Privacy Policy

1. WHO IS RESPONSIBLE
Treea LLC operates EAlert365. For most workforce workspace data, the customer organization determines why and how the data is used and acts as controller or business, while Treea LLC acts as processor or service provider. Treea LLC may act as controller for its own account, security, billing, website, and support administration. Submit privacy questions through Contact in the website footer and keep the returned ticket reference.

2. DATA AND SOURCES
We process information needed to operate the service: account identity and contact details; role, department, tenant, and invitation data supplied by a user or administrator; authentication, device, browser, network, and audit metadata; support and billing records; configured contacts; and check-in, incident, alert, survey, and event-based location records generated through use of the service.

3. PURPOSES AND LEGAL GROUNDS
Data is used to create and secure accounts, operate tenant workspaces, deliver requested alerts and safety workflows, provide support, process billing, prevent misuse, meet recordkeeping duties, and maintain reliability and auditability. The applicable legal ground depends on the data and jurisdiction and may include performance of a contract, legitimate interests in providing and securing the service, compliance with law, protection of vital interests, or consent where required. Customer organizations are responsible for identifying and communicating their own lawful basis for workforce processing.

4. LOCATION, SURVEYS, AND SENSITIVE CONTEXT
Location is intended to be collected only at disclosed safety events such as a check-in or SOS, not as undisclosed continuous tracking. Anonymous survey flows are intended to omit direct identifiers from entries and reports, but customers must avoid small-group, timestamp, or outside-data combinations that could re-identify a respondent. Do not use these tools for covert surveillance or solely automated employment decisions.

5. SHARING, SALES, AND INTERNATIONAL PROCESSING
We do not sell personal data or share it for cross-context behavioral advertising. Data may be disclosed to contracted service providers, the customer workspace, configured emergency contacts or responders, or authorities when necessary to provide the service, protect people and systems, investigate misuse, or comply with law. Where processing crosses borders, Treea LLC and the customer must use the safeguards required by the applicable regime.

6. RETENTION
Data is kept only while needed for the stated purpose, the active service, security, backup rotation, dispute handling, or legal and contractual duties. Audit records are retained for at least 12 months unless a different lawful schedule applies. Retention may vary by record type and customer instruction; expired data should be securely deleted or de-identified unless a preservation duty applies.

7. PRIVACY RIGHTS
Depending on applicable law and the controller relationship, a person may have rights to be informed, access data, correct it, request deletion or restriction, object, receive portable data, withdraw consent, limit certain sensitive-data uses, and receive human review of qualifying automated decisions. California residents may also have applicable rights to know, correct, delete, limit, and non-discrimination. Kenya data subjects may request information, access, correction, objection, or deletion as provided by local law.

8. HOW TO EXERCISE RIGHTS OR COMPLAIN
Workforce users should normally contact their organization administrator first because the organization controls the workspace purpose and records. Requests may also be sent through EAlert365 support and may require proportionate identity verification. A person may complain to the privacy or data-protection authority in the place where they live or work when that right applies. Treea LLC will not discriminate against a person for exercising a protected privacy right.

9. CHILDREN AND POLICY CHANGES
EAlert365 is a business workplace service and is not directed to children. Customers must not create an account for a minor unless the deployment is lawful and all required guardian, employment, and privacy safeguards are in place. This policy is reviewed when processing changes and material updates will show a revised review date.