TreeTalk Privacy Policy

1. Roles and purposes

Treeru operates TreeTalk. We process personal information necessary to manage and authenticate business staff accounts, administer permissions, perform the service agreement, maintain access records, and handle inquiries.

The business that installs the chat window is the controller and determines the purposes and retention periods for its customers’ personal information. Treeru operates the consultation system as its processor. This Policy describes TreeTalk operations and does not replace the business’s collection and use notices or any required consent.

Entrusted work includes processing, storing and managing conversations and inquiry submissions, providing consultation material by business, sending submission notifications, and visit and engagement analytics used by the business. We do not process customer personal information beyond the entrusted purposes and the business’s instructions or provide it to other businesses.

2. Information processed

Business accounts: staff identification and authentication information, business affiliation and permissions, login sessions, and account access and major processing records.

Customer consultation: conversation and inquiry content, optionally submitted names and phone numbers, and inquiry-form items disclosed by the business before collection. Sensitive information, unique identification numbers, financial information and passwords are outside the collection scope of this chat window. Do not enter them.

Customers may consult without logging in. A random visit identifier is stored in browser storage; social login is not used for customers. Business staff and administrator accounts are managed separately from customer consultation.

3. Visit records and opt-out

On sites with TreeTalk installed, visit records may be processed even if the chat window is not opened. These include IP address and estimated region, device and browser information, screen size, language and time zone, visit time, page URL and title, referrer and advertising tracking parameters, visit identifier, views, dwell and visible time, scroll range, button and link clicks, and chat-window usage. A site may store only part of an IP address.

The purposes are visit statistics, understanding site usage, and consultation operations. Typed text and keystrokes are not included in visit records. Names, contact details and conversation content are handled separately. We do not create device fingerprints by combining information to identify a device or person.

The business’s privacy policy and settings determine whether visit records are processed and their retention period. Browser Do Not Track and Global Privacy Control settings are respected; no visit records are retained when enabled. A marker cookie is stored for one year on a site when staff choose to exclude their own device from visit statistics.

4. Retention and destruction

Consultation and inquiry records containing personal information are processed only for the purposes and periods in the business’s privacy policy and contract. They are returned or destroyed when the processing arrangement ends or the business requests it. Legally required records are kept separately for the required period. Information is destroyed without delay when its retention period expires or its purpose is fulfilled.

Business account access records are automatically deleted after one year. Account information for a business that terminates service is pseudonymized 90 days after termination. Pseudonymized information is also destroyed according to the applicable purpose and lawful retention period.

On-server backups are retained for up to six months. External daily, weekly and monthly backups are automatically deleted after 14 days, eight weeks and six months, respectively, and used only for recovery. AI providers’ separate retention periods appear in the international transfer information below.

5. Safeguards and collection limits

We separate consultation material by business, manage access permissions, and encrypt submitted names and phone numbers for storage. Staff and administrator accounts are distinguished, and logins and major access and processing activities are recorded.

Do not enter unique identification or payment card numbers or other numbers unnecessary for consultation. Protection of detected numbers before storage and input restrictions follow Article 4 of the TreeTalk Terms. Automatic detection does not identify every input. Where unnecessary personal information is identified, we work with the business to take necessary measures, including deletion without delay.

6. Subprocessing and international transfers

We may entrust necessary processing work to service providers. We obtain the business’s prior consent to subprocessing of personal information and cooperate with its supervision and inspections. Required legal bases, notices and consent for international transfers are established separately. Acceptance of the Terms or consent to subprocessing does not replace any required international transfer consent.

Conversation material and business consultation material necessary to generate a response may be processed by overseas AI services. The following table lists providers, countries, contacts, transferred data, purposes, periods and refusal methods.

7. Individual rights and children’s information

Customers may request access, correction, deletion or suspension through the contact in the business’s privacy policy. We assist at the business’s request. Requests about account information that we manage directly may be made through the contact below.

TreeTalk is not intended for children under 14, and we do not have a procedure for collecting their information with legal representative consent. If information is identified as belonging to a child, we work with the business to destroy it without delay.

8. Contact

③ Customers may request access, correction, deletion, or suspension of processing through the contact listed in the relevant business’s privacy policy. We assist at the business’s request. Our support contact is info@treeru.com.

Name: Kyungnam Kim

Position: Representative

Email: info@treeru.com

Effective Date

Effective date: October 22, 2026