Privacy and data handling

Privacy Policy

Who is responsible

Ronald Telford is responsible for the Tervalum Systems website, product support, and hosted licensing or fulfillment services operated for the products. A payment provider may act separately as merchant of record.

Website contact information

If you use the Tervalum Systems contact form, information may include your name, email address, company or organization when supplied, subject, message, privacy acknowledgement, the page from which the form was submitted, and technical information reasonably necessary for form delivery and spam prevention. Tervalum Systems uses this information to review and respond to the inquiry and for related business correspondence.

The website contact form is intended for ordinary business communication. Do not submit confidential investigation files, evidence, passwords, licence keys, payment-card information, Social Security numbers, or other sensitive case records through the general contact form.

Professional Resource Library access

Tervalum Systems asks for an email address once before granting access to downloadable professional-resource PDFs. Name and company or organization are optional. The access request also records the first requested resource or general library request, the related professional discipline when available, whether optional marketing updates were affirmatively requested, and technical information reasonably necessary to deliver the form and prevent spam.

Resource delivery does not require consent to marketing. The optional marketing checkbox is separate. When selected, the email address may be used for occasional Tervalum professional-resource and product updates. A person may request that optional marketing stop at any time through the website email-preference page or by contacting Tervalum Systems.

After successful resource-library access, the website sets a first-party access cookie named tervalum_resource_access. It is used only to remember that the browser has already completed the one-time resource-library unlock. The cookie lasts for up to 12 months, is not an advertising identifier, and does not contain the visitor's email address. An access link sent in the resource-delivery email can establish the same access on another browser or device without creating a password or user account.

Purchase and licensing information

Information may include purchaser or licensed-user name, email, organization, purchase reference, transaction or fulfillment status, licence identifier and status, software version, one-way device or request identifier, computer name when supplied, network address, and licensing, replacement, failure, security, or audit timestamps.

Customer work data

FieldFindings assessment projects, WorkplaceFindings investigation cases, and Investigator Professional case records are designed to remain in customer-controlled Windows storage. They are not intended to be uploaded to the sales website or licence-fulfillment service unless the customer deliberately supplies material through an authorized support arrangement.

Optional FieldFindings trial-start reporting

A future FieldFindings Professional 14-day trial release may ask for optional permission, after the trial has started successfully, to send Tervalum Systems one anonymous trial-first-launch notice. This is not enabled in the currently published trial installer. If permission is declined, the trial continues normally and the notice is not sent.

When permission is granted, the application creates a random event identifier and sends the event type and FieldFindings product label over HTTPS to the Tervalum website. The identifier is retained locally to avoid counting retries as separate trial starts. If the computer is offline, a permitted notice may be sent later. Tervalum does not intentionally include the customer's name, email address, device identifier, licence information, assessment records, or application files in this event. Normal server logs may still record the network address, user agent, event identifier, time and request status.

Aggregated counts of these reports are used to evaluate trial adoption. An event does not prove a distinct human downloaded, installed or launched the software; the server cannot independently verify that a request came from an authentic application. Web-host log retention is managed by the hosting provider.

Website interaction measurement

The website uses a limited first-party interaction log to understand whether visitors use key product and resource actions. Recorded event labels may include page views, checkout clicks, trial or resource-download requests, product-video starts, resource-library access submissions and completions, marketing-unsubscribe requests, contact-form submissions, installation-information clicks, release-verification clicks, and movement from a resource or buyer guide to a related product page. The event request may include the page path and, where relevant, a product, resource, or target category.

When a visitor arrives through a tagged campaign or referral link, the website may temporarily retain limited source information in browser session storage for that browsing session. This may include source, medium, campaign label, content label, referral code, and the referring website's hostname. These labels are used to understand which professional outreach, resource, partner, publication, or search path led to product evaluation. They are not used as an advertising identifier, are not used for cross-site tracking, and are not intended to identify a person.

The first-party interaction logger also uses a random, anonymous session identifier held in this browser tab's session storage to count browsing sessions without cookies or account registration. It is not a persistent visitor identifier, is not shared across sites or browser tabs, and is not linked to an email address or individual marketing recipient. Closing the tab normally ends the session. Technical server logs may contain the identifier alongside normal request information, and automated requests may be excluded from reports.

If the visitor opens a Lemon Squeezy checkout, the same limited acquisition labels may be attached to the checkout as custom transaction metadata, together with the Tervalum page from which checkout was opened. Lemon Squeezy may return that metadata to Tervalum in the related order or licence webhook so a resulting purchase can be attributed to its acquisition source. Tervalum does not place investigation, assessment, case, payment-card, or other customer work data into these acquisition fields.

As with ordinary website access, Railway and the Nginx web server may also record technical request information such as timestamp, network address, user agent, requested path, and response status for hosting, security, troubleshooting, and aggregate effectiveness review. Tervalum Systems does not use these first-party event records for cross-site advertising tracking.

Service providers

Security and customer responsibility

Reasonable safeguards are used, but no system guarantees absolute security. Customers remain responsible for protecting their computers, local data, backups, passwords, exports, printed records, and legal compliance.

Contact and email preferences

Ronald Telford
P.O. Box 116
Mount Union, Iowa 52644, United States

For product support, privacy questions, general business correspondence, or email-preference requests, email info@tervalum.com. Optional Tervalum marketing updates can also be stopped through the email-preference page.

Updated: October 15, 2026