Cookie Policy

This Cookie Policy explains how Climate Data Inc., doing business as Terralyn ("Terralyn," "we," "us," or "our"), uses cookies and similar technologies on our website at terralyn.ai, in the Terralyn application (the "Service"), and in the marketing emails we send.

This Cookie Policy supplements our Privacy Policy and is incorporated by reference into our Terms and Conditions, which also incorporate our Usage Policy and, where executed or accepted, our Data Processing Addendum. Capitalized terms not defined here have the meaning given in the Terms and Conditions.

The cookies described in this policy relate to your use of our website and Service, where Terralyn acts as the data controller. How we handle the personal data collected through them is governed by our Privacy Policy. This is separate from Customer Data that Terralyn processes on behalf of business customers under our Data Processing Addendum; that content is not collected through the cookies described here.

1. What are cookies and similar technologies

Cookies are small text files stored on your device when you visit a website. They are widely used to make websites work, to remember your preferences, to keep you signed in, and to understand how a site is used. Similar technologies that serve the same purposes, such as pixels, tags, and browser local storage, are also covered by this policy where we use them. In this policy, "cookies" refers to cookies and these similar technologies.

Cookies can be described by who sets them and how long they last:

• First-party cookies: set by Terralyn.
• Third-party cookies: set by an external service we use, such as an analytics provider.
• Session cookies: temporary, deleted when you close your browser.
• Persistent cookies: remain on your device for a set period or until you delete them.

2. Categories of cookies we use

We group cookies into three categories. Section 14 lists the specific cookies in each category.

2.1 Essential cookies (always active)

• Purpose: required for the Service to function and to keep it secure, including authentication, session management, load balancing, and fraud prevention.
• Can you turn these off: no. These cookies do not require consent because the Service cannot operate without them. They are not used to track you for advertising.

2.2 Analytics cookies (optional)

• Purpose: help us understand how visitors interact with our public website, such as pages viewed, time on page, and errors encountered, so we can improve performance and usability. We use this data in aggregated form.
• Can you turn these off: yes, through the cookie banner or the "Cookie Settings" link in our website footer.

2.3 Marketing cookies (optional)

• Scope: used on our public website only, not inside the authenticated Terralyn application.
• Purpose: measure the effectiveness of our marketing, such as which campaigns bring visitors to our site, and make the advertising you see more relevant to your interests.
• Can you turn these off: yes, through the cookie banner.

3. Legal bases and consent by region

European Union, EEA, United Kingdom, and Switzerland
We set non-essential cookies (analytics and marketing) only after you give consent, and we collect that consent before those cookies are placed. Consent is requested in a way that is freely given, specific, informed, and granular by category, with reject and accept options presented with equal prominence. We do not use cookie walls that block access to the site if you decline. You can withdraw consent at any time, and it is as easy to withdraw as to give. Essential cookies rely on the strictly necessary exemption under the ePrivacy Directive as implemented in national law and, in the UK, the Privacy and Electronic Communications Regulations (PECR), together with our contract performance and legitimate interest bases under the EU and UK GDPR (Article 6(1)(b) and 6(1)(f)). Tracking pixels and tracked links in our marketing emails are not website cookies and are handled separately in Section 9, which says where we ask for your consent before using them and how to switch them off anywhere.

United States
We give notice of the cookies we use and let you opt out of non-essential cookies. Marketing cookies can qualify as the "sharing" (or a "sale") of personal information for cross-context behavioral advertising under California and other US state privacy laws. You can opt out at any time through the Cookie Settings link in our website footer, and we honor Global Privacy Control signals as an opt-out of sale, sharing, and targeted advertising, as described in Section 5.

Elsewhere
We apply the standard that matches your location and the applicable law, defaulting to the consent-based approach above where the position is unclear.

