Privacy Notice

Last updated October 19, 2026

Treater Inc. (doing business as Treater) (“Company,” “Treater,” “we,” “us,” or “our”) respects your privacy. This Privacy Notice (“Notice”) describes how and why we might collect, store, use, and/or share (“process”) your personal information when you use our services (“Services”) at https://trytreater.com (the “Website”), as well as any other websites or online platforms that link to this Notice (collectively with the Website, the “Websites”).

Important Note: Our Services are primarily intended for users located within the United States. We do not actively target or market our Services to individuals outside the U.S. However, if you are accessing our Services from the European Economic Area (EEA), United Kingdom, Canada, or another jurisdiction with robust privacy regulations, you may have additional rights as described in this Notice.

By using our Services, you understand and agree that we provide a platform for you to view, analyze, and post content, including photos, comments, and other materials (“User Content”), created by yourself, other users, or by Treater. This Notice is meant to meet our transparency duties under applicable data protection laws.

1. SUMMARY OF KEY POINTS

We collect personal information you provide to us directly (e.g., name, email address, phone number, etc.) and certain technical data automatically (e.g., IP address, device and browser info).
We use this information to provide our Services, communicate with you, comply with law, and pursue other legitimate interests.
We do not knowingly process “sensitive” personal information, except where it appears in email sent or received through a mailbox you connect to Treater (see Section 16).
We have implemented security measures but cannot guarantee 100% security.
We do not knowingly collect data from minors.
Depending on your jurisdiction (e.g., EEA, UK, Canada, California), you may have certain legal rights to your data.
We use third-party analytics tools (e.g., PostHog, Fullstory) to help us understand usage of the Services.
We do not use third-party cookies for cross-site advertising or marketing.
If you connect a Google account, we use Google user data only as described in Section 16, in line with Google's Limited Use requirements.
We may update this Notice at any time.

2. INFORMATION WE COLLECT

2.1 Personal Information You Provide

We collect personal information that you voluntarily provide to us when you:

Create an account, sign up for a newsletter, or otherwise contact us (e.g., name, email, phone, address, job title).
Submit User Content such as photos, comments, or feedback.
Respond to surveys or participate in other interactive features of our Services.

All personal information you provide must be true, complete, and kept up to date.

2.2 Information Automatically Collected

When you visit or use our Website, we automatically collect certain information, including:

Log and usage data (e.g., timestamps, pages viewed, clicks).
Device and browser information (e.g., IP address, operating system, type of browser).
Unique identifiers for form or URL tracking, page views, pings, usage counts, etc.

This information helps us understand how the Services are being used so we can improve them.

3. COOKIES & TRACKING TECHNOLOGIES

3.1 First-Party Essential Cookies

We place first-party cookies to maintain user sessions and provide essential functionality. These are necessary to operate our Website and cannot be disabled without affecting performance.

3.2 Third-Party Analytics Cookies

We use third-party analytics tools, including PostHog and Fullstory, which place cookies (or similar technologies) to collect data about your usage of our Services. This data helps us:

Understand overall usage patterns.
Troubleshoot performance and stability issues.
Optimize features and user experience.
Evaluate marketing effectiveness.

Where required by law (e.g., in the EEA or UK), we seek your consent before placing these cookies on your device. You can typically opt out via browser settings or dedicated opt-out mechanisms:

Fullstory: https://www.fullstory.com/legal/privacy-policy/
PostHog: https://posthog.com/privacy

We do not use third-party cookies for cross-site tracking or targeted advertising. We do not sell your data to third parties.

4. HOW WE USE YOUR INFORMATION

We process your personal information for the following purposes:

To Provide Our Services: Enable you to create an account, use our platform features, and manage your user experience.
To Communicate With You: Send you service-related or promotional messages, respond to inquiries, and request feedback.
For Security and Fraud Prevention: Detect, investigate, and prevent security incidents or other malicious activity.
To Comply With Legal Obligations: Respond to legal requests and prevent harm, as required by applicable laws.
With Your Consent: For any other purpose disclosed to you at the time we collect your data, if required by law.

5. LEGAL BASES FOR PROCESSING (EEA/UK USERS)

If you are a resident of the EEA or UK, we will only process your personal data when we have a valid legal basis, which may include:

Your Consent (e.g., for non-essential cookies or specific marketing).
Contractual Necessity (e.g., to provide the Services you have requested).
Legitimate Interests (e.g., to secure our Website or to analyze usage), after balancing your rights and freedoms.
Compliance With Legal Obligations.
Protection of Vital Interests (rare, but includes emergencies).

You can withdraw consent at any time by contacting us or adjusting your browser or device settings (where applicable).

6. SHARING YOUR INFORMATION

We may share personal information with:

Service Providers: Third-party companies that perform services on our behalf (e.g., hosting, analytics, payment processing). They must follow our instructions and protect your data.
Business Transfers: If we are involved in a merger, acquisition, or asset sale, your data may be transferred as part of that transaction, subject to confidentiality obligations.
Legal or Regulatory Requirements: If required by law, court order, or government authority, or to protect our rights, we may disclose your data.

We do not sell or rent your personal information to third parties for marketing or advertising purposes.

