This notice covers two specific things that, in several jurisdictions, require your explicit, separate consent rather than being covered by our general Privacy Policy: transferring your personal data outside your home country, and sending you SMS messages. You're asked to agree to this notice when you create your account.
Terravist's servers, database, and file storage run on Alibaba Cloud infrastructure located in mainland China. When you use Terravist, your personal data — your profile, phone number, uploaded documents and media, job records — is transferred to and processed in China. If you are located outside China, this is an international transfer of your personal data, and China's data protection framework may differ from the one that applies where you live.
We limit what we store to what the service needs, keep uploaded files in an access-controlled, encrypted-at-rest bucket rather than a public one, and require authentication on every request to our servers. By agreeing to this notice, you consent to this transfer and processing.
We send a one-time verification code by SMS whenever you sign up or log in — this is how we confirm the phone number is really yours. We may also send you SMS messages about your account or an active job when that's the most reliable way to reach you (for example, a time-sensitive job update). By agreeing to this notice, you consent to receiving these SMS messages at the phone number you provide. Standard carrier rates may apply. We do not use SMS for promotional marketing.
You can withdraw this consent at any time by deactivating your account from Account settings, or by contacting us at privacy@terravist.app. Because SMS verification is how we confirm your identity at login, withdrawing consent for SMS means we can no longer verify you and your account will need to be deactivated — we can't offer a version of the service without it.
If you are located in Turkey, the processing described above is also subject to Turkey's Law on the Protection of Personal Data No. 6698 ("KVKK"). Under KVKK, transferring your personal data abroad to a country without an adequacy decision requires either your explicit consent or another lawful transfer mechanism recognized by the Turkish Personal Data Protection Board. We rely on your explicit consent, given by agreeing to this notice, for the international transfer described in Section 1. You have the rights listed in KVKK Article 11, including the right to learn whether your data is being processed, request correction or deletion, and object to a result produced solely by automated processing. To exercise these rights, contact us at the email address above.