4. Managing your cookie choices

Cookie banner
We use Finsweet Consent Pro to manage cookie consent on our website. On your first visit, a consent banner lets you accept all cookies, reject non-essential cookies, or set your preferences by category, with accept and reject options presented with equal prominence. Where consent is required (see Section 3), non-essential scripts are not set until you consent. We record your choice in the fs-consent cookie for 12 months, after which we ask again. You can change your choice at any time through the "Cookie Preferences" link in our website footer.

Consent records
When you make a choice, Consent Pro also stores a consent record as proof of consent. That record includes your IP address, a date and time stamp, and the choices you made. We use it only to evidence and manage your consent. See Section 8 for how long we keep it.

Browser controls
Most browsers let you block or delete cookies through their settings. Blocking essential cookies may stop parts of the Service from working.

Analytics opt-out
You can opt out of Google Analytics across websites using the Google Analytics Opt-out Browser Add-on.

5. Global Privacy Control and Do Not Track

We treat a Global Privacy Control (GPC) browser signal as a valid request to opt out of the "sale" and "sharing" of personal information and of processing for cross-context behavioral advertising or targeted advertising, to the extent required under California, Colorado, Connecticut, Texas, and other US state privacy laws. The opt-out applies to the browser and device from which the signal is received. Signed-in users may also set account-level preferences by contacting privacy@terralyn.ai.

Do Not Track (DNT) is not a standardized signal, and we do not currently respond to it. Use the cookie banner, the "Cookie Settings" footer link, or your browser settings to manage non-essential cookies.

6. Third-party cookies and services

Some cookies and pixels are set by third parties that provide services on or through our website or in our emails. Their use of data is governed by their own privacy policies.

7. Data collected through cookies

Information collected:

• IP address (truncated or anonymized for analytics where supported)
• Browser type, device type, and operating system
• Pages visited, referring page, and time spent
• Interactions with page elements

How we use it:

• Keep you signed in and keep the Service secure
• Record and evidence your cookie consent choices, which involves storing your IP address and a timestamp as proof of consent
• Understand and improve website performance
• Diagnose and troubleshoot technical issues
• Measure the effectiveness of our marketing on our public website
• Measure whether our marketing emails are opened and which links are clicked, where tracking applies (Section 9)

We do not use data collected through cookies to make automated decisions that produce legal or similarly significant effects about you.

8. Retention

• Session cookies: deleted when you close your browser.
• Persistent cookies: retained for the period shown in Section 14, ranging from 30 minutes to about 2 years. Browsers may cap first-party cookie lifetimes at around 400 days.
• Analytics records: retained in aggregated or de-identified form as needed for service improvement, consistent with the retention periods in our Privacy Policy.
• Consent records: kept as evidence of your consent for as long as needed to demonstrate compliance with applicable law.
• Email open and click records: 12 months from the event; deleted sooner if we remove you from our contact list. See Section 9.

9. Email tracking pixels and tracked links

Some of the marketing emails we send contain a tracking pixel and tracked links, separate from the website and application cookies described above. The pixel is a small, invisible image that tells us whether and when you opened a message and returns basic technical data such as your device type and IP address. Tracked links pass through our email provider on the way to the destination page, which tells us which links you clicked. We send these emails through Customer.io, which processes this information on our behalf.

We use them to measure whether and when our marketing emails are opened and which links are clicked, so we can understand which content is useful, tailor what we send you, and improve it. We do not use them to measure opens or clicks of account, security, or billing emails, or of the email that delivers a guide you requested. The unsubscribe and "Tracking preferences" links in our emails are unique to you so that only you can use them; they are not used to measure engagement.

If you are in France or Italy, or we cannot confirm where you are, we do not use open or click tracking unless you have turned it on, for example by ticking the marketing box on one of our website forms or through the "Tracking preferences" link in our marketing emails. Elsewhere we use it on the basis of our legitimate interest in understanding how our emails perform, and you can object at any time. Wherever you are, you can turn tracking on or off through that link or by emailing privacy@terralyn.ai, and turning it off does not affect whether you receive our emails.

