GPTree GPTree
Product Features Integrations Agents Use cases Pricing Enterprise
Log in Start free
Product Features Integrations Agents Use cases Pricing Enterprise Why GPTree FAQ Log in Start free
On this page
1. Introduction 2. Information We Collect 3. How We Use 4. How We Share 5. Data Security 6. Data Retention 7. Your Rights 8. Cookies 9. Children's Privacy 10. International Transfers 11. California 12. GDPR 13. Changes 14. Contact
Related
Terms of Service FAQ
Privacy

Privacy Policy

Last updated: September 26, 2026
~8 min read
Quick Summary

We collect information you provide and usage data to run the service. We do not sell your data for money, and we never train AI models on your conversations. We do use analytics and advertising tools, named in Sections 4 and 8, and you can limit them. We use encryption and safeguards to protect your information. You have rights to access, correct, or delete your data. Contact [email protected] for any privacy questions.

1

Introduction

GPTree ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using GPTree, you agree to the collection and use of information in accordance with this policy.

1.1 Company Information

GPTree is operated under the laws of the State of Delaware, United States. For privacy-related inquiries, please contact us at [email protected].

2

Information We Collect

2.1 Information You Provide

We collect information that you provide directly to us, including:

  • Account Information: Name, email address, password
  • Profile Information: Workspace settings, preferences
  • Content: Conversations, messages, and other content you create
  • Payment Information: Processed through Stripe (we do not store full payment card details)
  • API Keys: Encrypted storage of third-party API keys you provide

2.2 Automatically Collected Information

We automatically collect certain information when you use the Service:

  • Usage Data: Token usage, API calls, feature usage
  • Log Data: IP address, browser type, access times, pages viewed
  • Device Information: Device type, operating system, browser version
  • App Information: If you use the GPTree desktop app, a random identifier for that installation, the app version, and your operating system version and architecture. We use this to count installations and to know which versions are in use.
  • Cookies and Tracking: Session data, preferences, authentication tokens, and the analytics and advertising identifiers described in Section 8
3

How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve the Service
  • Process transactions and send related information
  • Send technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze usage patterns and trends
  • Detect, prevent, and address technical issues and security threats
  • Personalize your experience
  • Comply with legal obligations
4

How We Share Your Information

We do not sell your personal information for money. Some of the analytics and advertising tools described in Section 4.5 involve sharing limited data with their providers, which some privacy laws treat as a form of "selling" or "sharing"; Sections 8 and 11 explain your choices. We may share your information in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf: Stripe (payment processing), Mailtrap (email delivery), DigitalOcean (cloud hosting), Cloudflare (bot protection and content delivery), Sentry (error monitoring), Firebase and Apple (push notifications and sign-in), Google (sign-in), and Composio (app connections you choose to enable). When you use web search inside a conversation, your search query is sent to a search provider (currently Tavily, Serper, or Exa) to run the search.

4.2 AI Provider Services

When you use AI providers through GPTree, your conversations and API keys are sent to those providers according to their terms and privacy policies. We are not responsible for how third-party AI providers handle your data.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4.5 Analytics and Advertising

We use Google Analytics and Microsoft Clarity to understand how the Service is used; Clarity records how visitors interact with pages (session replays and heatmaps). We also use measurement tools from Meta and Reddit so we can tell whether our advertising works. These tools set cookies (see Section 8) and receive limited technical data such as pages viewed, IP address, and browser details. When you create an account, we currently send a signup event to Reddit that includes a hashed version of your email address, your IP address, and browser information, so the signup can be attributed to an ad. These providers process this data under their own privacy policies.

5

Data Security

We implement appropriate technical and organizational security measures to protect your information, including:

  • Encryption of sensitive data in transit and at rest
  • Secure storage of API keys using industry-standard encryption
  • Regular security assessments and updates
  • Access controls and authentication
  • Secure data centers and infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6

Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. We may retain certain information for longer periods as required by law or for legitimate business purposes.

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal or legitimate business purposes.

7

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information: Access, Correction, Deletion, Portability, Objection, and Restriction of processing.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days, or as required by applicable law. You may also use account settings to access, correct, or delete certain information.

If you are in the European Economic Area and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.