7. INTERNATIONAL DATA TRANSFERS

We are based in the United States. If you are located outside the U.S., be aware that your information may be transferred to and stored in the U.S. For users in the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms to ensure your data is adequately protected. We will take appropriate safeguards to ensure a level of data protection equivalent to that in your home country.

8. DATA RETENTION

We keep your personal information only as long as necessary to fulfill the purposes described in this Notice, or:

As long as you have an account with us.
As required by law (e.g., for tax or accounting reasons).
Until you request deletion (see Section 13).

When we no longer need your data, we delete or anonymize it in accordance with applicable laws.

9. DATA SECURITY

We implement and maintain technical and organizational security measures to protect your personal data. However, no method of transmission or storage is 100% secure. You use our Services at your own risk.

10. PERSONAL INFORMATION FROM MINORS

Our Services are intended for users over the age of 18. We do not knowingly collect or process personal data from children under 18. If we discover we have inadvertently collected data from a minor, we will delete it as soon as reasonably practicable.

Note for EEA/UK: Some local laws define a “child” as under 16 (or lower, depending on the country). If we learn of such data collection without parental consent where required, we will delete it promptly.

11. EUROPEAN / UK / CANADIAN PRIVACY RIGHTS

11.1 EEA and UK

If you reside in the EEA or UK, you have certain data subject rights under applicable data protection laws, including the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase (“be forgotten”) your data in certain circumstances.
Restrict or object to certain processing activities.
Data Portability, meaning to receive your data in a structured format.
Withdraw Consent at any time (where consent is the basis of processing).
Lodge a Complaint with your local supervisory authority.

A list of European Data Protection Authorities is available here:
https://ec.europa.eu/justice/article-29/structure/data-protection-authorities/index_en.htm
If you are in the UK, you may contact the Information Commissioner’s Office (ICO):
https://ico.org.uk/

11.2 Canada

If you are in Canada, we generally rely on express or implied consent for the processing of your personal information, unless an exception applies. You may withdraw consent at any time by contacting us at [email protected]. Doing so may limit your ability to fully use our Services.

You may also have the right to:

Request access to or correction of your personal data.
Challenge our handling of your data by contacting the Office of the Privacy Commissioner of Canada:
https://www.priv.gc.ca/en/

12. CALIFORNIA PRIVACY RIGHTS

Under the California Consumer Privacy Act (CCPA) (as amended), California residents may have the right to:

Know what personal information we collect, use, disclose.
Request deletion of certain personal information.
Opt out of the sale or sharing of personal information (we do not sell).
Not be discriminated against for exercising these rights.

California residents may also request a list of third parties to whom we disclosed personal information for direct marketing purposes during the preceding year.

13. POLICY UPDATES

We may update this Notice from time to time to ensure compliance with relevant laws or to reflect changes in our practices. When we do, we will post a revised version on this page and update the “Last updated” date above. We encourage you to review this page periodically.

14. CONTACT INFORMATION

If you have any questions, requests, or concerns about how we handle your personal information, or if you wish to exercise any applicable rights, please contact us at:

Email: [email protected]

15. ACCESS/UPDATE/DELETE REQUESTS

To access, update, or delete your personal data, please email [email protected]. We will respond as required by applicable data protection laws.

Note: Depending on your jurisdiction, we may need to verify your identity or request additional information before fulfilling your request.

16. GOOGLE USER DATA

This section covers data we receive when you connect a Google account to Treater.

16.1 Data we access

Gmail: when you connect a mailbox to an outreach campaign, we send the emails you write or schedule from that mailbox, create one Treater label and apply it to those emails, and read replies in those threads (including message bodies and attachments). We do not access other email in your mailbox for any other purpose, and we never delete email.
Google Calendar: when you connect a calendar to take meetings, we read your free/busy availability and create the meetings booked through your campaigns, with invitations to attendees. We do not read, change, or delete other events.
Google account profile: your email address and name, to identify the connected account.

16.2 How we use it

We use Google user data only to provide and improve the user-facing features described above: sending your campaign emails, showing replies in your campaign, suggesting responses, and booking meetings. We do not use it for advertising, we do not sell it, and we do not use it to develop, train, or improve any AI or machine learning model.

16.3 How we share it

With your consent, which you give when you connect a Google account and use these features, we share Google user data only with service providers needed to run them, such as our cloud hosting provider and AI model providers that process email content to suggest responses and organize replies. We use these providers under terms that prohibit them from using the data to train their models. We may also disclose data when required by law. We will transfer Google user data as part of a merger, acquisition, or sale of assets only after obtaining your explicit prior consent. Treater personnel do not read your Google user data except specific messages or events you explicitly authorize us to view (for example, in a support request, which we document), when necessary for security or to comply with the law, or when the data has been aggregated and anonymized for internal operations.

16.4 Storage, retention, and deletion

We store Google user data encrypted in transit and at rest on our cloud infrastructure in the United States. We keep campaign emails and meetings for as long as your account or the related campaign is active. You can disconnect a Google account in Treater at any time or revoke access at myaccount.google.com/permissions. To delete data we have received from Google, email [email protected] and we will delete it within 30 days, except where the law requires us to keep it.

16.5 Limited Use

Treater's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.

If you have any further questions about this Privacy Notice or our data practices, please contact us at [email protected].