Retention: we keep open and click records for 12 months from the event, and we delete them sooner if we remove you from our contact list.

10. Your rights and choices

You can:

• Change your cookie preferences at any time through the cookie banner or the "Cookie Settings" footer link
• Withdraw consent to non-essential cookies at any time
• Configure your browser to block or delete cookies
• Request access to, or deletion of, personal data collected through cookies
• Turn email open and click tracking on or off through the "Tracking preferences" link in our marketing emails

The privacy rights that apply to personal data collected through cookies, including access, correction, deletion, portability, objection, and withdrawal of consent, are described in full in our Privacy Policy, Section 13. To exercise them, email privacy@terralyn.ai.

11. Regional information

European Union, EEA, UK, and Switzerland (GDPR and UK GDPR)

How we obtain consent for cookies is described in Section 3. You have rights of access, rectification, erasure, restriction, portability, and objection over personal data collected through cookies. See our Privacy Policy, Section 13.

CCPA, CPRA, and other US state privacy laws

• We disclose our cookie practices here and in our Privacy Policy.
• You have the right to opt out of the "sale" and "sharing" of personal information. Our use of marketing cookies for advertising can qualify as "sharing" (or a "sale") under these laws. You can opt out at any time through the Cookie Settings link in our website footer, a Global Privacy Control signal, or by emailing privacy@terralyn.ai.
• We honor Global Privacy Control signals as described in Section 5.
• We do not discriminate against you for exercising your rights.
• Residents of California and of other states with comprehensive privacy laws, including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Delaware, New Hampshire, New Jersey, Minnesota, Maryland, Indiana, Iowa, Kentucky, Nebraska, Tennessee, Montana, and Rhode Island, have rights to access, correct, delete, port, and opt out, exercisable at privacy@terralyn.ai.

Canada (PIPEDA and Quebec Law 25)

Canadian residents have rights under PIPEDA. Quebec residents additionally have rights under the Act respecting the protection of personal information in the private sector (Law 25), including data portability and the right to be informed of automated decision-making. Exercise rights at privacy@terralyn.ai.

12. Changes to this Cookie Policy

We may update this Cookie Policy from time to time. We will post the updated version with a new "Last Updated" date. For material changes, we will provide notice by email or in-product banner at least 30 days before they take effect, unless a shorter period is required by law. Continued use of the Service after the effective date of a change means you accept the updated policy.

13. Contact us

Climate Data Inc. (DBA Terralyn)

• Address: 3001 Bishop Dr., Suite 300, San Ramon, CA 94583 US
• Privacy and Data Protection: privacy@terralyn.ai
• Legal: legal@terralyn.ai
• Website: https://terralyn.ai/cookie-policy

14. Cookie list

Cookie names, providers, and durations can change as the Service evolves. The analytics and marketing cookies below are set only once you accept the corresponding category and the relevant tag is live on the site.

Essential cookies (always active)

The Calendly booking widget on our contact page loads only after you submit the booking form. It does not require consent, because it is strictly necessary to provide the booking service you have requested. Once it loads, Calendly may set further cookies of its own on the calendly.com domain, for security, analytics and its own consent management. We rely on the exemption above only for what is needed to show and run the booking widget. Those other cookies are Calendly's rather than ours, set under Calendly's own policy and consent tools; see the Calendly link in Section 6.

Analytics cookies (optional)

Marketing cookies (optional, public website only)

15. Summary (non-binding)

We disclose the cookies we use. You choose which non-essential cookies to accept. The Service works with essential cookies alone. You can change your choices at any time through the footer link. We honor Global Privacy Control signals. We do not sell cookie data to data brokers, and you can opt out of "sharing" for advertising at any time. Our marketing emails may use open and click tracking. We ask for your consent first if you are in France or Italy or we cannot confirm where you are, and wherever you are you can switch tracking on or off at any time.