TreeTalk Terms of Service

Article 1 (Purpose and Scope)

① These Terms govern the conditions of use of the TreeTalk consultation service provided by Treeru (the “Company”) and the rights and obligations of the Company and users.

② Treeru provides the TreeTalk platform. Each business is the controller of its customers’ personal information, and we act as the processor. Customers use the widget on a business’s website without logging in. Platform use by business staff is distinct from customer consultation with the business. The business’s use of the service and the personal information processing arrangement follow its service agreement with us. The business separately explains its collection and use of customer personal information and obtains the necessary consent.

③ These Terms are the individual conditions for TreeTalk under Article 3 of the Site Terms of Use. These Terms apply to matters specifically addressed for TreeTalk; other matters follow the Site Terms of Use and applicable law. Users’ statutory rights are not restricted.

Article 2 (Application and Consent)

① We provide these Terms and the Privacy Policy before service use. We obtain acceptance of the terms when businesses log in and record the accepted version and time. The method of entering into a contract with a business follows its service agreement with us.

② Customers use the chat window without logging in. Business staff view their own business’s consultation materials and visit and engagement analytics according to their assigned permissions. TreeTalk is not intended for children under 14. We do not have a procedure for collecting children’s information with legal representative consent. If information is identified as belonging to a child, we work with the business to destroy it without delay.

③ Businesses must establish the legal bases required for collecting, using, and internationally transferring customer personal information, provide notices, and obtain consent. Acceptance of these Terms alone does not constitute consent to matters requiring separate personal information consent.

Article 3 (AI Responses and Confirmation by the Business)

① TreeTalk provides consultation tailored to each business through an AI consultation engine developed in-house by the Company. The Company selects and operates AI models suited to the service. Models considered for selection include Anthropic’s Claude, OpenAI’s GPT, Google’s Gemini, xAI’s Grok, Zhipu AI’s GLM, MiniMax, and Mistral AI. The providers actually used and the conditions for processing personal information are described in the Privacy Policy.

② AI responses assist with consultation and may differ from facts or current information. They do not constitute a promise to conclude a contract, confirm a quote, approve an application, or perform an obligation. Please confirm prices, schedules, and contract terms with the relevant business’s staff.

③ This article does not exempt the Company from responsibilities imposed by applicable law.

④ Please do not enter sensitive information. Information about personal information processing and international transfers is available in the Privacy Policy.

⑤ TreeTalk consultation uses generative AI, and the consultation screen identifies responses written by AI. AI responses alone must not be used to make significant decisions, such as diagnosis, treatment, hiring, or lending decisions; confirmation by the responsible professional is required.

⑥ We send AI providers conversation material and business consultation materials only to the extent necessary to generate a response. Actual providers, transferred data, retention periods, and international transfer conditions are described in the Privacy Policy.

Article 4 (Optional Contact Information and Personal Information)

① Users choose whether to submit their names and phone numbers. Both fields are required when submitted and are used for consultation. Retention and destruction follow the relevant business’s privacy policy and contract.

② We collect only the minimum information needed for consultation follow-up, such as a name, phone number, and company name. Resident registration, foreign resident registration, passport, driver's license, payment card and bank account numbers, passwords, and sensitive information such as health or beliefs are outside the scope of collection in this chat window. Do not enter them. Where necessary, the business's staff use a separate procedure, such as a telephone call, with a lawful basis and safeguards.

③ We fully mask automatically detected unique identification and payment card numbers before storage, without retaining even the last four digits of a payment card number. Automatic detection does not identify every input; where other unnecessary personal information is identified, we work with the business to take necessary measures, including deletion, without delay.

④ Each business’s privacy policy determines the purposes and retention periods for its customers’ personal information. We operate the platform within the agreed processing scope, separately from our processing of account information. Each business’s policy is available through the privacy policy link in its chat window. Our policy alone does not fulfill a business’s notice and consent obligations.

Article 5 (Retention and Deletion of Consultation Records)

① We store consultation content and submissions received through the inquiry form and chat window (chatbot). Records containing personal information are processed only for the purposes and periods specified in the business's privacy policy and contract and are destroyed without delay when the purpose is fulfilled or the retention period expires, except where retention is legally required.

② Return and destruction of names, phone numbers, visit analytics, and logs follow the business's policy and contract and applicable law. At the business's request, we check the processing scope and legal retention obligations and return or destroy the information. Business account access records are automatically deleted after one year. Account information for a business that terminates service is pseudonymized 90 days after termination. Pseudonymized information is also destroyed according to the applicable processing purpose and lawful retention period. AI providers' retention periods are described in our Privacy Policy.

