01 Scope & Applicability

This Privacy Policy applies to all products, services, and platforms operated by Terrion AI Solutions LLC ("Terrion," "we," "us," or "our"), including the website terrionaisolutionsllc.com, as well as our SaaS modules: Knowledge AI, Terrion Flow, CloudLens FinOps, Terrion Guard, Terrion Ops, and DataBridge AI.

This policy also governs data processed through our deployments on AWS Marketplace, including consolidated billing and entitlement verification. By accessing or using our services, you agree to the terms outlined in this policy.

02 Data Controller vs. Data Processor Roles

Data Controller: Terrion acts as the Data Controller for the information you provide when creating an account, purchasing a subscription, or interacting with our sales and billing teams (e.g., name, work email, company details, billing info).

Data Processor: Terrion acts strictly as a Data Processor for all Customer Workloads. This includes any data you upload, transmit, or process through our SaaS modules, including documents, vector embeddings, API requests, and VPC data. We process this data solely on your documented instructions.

03 Information We Collect

• Account & Procurement Data: Full name, work email, phone number, company name, and billing address.
• AWS Entitlement & Billing Identifiers: AWS Account IDs, Product/Contract IDs, and AWS Marketplace billing tokens.
• Telemetry & Operational Logs: IP addresses, browser type, access times, and system logs necessary for security, uptime monitoring, and SLA compliance.
• Customer Workspace Inputs: Data ingested by your team into our modules (e.g., PDFs, database records, text prompts) which remains strictly within your isolated tenant.

04 AI Model Isolation & Zero-Training Commitment

We employ strict technical and legal safeguards to ensure your AI data remains private:

• Single-Tenant Namespace Isolation: Your RAG vector stores and data pipelines are segregated from other customers using strict logical boundaries and IAM policies.
• Ephemeral Memory Processing: LLM inference context windows are processed in-memory and are not permanently stored unless explicitly authorized by your configuration.
• Strict Prohibition on Model Training: Under no circumstances do we use your proprietary data, prompts, or outputs to train, retrain, or fine-tune public foundational models (e.g., OpenAI, Anthropic, Bedrock base models).

05 How We Use Information

We use the collected information for the following business purposes:

• Provisioning, maintaining, and securing your dedicated workspace nodes.
• Executing SLA-backed technical support and incident response.
• Monitoring system health, preventing fraud, and mitigating DDoS or malicious activities.
• Generating FinOps telemetry and analytics (e.g., CloudLens spend reports).
• Processing invoices, managing AWS consolidated billing, and regulatory compliance.

06 Sub-Processors & Third-Party Disclosures

We do not sell your personal data or customer workloads. We share information only with essential sub-processors under strict Data Processing Agreements (DPAs):

• Amazon Web Services (AWS): For secure cloud hosting, KMS encryption key management, and VPC networking.
• Stripe & AWS Marketplace: For secure payment processing and subscription management.
• Legal Authorities: If required by valid legal process, subpoena, or to protect the vital interests of Terrion AI, our customers, or the public.

07 Enterprise Data Security & Encryption Standards

Terrion AI employs defense-in-depth security controls aligned with SOC 2 Type II and HIPAA readiness:

• Encryption in Transit: All network traffic is secured via TLS 1.3.
• Encryption at Rest: Data at rest is encrypted using AES-256 keys managed via AWS Key Management Service (KMS).
• Access Controls: Strict Role-Based Access Control (RBAC), least-privilege IAM policies, and mandatory MFA for all internal engineering staff.
• Network Isolation: Deployments are protected within private VPCs with AWS Shield for DDoS mitigation.

08 Data Retention & Automated Deletion

We retain your Account Data for as long as your subscription is active. Upon termination or cancellation of your account, we will initiate a 30-day cryptographic purge. This process permanently deletes your vector indexes, document stores, database snapshots, and backups from our production and disaster recovery environments. Legal hold exceptions may apply for billing records required by US tax laws.

09 International Data Transfers

By default, data is stored in the AWS region you selected during provisioning (e.g., US-East, US-West). If you operate from the EU/EEA, international transfers to the US are safeguarded via the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring a high standard of data protection.

10 Privacy Rights (CCPA/CPRA & GDPR)

Depending on your jurisdiction, you possess the following rights:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete information.
• Right to Erasure (Forget): Request deletion of your account data (subject to legal retention requirements).
• Right to Data Portability: Export your data in a machine-readable format.
• Right to Non-Discrimination: We will not deny service, charge different prices, or provide a lower quality of service for exercising your privacy rights.

11 DPO & Corporate Contact Information

To exercise your rights, submit a privacy inquiry, or contact our Data Protection Officer, please use the details below. We respond to all verified requests within 30 days.