Privacy Policy

This Privacy Policy explains how Tree ("Service", "we", "us", or "our") at tree.tabors.site collects, uses, stores, and protects your information when you use the Service.

By using the Service, you consent to the data practices described in this policy. If you do not agree, please do not use the Service.

Account Information: When you create an account, we collect your username and email address.

User Content: We store files, trees (node-based organizational structures), notes, AI chat conversations, and other content you create or upload through the Service.

Payment Information: When you make a purchase, payment is processed by Stripe. We store Stripe payment session IDs to track transaction status, but we do not store your credit card number, CVV, or other full payment card details. Stripe's handling of your payment data is governed by Stripe's Privacy Policy.

Passwords: We store your account password in an encrypted (hashed) format. We never store or have access to your plaintext password.

API Keys: If you use custom LLM connections or programmatic API access, we store associated API keys. All API keys and passwords are encrypted at rest on our backend servers.

Cryptocurrency Wallets: If you use Solana-related features, your wallet private keys are stored securely on our backend servers. We use the Jupiter API to facilitate Solana transactions and actions.

Technical Information: We may collect your IP address, browser type, device information, and general usage data to operate and improve the Service.

We use cookies and similar browser storage to operate the Service. For example, we store:

Authentication Token (JWT): A secure token used to keep you logged in across sessions.

Username: Stored locally for display and session purposes.

Share Token: Used to enable shared URL access to your content for others you choose to share with.

These cookies are essential to the functioning of the Service. We do not use advertising cookies or third-party tracking cookies. By using the Service, you consent to the use of these essential cookies.

We use the information we collect to: provide, operate, and maintain the Service; authenticate your identity and manage your sessions; process purchases and manage your plan and energy status; store and serve your uploaded files and user content; communicate with you regarding your account or the Service; and detect and prevent fraud, abuse, or violations of our Terms of Service.

We do not sell, rent, or trade your personal information to third parties.

Files, trees (which are composed of individual nodes), notes, AI chat conversations, and other content you upload or generate through the Service are stored on our servers to provide the Service to you. Your content is associated with your account and is not publicly accessible unless you explicitly share it via a share token or other sharing feature.

We do not access, review, or use your uploaded content for any purpose other than providing the Service, unless required by law.

We retain your account information, user content, and uploaded files for as long as your account is active or as needed to provide the Service.

If you delete your account, we will make reasonable efforts to delete your personal data and uploaded files within 30 days, except where we are required to retain certain information by law or for legitimate business purposes (such as fraud prevention or resolving disputes).

Stripe payment session IDs may be retained for record-keeping and dispute resolution purposes.

We take reasonable measures to protect your information, including: using HTTPS encryption for all data transmitted between your browser and our servers; storing authentication tokens securely; hashing all account passwords so plaintext passwords are never stored or accessible; encrypting all API keys (including custom LLM connection keys and programmatic access keys) at rest on our backend; securely storing Solana wallet private keys on our backend infrastructure; and relying on Stripe for PCI-compliant payment processing.

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security and are not liable for unauthorized access resulting from circumstances beyond our reasonable control.

The Service uses the following third-party provider:

Stripe — for payment processing. Stripe may collect and process your payment information in accordance with their own privacy policy. We encourage you to review Stripe's Privacy Policy.

Jupiter API — for facilitating Solana blockchain transactions and actions. Jupiter may process transaction data in accordance with their own policies.

We do not embed third-party advertising, analytics, or social media trackers.

The Service may provide features that interact with the Solana blockchain via the Jupiter API. Solana wallet private keys are stored securely on our backend servers to facilitate these features on your behalf.

By using any cryptocurrency-related features, you acknowledge and agree that:

No Liability for Loss: Tree is not responsible for any loss, theft, or unauthorized access to cryptocurrency funds, whether resulting from technical failures, security breaches, blockchain network issues, market volatility, smart contract errors, or any other cause.

No Financial Advice: The Service does not provide financial, investment, or trading advice. Any cryptocurrency transactions you initiate through the Service are made at your own risk and discretion.

Blockchain Irreversibility: Transactions on the Solana blockchain are irreversible. Once a transaction is confirmed on-chain, it cannot be undone, cancelled, or refunded by Tree.

Use at Your Own Risk: Cryptocurrency features are provided on an "as-is" basis. You are solely responsible for evaluating the risks associated with using these features and for any resulting gains or losses.

You have the right to:

Access: Request a copy of the personal data we hold about you.

Correction: Request correction of inaccurate personal data.

Account Deletion: Request deletion of your account profile data, including your password, email address, and other personal identifiers. We will process deletion requests within 30 days, subject to any legal retention requirements.

Content Retention: Please be aware that trees (nodes), notes, AI chat conversations, and other user-generated content cannot be deleted upon account deletion. This content is interconnected with other users' structures and plans within the Service, and removing it would compromise the integrity of shared and dependent data. By using the Service and creating content, you acknowledge and accept this limitation.

To exercise any of these rights, contact us at treeffiency@gmail.com.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

Legal Basis for Processing: We process your data based on: contractual necessity (to provide the Service and fulfill purchases), legitimate interests (to operate, secure, and improve the Service), and your consent (where applicable, such as accepting cookies).

Additional Rights: In addition to the rights listed in Section 10, you may have the right to restrict processing of your data, object to processing based on legitimate interests, withdraw consent at any time where processing is based on consent, and lodge a complaint with your local data protection authority.

Data Transfers: Your data may be transferred to and stored on servers located outside the EEA. By using the Service, you consent to this transfer. We take reasonable steps to ensure your data is treated securely and in accordance with this policy.

To exercise your GDPR rights, contact us at treeffiency@gmail.com.

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

Right to Know: You may request what personal information we collect, use, and disclose.

Right to Delete: You may request deletion of your personal information, subject to certain exceptions.

Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

No Sale of Personal Information: We do not sell your personal information to third parties as defined under the CCPA.

To submit a CCPA request, contact us at treeffiency@gmail.com.

The Service is not directed to children under 18. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a minor, we will take steps to delete it promptly. If you believe a minor has provided us with personal data, please contact us at treeffiency@gmail.com.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Continued use of the Service after changes means you accept the updated policy.

If you have questions about this Privacy Policy or wish to exercise your rights, contact us:

Tree
Email: treeffiency@gmail.com
Website: tree.tabors.site