← Back home

Privacy Policy

Last updated: [DATE]

This is a starting draft, not legal advice. It accurately describes what the application currently does, but placeholders like [COMPANY NAME] need to be filled in, and this document should be reviewed by a lawyer — particularly before serving users in jurisdictions with specific requirements like GDPR or CCPA — before you rely on it for paying customers.

1. Overview

This Privacy Policy explains what information [COMPANY NAME] ("we", "us") collects through the Agent Governance & Cost Control Plane (the "Service"), how we use it, and the choices you have.

2. Information We Collect

Account information

Email address, name (optional), and a securely hashed password if you sign up with email/password. We never store your password in plain text.

Single sign-on (SSO) information

If you sign in with Google, Microsoft, or GitHub, we receive your name, email address, and a unique account identifier from that provider. We do not receive your password for these providers, and we do not post to or access your account on these platforms beyond basic sign-in information.

Product usage data

Prompts you submit to the routing demo, tool/skill/agent registry cards you publish, and the resulting routing/cost telemetry are stored so the Service can function and so you can see your own usage history. This data is never sent to any third-party large language model provider — all model routing decisions and cost/latency figures in this application are deterministic estimates computed locally, not the result of a live API call to OpenAI, Anthropic, Google, or any other LLM provider.

Billing information

Subscription and payment processing is handled by Stripe. We store your Stripe customer and subscription identifiers and your subscription status, but we never receive or store your full payment card number.

Technical data

We log IP addresses on signup attempts for fraud/abuse prevention (e.g. limiting repeated automated signups), and use a session cookie to keep you signed in.

3. How We Use Your Information

  • To create and maintain your account and organization;
  • To provide the core product features (routing demo, registry, analytics);
  • To process payments and manage your subscription;
  • To enforce plan limits and prevent abuse;
  • To communicate with you about your account or changes to our Service;
  • To comply with legal obligations.

4. Who We Share Information With

We do not sell your personal information. We share limited information with service providers strictly to operate the Service:

  • Google Cloud Platform — hosting, database, and infrastructure;
  • Stripe — payment processing and subscription billing;
  • Google, Microsoft, GitHub — only if you choose to sign in via one of these providers.

We may also disclose information if required by law or to protect the rights, safety, or property of [COMPANY NAME] or our users.

5. Data Retention

We retain account and usage data for as long as your account is active. Some telemetry data is subject to tier-based retention windows described on our pricing page (e.g. 7-day history on the Free plan). You can request deletion of your account and associated data at any time (see Section 7).

6. Security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords (bcrypt), and short-lived access tokens with securely stored, revocable refresh tokens. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights & Choices

Depending on where you live, you may have rights to access, correct, export, or delete your personal information, or to object to certain processing. To exercise any of these rights, contact us at support@tree-three.com. We will respond within a reasonable time and in accordance with applicable law.

8. Children's Privacy

The Service is not directed to individuals under 18, and we do not knowingly collect personal information from children.

9. International Users

Your information may be processed and stored in the United States or other countries where our service providers operate, which may have different data protection laws than your country of residence.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated before they take effect.

11. Contact

Questions about this Privacy Policy can be sent to support@tree-three.com.