Public policies

Legal Entity & Custodianship

Legal Custodian Notice

Effective Date: 2026-05-07

EAlert365 is operated by Treea LLC.

Treea LLC is the contracting entity for EAlert365, including service agreements, data-processing terms, and support or compliance notices published through this application.

Any reference in these documents to the Company, Provider, Platform, or EAlert365 refers to Treea LLC unless a separate signed customer agreement states otherwise.

Workspace creators and administrators represent that they are authorized to accept these terms and configure the service for their organization.

Policy contact: Questions about these documents, privacy requests, and security reports must be submitted through Contact in the website footer. Select the relevant category and keep the returned ticket reference. Do not include passwords, one-time codes, access tokens, or full payment-card data.

Last reviewed: 26 August 2026. Material changes will be identified in the published document and, where required, brought to affected customers' attention before the new processing or term takes effect.

Intellectual Property Policy

Intellectual Property Rights

Document ID: EALERT-IP-2026-V2

1. PLATFORM OWNERSHIP
Treea LLC retains all rights, title, and interest in the EAlert365 service, including its software, interface design, documentation, workflow configuration logic, and associated intellectual property. The service is licensed, not sold.

2. CUSTOMER DATA OWNERSHIP
The customer organization retains ownership of the data it uploads or generates through the service, including employee lists, check-ins, incident records, survey results, and emergency configuration data.

3. LIMITED PROCESSING LICENSE
Treea LLC receives only the limited rights needed to host, process, secure, back up, and transmit customer data in order to provide the service and meet legal or contractual obligations.

AI Usage & Automated Decision Policy

Automated Decision Policy

Document ID: EALERT-AI-2026-V3

1. SCOPE OF AUTOMATION
EAlert365 may use rules, heuristics, AI summaries, or automated workflows to surface safety insights, prioritize triage, and support customer service or knowledge retrieval.

2. HUMAN REVIEW REQUIRED
Automated outputs are decision-support tools only. They must not be used as the sole basis for employment, disciplinary, compensation, medical, legal, or emergency-response decisions without independent human review.

3. CUSTOMER RESPONSIBILITY
Customers remain responsible for lawful workplace decisions, equal-treatment obligations, and the review of AI-assisted outputs before action is taken.

4. CHALLENGE AND CORRECTION
A person affected by an AI-assisted summary or score should have a practical route to request human review, correct inaccurate source data, and contest a material conclusion. EAlert365 risk assessments are indicative decision aids, not legal findings or predictions of an individual worker's conduct.

Payment, Renewal & Refund Policy

Billing Terms

Document ID: EALERT-PAY-2026-V3

1. BILLING CYCLE
Paid plans are billed in advance and renew on a recurring 28-day cycle unless a different written term is presented at checkout.

2. AUTHORIZATION TO CHARGE
By providing a payment method for a paid workspace, the authorized customer representative consents to the disclosed recurring charges, taxes, and related fees until the plan is cancelled or changed.

3. CANCELLATION
Cancellation stops future renewal charges. Unless a written offer states otherwise, cancellation does not retroactively reverse charges already validly incurred for the active billing period.

4. REFUNDS
Payments are generally non-refundable after successful processing except where a refund is required by applicable law, expressly promised in writing, or approved by Treea LLC to correct a billing error.

5. FAILED PAYMENTS AND DISPUTES
Failed payments, chargebacks, or suspected fraud may result in suspension of paid features while the account is reviewed.

6. CLEAR RENEWAL INFORMATION
Checkout must identify the plan, price, 28-day renewal interval, applicable user limit, and recurring nature of the charge before payment authorization. Customers must receive a practical cancellation route and should retain the payment confirmation or failure reference when requesting billing support.

Third-Party Services & Sub-Processors

Sub-Processor Disclosure

Document ID: EALERT-SUB-2026-V2

1. SERVICE PROVIDERS
EAlert365 uses third-party providers for identity and authentication, email delivery, SMS or voice delivery, payment processing, hosting, storage, and related infrastructure. Current examples may include Keycloak, Resend, Twilio, and Pesapal, together with infrastructure or push-notification providers used to operate the service.

2. MINIMUM NECESSARY SHARING
We share only the data reasonably necessary for those providers to perform the contracted service on our behalf.

3. PROVIDER CHANGES
Treea LLC may add or replace providers to improve security, resilience, or service quality. Material policy updates will be reflected in the published legal documentation.

4. EXTERNAL DEPENDENCIES
Delivery times and uptime can be affected by mobile carriers, inbox providers, operating systems, device settings, and other third-party systems outside Treea LLC's direct control.