③ Customers may request access, correction, deletion, or suspension of processing through the contact listed in the relevant business’s privacy policy. We assist at the business’s request. Our support contact is info@treeru.com.

④ We automatically delete backup copies stored on our servers after retaining them for no more than 6 months. We make external backups daily and automatically delete them after retention periods of 14 days for daily backups, 8 weeks for weekly backups, and 6 months for monthly backups. Backup copies are used only for recovery.

Article 5-2 (Personal Information Processing Arrangement Between the Business and the Company)

① Under the service agreement, the business and we establish an arrangement covering consultation system operation, storage and management of conversations and consultation submissions, provision of consultation materials for each business, and visit and engagement analytics. The categories and periods of processing remain within the scope specified in the business’s privacy policy and service agreement.

② We do not process customer personal information or provide it to third parties beyond the entrusted purposes and the business's instructions. Acceptance of these Terms alone does not constitute any separately required consent to use personal information for other purposes or to provide it to third parties. We implement safeguards including access permission management, separation of materials by business, and encryption of names and phone numbers.

③ The Company may entrust processing work to service providers to the extent necessary to provide the service. When further entrusting personal information processing, the Company obtains the business’s prior consent and identifies the service providers and their processing work in the Privacy Policy. The legal bases, notices, and consent required for international transfers are addressed separately. Consent to subprocessing does not replace the user’s consent to an international transfer.

④ The business may inspect our processing and safeguards and request necessary corrections. We cooperate with supervision, including training and inspections. If a personal information breach occurs, we notify the business and assist with preventing harm and handling the exercise of rights.

⑤ When the processing arrangement ends or the business requests return or destruction, we return or destroy the information under the contract and applicable law and notify the business of the result. We also explain the scope of handling information subject to legal retention and copies such as logs and backups.

⑥ We and the business each bear responsibility under applicable law for damage attributable to our respective fault. Our contact for processing work and assistance with customer rights is info@treeru.com.

Article 6 (Prohibited Conduct and Restrictions on Use)

① Users must not impersonate others, misuse personal information, infringe rights, transmit illegal content or malware, intrude beyond their access authority, or obtain non-public material without authorization. Conduct that causes excessive system load or costs or disrupts normal consultation operations is also prohibited, including bulk or repeated consultation requests made through automated methods rather than directly by a person, such as bots, scripts, or AI agents, bypassing safeguards, and repeated generation or collection unrelated to consultation. Normal consultation, accessibility assistance, the exercise of statutory rights, and checks or integrations authorized by the Company are not restricted.

② Where there are reasonable grounds to establish a violation or security threat, we may restrict or block use only to the extent and for the period necessary and proportionate to the nature and severity of the conduct. We notify the user of the reasons, duration, and appeal procedure. Where urgent protection is necessary, we may act first and give notice without delay afterward. We lift or adjust restrictions if an appeal is justified or the reason is resolved. Appeals may be submitted through info@treeru.com, and we respond within seven days of receipt.

③ Appeals concerning restrictions or service inquiries may be sent to info@treeru.com.

④ A person who intentionally or negligently causes loss to the Company or a business may be liable for damages under applicable law. Conduct satisfying the statutory elements of offenses such as network intrusion or obstruction of business may give rise to criminal liability. We may take lawful action, including seeking damages or reporting to investigative authorities. A breach of these Terms alone does not establish a criminal penalty, and neither our statutory responsibilities nor users' rights are excluded.

Article 7 (Service Changes and Suspension)

① We may temporarily suspend the service when maintenance, failures, or similar circumstances make provision difficult. Planned suspensions are announced in advance. If advance notice is impossible, we explain the reason afterward.

② We communicate important service changes or termination in a way users can access, and handle personal information under the Privacy Policy and applicable law.

Article 8 (Damages and Scope of Responsibility)

① We and users each bear responsibility under applicable law if our respective fault causes damage to the other party.

② Responsibility for inability to provide services due to force majeure, such as natural disasters for which we are not at fault, may be limited to the extent permitted by applicable law.

③ Disclaimers in these Terms and the Site Terms of Use must not be interpreted as excluding responsibility for our intentional acts or gross negligence, unlawfully limiting compensation, or shifting risks to users.

Article 9 (Dispute Resolution)

① We and users will make good-faith efforts to resolve service-related disputes through discussion. Our contact is info@treeru.com.

② Disputes are governed by the laws of the Republic of Korea. Jurisdiction follows applicable law, including the Civil Procedure Act.

Article 10 (Changes to These Terms)

If we change these Terms, we announce the changes, reasons, and effective date in advance in a way users can access. We obtain separate consent where required by applicable law and do not treat a user’s silence alone as consent.

Effective Date

Effective date: October 22, 2026