Your conversations are personal.

Treechat (“Treechat”, “we”, “us”) operates treechat.org and the Treechat applications. We are the controller of the personal data described in this notice unless we say otherwise.

Questions, rights requests and complaints can be sent to hello@treechat.org.

• Account data: email address, password hash, account name and profile image where supplied, account status, plan and preferences.
• Conversation data: prompts, responses, chat titles, feedback, generated content, uploaded files, voice transcripts and tool inputs or results.
• Memory and personalisation: only when enabled, useful facts or preferences derived from conversations, memory sources, corrections, retention choices, home location and custom instructions you choose to save.
• Usage and impact records: model route, token counts, estimated cost, energy, carbon and water, feature use, rate-limit counters, timestamps and error diagnostics.
• Billing and referral data: Stripe customer and subscription identifiers, plan, invoice status, billing address supplied at checkout, referral code, attribution and rewards. We do not receive your full card number.
• Device and security data: IP address, browser or app information, session identifiers, fraud and abuse signals, and security logs.
• Support and contact data: the details and messages you send through our contact form or email.
• Email preferences: whether each short onboarding tip was sent and whether you asked us to stop product tips.
• Optional measurement: page views, campaign attribution and selected signup, activation and billing events if you allow analytics. Session recording remains disabled.

Please do not send passwords, API keys, payment-card details, highly sensitive medical records or other secrets in a chat. Our memory filters are designed to avoid saving obvious credentials, but no automated filter is perfect.

We do not sell personal data, build advertising profiles from your chats or use your conversations to train a Treechat general-purpose AI model. We may use de-identified, aggregated statistics to understand cost, quality and environmental impact.

When you ask Treechat something, we send the information needed to answer—including relevant conversation context, attachments and, where enabled, selected memories—to an AI inference provider. Tool requests may also be sent to search, maps, travel, shopping, weather, image or transcription services when you ask for those capabilities.

Treechat currently uses a mix of direct and routed services, including Scaleway, nScale, Verda and Vercel AI Gateway for AI workloads. A gateway route may involve the model provider shown in the product. Provider availability changes, so this list is reviewed as the service evolves.

We contract with providers as processors or use their business/API services. Their infrastructure may retain limited request data for security, abuse prevention or legal compliance under their applicable terms. Do not assume Private Chat prevents this transient provider processing.

• Hosting, database and storage: Vercel and Supabase.
• AI and specialist processing: the AI, search, transcription, image, maps, travel, product and weather services needed for the feature you request.
• Payments: Stripe.
• Account and onboarding email: Resend.
• Optional measurement: PostHog browser analytics using its EU ingestion endpoint, plus Meta browser and server conversion measurement for campaign optimisation, only after consent.
• Professional and legal recipients: advisers, auditors, insurers, authorities or a buyer of the business where reasonably necessary and lawful.

We disclose only what is reasonably necessary for the task, contract, security issue or legal requirement.

• Standard chats: kept while your account is active until you delete an individual chat, clear your history or ask us to delete your account.
• Private Chat: conversation content is not stored in Treechat chat history and is not used to read or create memories. Private Chat does not accept attachment uploads. Images or files created with a tool may be stored to deliver the result. Transient processing and limited cost, provider or security logs may still occur.
• Memories: kept for the retention period you choose in Settings—currently from 30 days to 10 years—or until you delete them or turn memory off.
• Standard-chat uploads and generated files: kept as needed to make the conversation available. Deleting chat records may not immediately remove a detached storage object; contact us if you need complete account-level deletion.
• Billing and legal records: kept for the period required by tax, accounting, fraud-prevention and legal rules.
• Security, rate-limit and diagnostic data: kept only as long as reasonably needed to protect and operate the service.

Deleted information is removed from active systems or de-identified where practical. Limited copies may remain temporarily in backups until they rotate, or longer where law requires preservation.

You can delete chats, clear chat history, view or delete memories, change memory retention, turn memory off, use Private Chat and change cookie choices in the product.

Depending on where you live, you may have rights to access, correct, erase, restrict or object to processing, and receive a portable copy of your data. You may withdraw consent at any time without affecting earlier lawful processing.

You can complain to the UK Information Commissioner’s Office at ico.org.uk or to the data protection authority where you live or work. We would appreciate the chance to resolve the concern first.

Treechat and its providers may process data outside your country. Where UK or EEA data is transferred internationally, we rely on an adequacy decision where available or appropriate contractual safeguards, such as the UK International Data Transfer Agreement or Addendum and EU Standard Contractual Clauses, together with transfer risk assessments where required. Contact us to request more information about relevant safeguards.

We use access controls, encrypted transport, credential hashing, signed uploads, bot detection, rate limits and cost controls designed to protect the service. No online system can be guaranteed completely secure. Use a unique password and tell us promptly if you believe your account has been compromised.

Treechat is not directed to children under 13. If you are under the age at which you can consent to an online service where you live, use Treechat only with permission from a parent or guardian. Paid plans must be purchased by an adult. If we learn that we collected a child’s data unlawfully, we will delete it.

We do not use your data to make solely automated decisions that have legal or similarly significant effects. Automated abuse, rate and cost controls can temporarily restrict a request or account. Contact us if you believe a restriction was wrong and want a human review.

We may update this notice as Treechat changes. We will update the date above and provide a prominent notice when a change materially affects your rights or how we use personal data.

Contact: hello@treechat.org.