Terms of Use & Service Agreement

Master Service Terms

Document ID: EALERT-TOS-2026-V3

REV. 3.0

1. ACCEPTANCE AND AUTHORITY
The service is intended for lawful workplace safety, communication, incident handling, and related administrative use. A workspace creator represents that they are legally able and authorized to accept these terms for the organization. Non-waivable local rights continue to apply.

2. ACCOUNTS AND ADMINISTRATION
Customers must provide accurate workspace information, assign roles on a least-privilege basis, remove access promptly when it is no longer required, and protect passwords, email accounts, devices, and one-time codes. Activity performed through an authorized account is treated as workspace activity unless promptly reported as compromised.

3. ASSISTIVE TOOL; NOT EMERGENCY SERVICES
EAlert365 is an assistive communication and workflow tool. It does not replace public emergency services, rescue capability, licensed medical or legal advice, physical safeguards, competent supervision, or an employer's independent duty-of-care obligations. Users must contact local emergency services directly when life or health is at immediate risk.

4. CUSTOMER DATA AND CONFIGURATION
Customers remain responsible for the lawfulness, accuracy, notices, permissions, retention instructions, escalation contacts, and workflow settings they supply. Treea LLC processes customer data to provide, secure, support, and improve the contracted service, subject to the Privacy and Data Protection policies and any signed data-processing terms.

5. SUBSCRIPTIONS
Paid plans renew every 28 days at the price disclosed at checkout until cancelled. Paid features activate after payment confirmation. Plan capacity, cancellation, failed-payment handling, and refund limits are described in the Payment, Renewal & Refund Policy. Nothing in these terms removes a cancellation, refund, or consumer right that cannot lawfully be waived.

6. ACCEPTABLE USE AND SUSPENSION
Use must comply with the Acceptable Use Policy. Treea LLC may proportionately restrict or suspend access to contain a security incident, prevent unlawful or harmful use, address material breach or non-payment, or protect users and the service. Where practicable, the affected administrator will receive the reason and a route to resolution.

7. SERVICE CHANGES AND AVAILABILITY
Features may change to improve safety, security, reliability, or compliance. Material changes that reduce contracted functionality or alter legal terms will be communicated as required by the governing agreement and applicable law. External networks, devices, carriers, inbox providers, and operating systems can delay or prevent delivery.

8. WARRANTIES AND LIABILITY
The service is provided subject to the warranties in any signed agreement and rights that cannot be excluded by law. To the maximum extent permitted by law, Treea LLC is not liable for indirect, incidental, special, consequential, exemplary, or punitive damages. Unless a signed agreement states otherwise or non-waivable law applies, aggregate liability for the affected service is limited to amounts paid for it during the 12 months before the event.

9. DISPUTES AND CONTACT
Before formal proceedings, the parties should provide written notice and attempt good-faith resolution. The governing law, forum, or dispute process is the one stated in the applicable signed agreement or otherwise determined by applicable law; these terms do not impose a blanket arbitration clause where none was agreed. Notices may be submitted through the support channel.

Acceptable Use Policy (AUP)

Acceptable Use Policy

Document ID: EALERT-AUP-2026-V3

1. PROHIBITED ACTIVITIES
You may not use EAlert365 to:

  • scrape, export, or systematically copy platform data without authorization;
  • send spam, unsolicited bulk communications, or deceptive outreach;
  • use SOS, incident, or broadcast tools for false reports, harassment, or retaliation;
  • conduct covert surveillance, stalking, or location monitoring outside disclosed workplace safety purposes;
  • attempt to bypass security, reverse engineer, disrupt the service, or test systems outside the responsible-disclosure authorization below; or
  • use automated scores or survey insights as a disguised basis for discriminatory action.

2. ENFORCEMENT
Violations may lead to access restriction, suspension, termination, investigation, and referral to law enforcement or regulators when appropriate.

Incident Response Policy

Incident Response Plan

Document ID: EALERT-IRP-2026-V3

1. RESPONSE MODEL
Treea LLC follows an incident-response lifecycle covering preparation, detection, containment, remediation, recovery, and post-incident review.

2. CUSTOMER NOTIFICATION
For a confirmed security incident affecting customer personal data, Treea LLC will notify the designated customer administrator without undue delay and in line with applicable law and contractual commitments. A 72-hour regulator deadline may apply to a controller in some jurisdictions; it is not a blanket promise that every event or recipient follows the same clock.

3. REPORTING CHANNEL
Security and support concerns can be raised through the EAlert365 support channel so they can be triaged, logged, and escalated appropriately.

