the Services or for other commercial purposes. You should consider the risks involved in disclosing your location information and adjust your mobile and browser settings accordingly.
Specific to our AlertTraveler mobile application, Terra Dotta will capture your GPS location to an approximate accuracy of within 5 meters. This information is only updated under two conditions: (i) you move more than 25 km, or (ii) you have not updated your location within 24 hours. The capture of your location information is controllable by the user within AlertTraveler. Location services may be affected by device settings, network connectivity, environmental conditions, and other factors beyond Terra Dotta’s control.
Do Not Track Disclosures. Do Not Track is a preference you can set on your browser to inform websites that you do not want to be tracked. You can either enable or disable Do Not Track by visiting the preferences or settings page of your browser. At this time, we do not respond to Do Not Track (“DNT”) signals. However, you have other options to control tracking, including adjusting your cookie preferences through adjusting your browser settings, or exercising your opt-out rights as described in this Privacy Policy.
We process your personal information for the following purposes:
Terra Dotta will share your personal information with Customers and other third parties only in the ways that are described in this Privacy Policy and as permitted or required by applicable law. Terra Dotta shares information under the following circumstances:
Information held in the Services may be accessed by and shared with Customers in order for Customers to manage their offerings and programs. Our Customers may use your information to deliver product information, including from third parties, to you through the Services in accordance with their own privacy policies and your consent preferences.
We will use your information to provide the Services, and we may provide information to companies that assist us in providing Services, such as a hosting provider or a customer service provider. These companies are authorized to use your information only as necessary to provide these Services and to assist with supporting our users.
We may share your information in response to subpoenas, court orders, and other legal processes or governmental requests, or to establish or exercise our legal rights or defend against legal claims.
Terra Dotta may share information in order to investigate, prevent, or take action regarding illegal activities, suspected fraud, protecting and defending the rights or property of Terra Dotta, the Services and its users, violations of Terra Dotta Terms of Use, or as otherwise required by law.
In the event that Terra Dotta is acquired by or merged with another company, Terra Dotta may share information regarding our users with that company. Terra Dotta will notify you before information about you is transferred.
Upon request, Terra Dotta will grant you reasonable access to personal information that it holds about you and was collected on our main Site, www.terradotta.com, subject to verification of your identity and applicable legal limitations. Terra Dotta will take reasonable steps to permit individuals to correct, amend, or delete information about them that is shown to be inaccurate or incomplete, provided that such changes do not violate any legal or contractual obligations. For access to information collected on one of our Customer-hosted sites, you should request access via the Institution directly, and we will support them in providing you reasonable access to this information. Terra Dotta reserves the right to deny or charge a reasonable fee for access requests that are unreasonably repetitive, require disproportionate technical effort, risk the privacy of others, or would be extremely impractical, to the extent permitted by applicable law. We will respond to all access requests within the timeframes required by applicable law.
In addition, Terra Dotta allows users to modify the level of communications that you receive related to the Services. You may contact our Support Team through our support portal to obtain current information about how to modify the types of information that you receive from Terra Dotta. You may also use the unsubscribe mechanism provided in each marketing communication. Please note that even if you opt out of marketing communications, we may still send you transactional or administrative messages related to the Services.
Terra Dotta will not disclose any personally identifiable information to a third party who is not a Terra Dotta contractor or agent (“Agent”) except as outlined in Section 3 of this Privacy Policy or as otherwise required by law or legal process. For third parties acting as Terra Dotta’s Agent, Terra Dotta will ensure that the third party either (i) provides an adequate level of data protection as required by applicable law, or (ii) has entered into an agreement with Terra Dotta requiring data protection standards consistent with this Privacy Policy and applicable law.
In the context of an onward transfer, Terra Dotta has responsibility for the processing of personal information it receives and subsequently transfers to an Agent on its behalf. Terra Dotta shall remain liable for its Agent’s processing of such personal information if the Agent processes such information in a manner inconsistent with applicable data protection laws and this Privacy Policy, unless Terra Dotta proves that it is not responsible for the event giving rise to the damage.
Terra Dotta takes reasonable technical, administrative, and physical measures designed to protect the security of personal information from unauthorized access, use, disclosure, alteration, and destruction. However, no method of transmission over the Internet or electronic storage is 100% secure, and Terra Dotta cannot guarantee absolute security.
When you place orders or access your personal account information, you’re utilizing a secure connection via TLS, which encrypts your personal information before it’s sent over the Internet.
Terra Dotta provides information and training to all employees who have access to personally identifiable data maintained by Terra Dotta, and Terra Dotta employees are responsible for the internal security of such information.
Terra Dotta takes all reasonable measures to ensure that such information is reliable for its intended use, and is accurate, complete, and current.
Inside the company, data is stored in password-controlled servers with limited access.
You also have a significant role in protecting your information. No one can see or edit your personal information without knowing your user name and password, so do not share these with others.
