Privacy Policy

Effective Date: April 4, 2026 · Last Updated: April 4, 2026

1. Who We Are

Terris ("Terris," "we," "us," or "our") is a leasing intelligence platform operated from Ontario, Canada. Our primary product, Terris Scout, provides AI-powered secret shopping and leasing evaluation services for multifamily property operators.

For the purposes of applicable data protection legislation, Terris is the data controller responsible for your personal information collected through our website at tryterris.com and our platform.

2. Scope of This Policy

This Privacy Policy applies to personal information we collect when you:

• Visit our website at tryterris.com
• Submit a contact, demo, or pricing request form
• Use the Terris Scout platform as a customer
• Communicate with us via email, phone, or other channels

This policy does not apply to third-party websites or services linked from our site. We encourage you to review their privacy practices independently.

3. Information We Collect

Information you provide directly

• Contact and account information: name, email address, phone number, company name, job title, and portfolio size when you submit a form or create an account
• Billing information: payment card details (processed and tokenized by our payment processor; we do not store full card numbers)
• Communications: content of emails, support requests, or other messages you send to us
• Platform configuration: property lists, evaluation preferences, and agent settings you configure within the platform

Information collected automatically

• Device and browser data: IP address, browser type and version, operating system, device type, screen resolution, and language preferences
• Usage data: pages visited, features used, session duration, clickstream data, and referring/exit URLs
• Cookies and similar technologies: see Section 10 for details

Information generated through our services

When Terris Scout performs evaluations on behalf of our customers, the platform generates data about property leasing team interactions (response times, communication quality, follow-up patterns). This data is collected as part of our service delivery and is owned by our customers pursuant to their service agreements.

4. How We Use Your Information

We use your personal information for the following purposes:

• Service delivery: to provide, operate, and improve the Terris Scout platform and related services
• Communications: to respond to your inquiries, send transactional emails (account confirmations, reports, alerts), and provide customer support
• Marketing: to send product updates, newsletters, and relevant content (only with your consent; you can opt out at any time)
• Analytics: to understand how our website and platform are used, identify trends, and improve the user experience
• Security: to detect, prevent, and respond to fraud, abuse, or security incidents
• Legal compliance: to comply with applicable laws, regulations, and legal processes

We process your information based on one or more of the following legal bases: your consent, performance of a contract, our legitimate business interests, or compliance with a legal obligation.

5. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service providers: trusted third parties that help us operate our business (cloud hosting, payment processing, email delivery, analytics). These providers are contractually bound to use your data only for the services they provide to us.
• Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.
• Legal requirements: when required by law, regulation, legal process, or government request, or to protect the rights, property, or safety of Terris, our customers, or the public.
• With your consent: in any other circumstances where you have provided explicit consent.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.

• Lead and inquiry data: retained for up to 24 months from your last interaction, unless you request earlier deletion
• Customer account data: retained for the duration of your subscription and up to 12 months after termination for account recovery and legal purposes
• Platform evaluation data: retained in accordance with your service agreement (typically 24 months of historical data)
• Billing records: retained for up to 7 years as required by Canadian tax and commercial law

When data is no longer needed, we securely delete or anonymize it.

7. Security

We implement commercially reasonable technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Role-based access controls and multi-factor authentication for internal systems
• Regular security assessments and monitoring
• Secure cloud infrastructure with SOC 2-compliant hosting providers
• Employee training on data protection and security practices

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

All users

• Access: request a copy of the personal information we hold about you
• Correction: request correction of inaccurate or incomplete data
• Deletion: request deletion of your personal information, subject to legal retention requirements
• Withdrawal of consent: withdraw consent for marketing communications at any time

Canadian residents (PIPEDA)

Under Canada's Personal Information Protection and Electronic Documents Act (PIPEDA), you have the right to access your personal information, challenge its accuracy, and withdraw consent for its collection, use, or disclosure. You may also file a complaint with the Office of the Privacy Commissioner of Canada.

European Economic Area residents (GDPR)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation, including the right to data portability, the right to restrict processing, and the right to object to processing. You may also file a complaint with your local supervisory authority.

California residents (CCPA/CPRA)

California residents have the right to know what personal information is collected, request deletion, opt out of the sale of personal information (we do not sell personal information), and exercise these rights without discrimination.

To exercise any of these rights, contact us at privacy@tryterris.com. We will respond within 30 days (or sooner if required by applicable law).

9. International Data Transfers

Terris is based in Ontario, Canada. Your information may be processed and stored in Canada and other countries where our service providers operate (including the United States). Canada has been recognized by the European Commission as providing an adequate level of data protection.

Where we transfer data to jurisdictions that have not received an adequacy determination, we use appropriate safeguards such as standard contractual clauses approved by the European Commission or equivalent mechanisms required by applicable law.

10. Cookies and Tracking

Our website uses cookies and similar technologies to improve your experience:

• Essential cookies: required for core website functionality (session management, security). Cannot be disabled.
• Analytics cookies: help us understand how visitors interact with our website (page views, traffic sources, user flows). We use privacy-respecting analytics that do not sell your data to third parties.
• Marketing cookies: used to deliver relevant content and measure campaign effectiveness. Only placed with your consent.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

11. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will notify you by updating the "Last Updated" date at the top of this page and, where appropriate, by email or prominent notice on our website.

We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us:

Terris
Email: privacy@tryterris.com
Website: tryterris.com
Ontario, Canada

If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada or the relevant supervisory authority in your jurisdiction.