SLA & Availability Disclaimer

Service Availability

Document ID: EALERT-SLA-2026-V3

1. AVAILABILITY OBJECTIVE
Treea LLC uses commercially reasonable efforts to target 99.9% monthly availability for the hosted service. This is an operational objective, not a service-credit commitment unless a signed agreement contains a specific service-level agreement.

2. EXTERNAL NETWORK DEPENDENCIES
Alert delivery depends on internet access, device power, operating-system permissions, mobile carriers, inbox providers, and other external systems. Delivery may be delayed, throttled, blocked, or fail because of factors outside Treea LLC's reasonable control.

3. OFFLINE BEHAVIOR
Where supported, the app can queue certain safety actions locally while a device is offline and attempt sync after reconnection. Offline queueing does not guarantee successful or immediate delivery.

4. EMERGENCY DISCLAIMER
In a life-threatening emergency, users must contact local emergency services directly. EAlert365 is not a 911, dispatch, ambulance, police, or fire-response provider.

Consent, Location & Workplace Monitoring Notice

Employee Consent Notice

Document ID: EALERT-CONSENT-2026-V2

1. EMPLOYER RESPONSIBILITY
Each customer organization is responsible for providing lawful workforce notices, obtaining any consents required under employment, privacy, labor, or monitoring laws, and configuring the service in a way that matches its internal policies.

2. LOCATION EVENTS
Location data is intended to be collected during defined safety events such as manual check-ins, SOS triggers, and approved incident-response workflows. EAlert365 is not intended to function as undisclosed continuous background tracking.

3. TRUSTED CONTACTS
If trusted contacts are configured, they are intended to receive SOS-related notifications only for the workflows disclosed in the product.

4. WORKPLACE RECORDS
Operational records created through the service, such as check-ins, incidents, alerts, and audit events, are generally workplace records available to the customer organization subject to role-based access controls.

Regional Workplace Safety & Monitoring Compliance

Regional Compliance Note

Document ID: EALERT-REGIONAL-2026-V1

1. CUSTOMER DUTY OF CARE
Customers remain responsible for their own workplace risk assessments, supervision, training, emergency planning, and incident-response procedures. EAlert365 supports communication and accountability workflows but does not replace local health-and-safety obligations.

2. UK, EU, AUSTRALIA AND SIMILAR REGIMES
Organizations using EAlert365 for lone-worker, remote-worker, GPS, survey, or monitoring workflows should provide clear worker notices, identify the lawful basis or local permission for processing, consult workers or representatives where required, and configure the platform proportionately for safety purposes.

3. LOCATION AND SURVEY GUARDRAILS
Location workflows should remain event-based and safety-focused, not undisclosed continuous tracking. Anonymous survey reporting should be used for aggregate management insight and should not be combined with small-team context, timestamps, or external information to re-identify workers.

4. LOCAL LAW CONTROLS
If local employment, privacy, surveillance, consumer, or workplace-safety law requires stronger controls than these documents, the customer must follow those stronger controls and obtain local legal advice before deployment.

Privacy Policy

Privacy Policy

Document ID: EALERT-PRIV-2026-V3

1. WHO IS RESPONSIBLE
Treea LLC operates EAlert365. For most workforce workspace data, the customer organization determines why and how the data is used and acts as controller or business, while Treea LLC acts as processor or service provider. Treea LLC may act as controller for its own account, security, billing, website, and support administration. Submit privacy questions through Contact in the website footer and keep the returned ticket reference.

2. DATA AND SOURCES
We process information needed to operate the service: account identity and contact details; role, department, tenant, and invitation data supplied by a user or administrator; authentication, device, browser, network, and audit metadata; support and billing records; configured contacts; and check-in, incident, alert, survey, and event-based location records generated through use of the service.

3. PURPOSES AND LEGAL GROUNDS
Data is used to create and secure accounts, operate tenant workspaces, deliver requested alerts and safety workflows, provide support, process billing, prevent misuse, meet recordkeeping duties, and maintain reliability and auditability. The applicable legal ground depends on the data and jurisdiction and may include performance of a contract, legitimate interests in providing and securing the service, compliance with law, protection of vital interests, or consent where required. Customer organizations are responsible for identifying and communicating their own lawful basis for workforce processing.

4. LOCATION, SURVEYS, AND SENSITIVE CONTEXT
Location is intended to be collected only at disclosed safety events such as a check-in or SOS, not as undisclosed continuous tracking. Anonymous survey flows are intended to omit direct identifiers from entries and reports, but customers must avoid small-group, timestamp, or outside-data combinations that could re-identify a respondent. Do not use these tools for covert surveillance or solely automated employment decisions.