Transfer of Your Information. The Services are operated in the United States, and if you are located outside of the United States, please be aware that information we collect, including personal information, will be transferred to, and processed, stored, and used in the United States in order to provide the Services to you. The legal bases for our processing and sharing of your personal information include: (i) performance of a contract with you or our Customers; (ii) compliance with legal obligations; (iii) your consent, where obtained; (iv) our legitimate interests in operating and improving our business, where such interests are not overridden by your data protection rights; and (v) to protect the vital interests of you or another person. When we rely on legitimate interests, you have the right to object to such processing.
Where GDPR applies and our processors of your personal information are located outside the European Economic Area, we enter into written data processing agreements with such third-party service providers requiring them to maintain appropriate technical and organizational security measures and to process personal information only in accordance with our documented instructions and applicable data protection laws. These agreements include provisions regarding data security, confidentiality, sub-processing, data subject rights, and data breach notification. Where such providers are located outside the EEA, UK, or Switzerland, we implement appropriate safeguards for international data transfers, including Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other legally recognized transfer mechanisms as required by applicable law.
Additional Rights Provided to EU Individuals.
Access and Portability: You have the right to ask us to access the information we hold about you, including personal information, and be provided with certain information about how we use your information and who we share it with. Where you have provided your personal information to us with your consent, you have the right to ask us for a copy of this data in a structured, machine readable format, and to ask us to share (port) this data to another data controller.
Right to deletion: In certain circumstances, you have the right to ask us to delete personal information we hold about you:
where you believe that it is no longer necessary for us to hold your data, including personal information;
where we are processing your personal information on the basis of legitimate interests and you object to such processing and we cannot demonstrate an overriding legitimate ground for the processing;
where you have provided your personal information to us with your consent and you wish to withdraw your consent and there is no other ground under which we can process your personal information; or
where you believe the personal information we hold about you is being unlawfully processed by us.
Restriction: In certain circumstances, you have the right to ask us to restrict (stop any active) processing of your personal information:
where you believe the personal information we hold about you is inaccurate and while we verify accuracy;
where we want to erase your personal information as the processing is unlawful, but you want us to continue to store it;
where we no longer need your personal information for the purposes of our processing, but you require us to retain the data for the establishment, exercise, or defense of legal claims; or
where you have objected to us processing your personal information based on our legitimate interests and we are considering your objection.
In addition, you can object to our processing of your personal information based on our legitimate interests, and we will no longer process your personal information unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Automated Decision-Making and Profiling
We may use automated decision-making, including profiling, for the following purposes. Where such automated decision-making produces legal effects concerning you or similarly significantly affects you, we will implement appropriate safeguards, including the right to obtain human intervention, express your point of view, and contest the decision:
Risk assessment for international programs
Fraud detection and security monitoring
Personalization of Services and content
Academic recommendations and matching
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, pursuant to GDPR Article 22. You may object to such processing and request human intervention, an explanation of the decision, and the opportunity to challenge the decision by emailing us at privacy@terradotta.com.
To exercise any of these rights above, please contact us at privacy@terradotta.com.
Please note that these rights are limited, for example, where fulfilling your request would adversely affect other individuals, where there are overriding public interest reasons, or where we are required by law to retain your personal information.
You can withdraw your consent at any time by contacting us at privacy@terradotta.com.
Complaints. In the event that you wish to make a complaint about how we process your personal information, please contact us in the first instance at privacy@terradotta.com and we will endeavor to deal with your request as soon as possible. This is without prejudice to your right to raise a complaint with a relevant supervisory authority.
Where Terra Dotta maintains education records as defined under FERPA, we act as either a school official with legitimate educational interest or as a service provider under contract with educational institutions. Under FERPA, students and parents have rights to:
Inspect and Review: Access education records within 45 days of request to the educational institution
Amend Records: Request correction of inaccurate or misleading information
Directory Information Control: Opt out of directory information disclosures
Disclosure Log: Request information about who has accessed education records
File Complaints: Submit complaints to the Family Policy Compliance Office
Terra Dotta does not process Protected Health Information (PHI) as defined under HIPAA. Any health records we may encounter from educational institutions are education records covered under FERPA and are processed in accordance with FERPA requirements and our agreements with educational institutions.
Terra Dotta does not knowingly collect or maintain information acquired through the Sites or Services from persons under 13 years of age (or under 16 years of age for residents of the European Union and European Economic Area), and no part of the Sites or Services is directed to persons under such applicable age threshold. Any user under the applicable age threshold should not use or access our site at any time or in any manner. If Terra Dotta learns that personally identifiable information of persons under the applicable age threshold has been collected from our site without verified parental consent (where required by applicable law), then Terra Dotta will take the appropriate steps to delete this information in accordance with applicable legal requirements.
Depending upon where you reside, you may have certain rights with regard to your personal information under applicable state privacy laws (including but not limited to the California Consumer Privacy Act, Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, and Utah Consumer Privacy Act), including:
Important: The exact scope of these rights varies by state and jurisdiction. There are also several exceptions where we may not have an obligation to fulfill your request, including but not limited to: (i) where the request is manifestly unfounded or excessive; (ii) where fulfilling the request would adversely affect the rights and freedoms of others; (iii) where we need to retain the information for legal compliance; (iv) where the information is necessary for the establishment, exercise, or defense of legal claims; or (v) where other legal exceptions apply under applicable law.