8

Cookies and Tracking

We use cookies and similar technologies to track activity and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Cookies we use: Essential (sign-in sessions and security, such as the session cookie and XSRF-TOKEN), Functional (for example, carrying a demo conversation into a new account), Analytics (Google Analytics "_ga" cookies; Microsoft Clarity "_clck" and "_clsk"; and our own visitor identifiers "gptree_visitor", "visitor_id", and "gptree_utm_context", used for visit measurement, experiments, and attribution), and Advertising (Meta Pixel "_fbp" and Reddit "_rdt_uuid").

How non-essential cookies start out depends on where you are. In the European Economic Area, the United Kingdom, Switzerland, and Brazil, analytics and advertising are withheld until you accept them, either from the cookie banner or from Cookie settings. Elsewhere, including the United States, they may be on when you arrive and you can turn them off at any time from Cookie settings in the footer or under Privacy in your account settings. If we cannot tell where you are, we withhold them and ask. Wherever you are, if your browser sends a Global Privacy Control signal we treat it as an opt-out and advertising stays off.

Your choice is stored in a gptree_consent cookie for 180 days and recorded so we can show what was agreed and when. Turning a category off stops it loading again and clears the cookies we can reach; a script already running in the open page stops when you reload. Sentry session replay is never on without an explicit acceptance of analytics, in any region.

Analytics covers Google Analytics, Microsoft Clarity, and Sentry session replay. Advertising covers the Meta and Reddit pixels and the server-side signup and purchase events we send to Reddit. Error monitoring and performance measurement through Sentry run on every page as an essential service, and record diagnostics rather than a recording of your session.

8.1 Your Choices

You can block or delete cookies in your browser settings, though blocking essential cookies may prevent sign-in. The analytics and advertising providers above offer their own opt-outs: the Google Analytics opt-out browser add-on, Meta ad preferences, and Reddit ad-personalization settings. You can also email [email protected] with questions or opt-out requests. The Service honours the Global Privacy Control signal: when your browser sends it, advertising cookies stay off and we do not share signup or purchase events with advertising partners. You can also change your choices at any time using the “Cookie settings” link in the footer, or under Privacy in your account settings. We do not act on the older Do Not Track header separately.

9

Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected] and we will delete such information.

If you are between 13 and 18, you may use the Service only with the consent and supervision of a parent or guardian.

10

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. When we transfer personal data from the EEA, we use appropriate safeguards such as Standard Contractual Clauses. By using the Service, you consent to such transfers in accordance with this Privacy Policy.

11

California Privacy Rights

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete it, and the right to opt out of the sale or sharing of personal information. We do not sell personal information for money. Our use of the advertising cookies and measurement tools described in Sections 4.5 and 8 may qualify as "sharing" (or in some cases "selling") for cross-context behavioral advertising as California law defines those terms.

11.1 Do Not Sell or Share My Personal Information

To opt out of the sale or sharing described above, turn off Advertising in “Cookie settings” (in the site footer, or under Privacy in your account settings), or send the Global Privacy Control signal from your browser, which we honour automatically. You can also email [email protected] with the subject "Do not sell or share" and we will apply the opt-out for you. You can also use the browser and provider controls described in Section 8. We do not knowingly sell or share the personal information of consumers under 16 years of age.

12

GDPR Rights (European Users)

If you are in the EEA, you have additional rights under the GDPR, including the rights listed in Section 7.

12.1 Data Breach Notification

In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by law, typically within 72 hours where required by GDPR.

12.2 Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. You maintain control over how AI-generated content is used.

13

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you by posting the new policy on this page and updating the "Last updated" date. You are advised to review this policy periodically. Changes are effective when posted.

14

Contact Us

If you have any questions about this Privacy Policy, please contact us:

Privacy inquiries

Our team is available to answer any questions about how we handle your data.

Contact us
GPTree Branch · Compare · Merge

Never re-explain yourself. One context tree for every model, every branch, and every agent doing real work.

Product

How it works Features Integrations Agents Memory & knowledge Voice Why GPTree

Use cases

Developers Researchers Writers Consultants Teams Operators AI for Everyone

Resources

Pricing FAQ Security Switch from ChatGPT Apps Learn What's new Developer docs

Company

Enterprise Tree pledge Contact Start free Log in Terms Privacy Accessibility Cookie settings
© 2026 GPTree · Corgen LLC. All rights reserved.