5. SHARING, SALES, AND INTERNATIONAL PROCESSING
We do not sell personal data or share it for cross-context behavioral advertising. Data may be disclosed to contracted service providers, the customer workspace, configured emergency contacts or responders, or authorities when necessary to provide the service, protect people and systems, investigate misuse, or comply with law. Where processing crosses borders, Treea LLC and the customer must use the safeguards required by the applicable regime.

6. RETENTION
Data is kept only while needed for the stated purpose, the active service, security, backup rotation, dispute handling, or legal and contractual duties. Audit records are retained for at least 12 months unless a different lawful schedule applies. Retention may vary by record type and customer instruction; expired data should be securely deleted or de-identified unless a preservation duty applies.

7. PRIVACY RIGHTS
Depending on applicable law and the controller relationship, a person may have rights to be informed, access data, correct it, request deletion or restriction, object, receive portable data, withdraw consent, limit certain sensitive-data uses, and receive human review of qualifying automated decisions. California residents may also have applicable rights to know, correct, delete, limit, and non-discrimination. Kenya data subjects may request information, access, correction, objection, or deletion as provided by local law.

8. HOW TO EXERCISE RIGHTS OR COMPLAIN
Workforce users should normally contact their organization administrator first because the organization controls the workspace purpose and records. Requests may also be sent through EAlert365 support and may require proportionate identity verification. A person may complain to the privacy or data-protection authority in the place where they live or work when that right applies. Treea LLC will not discriminate against a person for exercising a protected privacy right.

9. CHILDREN AND POLICY CHANGES
EAlert365 is a business workplace service and is not directed to children. Customers must not create an account for a minor unless the deployment is lawful and all required guardian, employment, and privacy safeguards are in place. This policy is reviewed when processing changes and material updates will show a revised review date.

Security Policy

Security Standards

Document ID: EALERT-SEC-2026-V3

1. SECURITY GOVERNANCE
EAlert365 manages security as a continuous govern, identify, protect, detect, respond, and recover process. Controls are risk-based and are reviewed after material system changes, incidents, test findings, or significant threat changes. No internet service can promise absolute security.

2. ACCESS AND TENANT CONTROLS
The service uses encrypted transport, authenticated sessions, role-based permissions, tenant-aware authorization checks, and protected privileged workflows. The current sign-in flow uses a password plus an emailed one-time code. Administrators must grant least privilege, review access, remove departed users, and protect administrator email and devices.

3. OPERATIONS AND RESILIENCE
Treea LLC uses monitoring, controlled updates, backups, recovery procedures, and incident handling to reduce confidentiality, integrity, and availability risk. Security logs and operational records are access-controlled and retained according to purpose and legal requirements. Customers remain responsible for device security, accurate contacts, tested escalation paths, and lawful workspace configuration.

4. INCIDENT HANDLING
Security events are triaged, contained, investigated, remediated, recovered, and reviewed. Designated customer contacts will be notified of confirmed personal-data incidents without undue delay as required by applicable law and contract, with practical information as it becomes available.

5. RESPONSIBLE DISCLOSURE
Report a suspected vulnerability through Contact in the website footer. Choose the Security category and include “Security Vulnerability Report,” the affected URL or component, impact, and reproducible steps. Keep the returned ticket reference. Do not include secrets or customer data. Good-faith testing is authorized only for accounts and data you own or have explicit permission to test; it must avoid privacy violations, persistence, social engineering, denial of service, destructive actions, or access beyond the minimum needed to demonstrate the issue. Allow reasonable time for investigation and coordinated disclosure.

6. SECURITY QUESTIONS
Never send a password, one-time code, private key, access token, or full payment-card number to EAlert365 support. For a suspected account compromise, change the password, secure the associated email account, sign out other sessions where available, notify the workspace administrator, and submit a security ticket with the time and visible symptoms.

Data Protection Policy

Data Protection Protocol

Document ID: EALERT-DATA-2026-V2

1. CUSTOMER ROLE
In most workspace deployments, the customer organization acts as the employer and primary controller of workforce data, while Treea LLC acts as processor or service provider for hosted operations.

2. TENANT SEPARATION
The platform is intended to enforce tenant-scoped access controls so one workspace cannot access another workspace's operational data through normal authorized use.

3. RETENTION
Audit trails are retained for at least 12 months unless a longer legal, contractual, backup, or security requirement applies. Other operational data is retained for the active service period and any lawful post-termination retention window.

4. DELETION LIMITS
Deletion or deactivation requests may be limited where records must be kept for safety investigations, fraud prevention, dispute resolution, accounting, insurance, or legal compliance.