To exercise any of these rights, please submit your request by emailing privacy@terradotta.com. To appeal a decision regarding a consumer rights request, please email your appeal to privacy@terradotta.com with “Privacy Rights Appeal” in the subject line within 30 days of receiving our decision.
Nevada Residents: Nevada law provides its residents with a limited right to opt out of certain personal data sales. Nevada residents who wish to exercise their sale opt-out rights may submit a request to this designated address: privacy@terradotta.com. However, please note that we do not currently sell personal information as defined under Nevada law in a manner that triggers the statute’s opt-out requirements.
California Residents: California residents have additional rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), including: (i) the right to know what personal information is collected, used, disclosed, and sold; (ii) the right to delete personal information; (iii) the right to correct inaccurate personal information; (iv) the right to opt-out of the sale or sharing of personal information; (v) the right to limit the use and disclosure of sensitive personal information; and (vi) the right to non-discrimination for exercising their privacy rights.
You may exercise the rights specified above by submitting a verifiable consumer request to privacy@terradotta.com. We may require additional information to verify your identity before processing your request, as permitted by applicable law.
You may also designate an authorized agent to exercise your rights on your behalf. You may designate an agent via any of the ways used to submit requests on your behalf. We will require the agent to provide proof of authorization, which may include a signed permission document or power of attorney, and we may also require verification of your identity, to confirm that the agent has the authority to submit requests on your behalf, as permitted by applicable law.
Please note that we may not be able to process your request if you and/or your designated agent do not provide us with sufficient information to verify your identity and the validity of your request. We will notify you if we cannot process your request and explain the reasons why, in accordance with applicable law.
We will respond to consumer requests within the timeframes required by applicable law, typically within 30 to 45 days of receipt, depending upon where you reside. However, some requests may take longer. We will notify you in writing if we need more time to respond. We may deny your request(s) where permitted or required by applicable law, including where fulfilling the request would adversely affect the rights and freedoms of others, where the request is manifestly unfounded or excessive, or where other legal exceptions apply. If we do deny your request, we will provide you with the reasons for such denial.
Where provided by applicable law, you have the right to appeal a refusal to take action on a rights request. You may file an appeal to us at the contact information provided above within the timeframe specified by applicable law. We will respond to appeal requests within the timeframes required by applicable law, typically within 45 to 60 days of receipt. However, some requests may take longer where permitted by law. We will notify you in writing if we need more time to respond, in accordance with applicable legal requirements. In our response to your appeal, we will inform you of any actions taken or not taken and the reason(s) as to why. We do not charge a fee to process or respond to consumer requests unless permitted by applicable law. We may charge a reasonable fee where permitted by applicable law, such as for manifestly unfounded or excessive requests, particularly repetitive requests, in accordance with applicable legal requirements.
Any questions or concerns regarding the use or disclosure of personal information should be directed to Terra Dotta pursuant to the contact information below. Terra Dotta will investigate and attempt to resolve complaints and disputes regarding use and disclosure of personal information in accordance with the principles contained in this Privacy Policy. Terra Dotta commits to investigate and respond to complaints about our collection or use of your personal information within the timeframes required by applicable data protection laws and regulations, typically within 45 days.
EU, Swiss, and UK individuals with inquiries or complaints regarding our data protection practices should first contact Terra Dotta at:
privacy@terradotta.com
1330 Environ Way
Chapel Hill, NC 27517
To the extent permitted by applicable law, Terra Dotta and you agree that disputes that cannot be resolved after good faith discussions may be referred to the International Centre for Dispute Resolution/American Arbitration Association (“ICDR/AAA”) for resolution by binding arbitration, subject to applicable mandatory consumer protection laws and except where prohibited by law. For EU/EEA, UK, and Swiss data subjects, this does not affect your right to lodge a complaint with your local supervisory authority or to pursue remedies through the courts in your jurisdiction. If you do not receive timely acknowledgment of your complaint from us, or if we have not addressed your complaint to your satisfaction, please contact ICDR/AAA for more information or to file a complaint. EU/EEA data subjects may also lodge a complaint with their local data protection supervisory authority.
In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy involving Terra Dotta, personal information may be transferred to a successor entity. We will provide notice before personal information is transferred and becomes subject to a different privacy policy, where required by applicable law. You will have the opportunity to opt-out of such transfer where required by applicable privacy laws.
This Privacy Policy may be revised periodically by Terra Dotta, as reflected by the “last updated” date below. Where required by applicable law, we will provide notice of material changes to this Privacy Policy and, where necessary, obtain your consent. Please revisit this page to stay aware of any changes. Your continued use of our services after changes become effective constitutes acceptance of the revised Privacy Policy, except where additional consent is required by law.
Terra Dotta welcomes questions and comments regarding this Privacy Policy and requests to exercise data subject rights under applicable privacy laws. We may be contacted at:
General inquiries: info@terradotta.com
1330 Environ Way
Chapel Hill, NC 27517
Privacy Officer: privacy@terradotta.com
Last Updated: November 14, 2025