Privacy Policy

What you give us when you sign up. Your name, email address, phone number and a password. The password is stored only as a bcrypt hash — we cannot read it, and neither can anyone who obtains a copy of our database.

Your business profile. Business name, description, logo and cover image, the services you offer with their rates, certifications, gallery photos, upcoming travel dates, and your service area — an address, the city, state and county we derive from it, its coordinates, and the radius you work within.

What you post and do. Jobs you create, including their description, photos and site address; applications you send; who you hire; reviews you write; and the messages you exchange with other members.

Technical information. Your IP address, recorded against rate-limited actions such as sign-up, password reset and the contact form, so that those can’t be abused. Sign-in state lives in a signed cookie. If you use “Use my location”, your browser gives us coordinates for that search only — we ask each time, and we do not store them on your account.

What you send us directly. Contact-form messages, feedback, and reports about another member’s conduct, together with your name and email so we can reply.

• To run the marketplace — showing your profile in search results, matching jobs to providers by service and distance, and carrying applications, hires and reviews through to completion.
• To reach you about your own activity — a job matching your services, an application on your job, a hire, a message, a request for a review. You control these in your profile settings.
• To keep accounts secure — verifying sign-in, rate-limiting sensitive actions, and ending sessions when a password changes.
• To answer you when you use the contact form, send feedback, or report someone.
• To meet legal obligations and to enforce our Terms of Service.

We do not use your information for advertising, we do not build advertising profiles, and we do not sell or rent it to anyone.

This is the part worth reading closely, because a marketplace only works if some things are visible.

Public to anyone, including people who aren’t signed in: your business name, logo, description, services and rates, certifications, gallery, city and state, your rating, and the reviews written about you — including the reviewer’s business name and the text they wrote. Open job listings are public too, and are indexed by search engines.

Redacted until someone signs in: a job’s street address and the full text of its description. Signed-out visitors see the city and state and a shortened description.

Never public: your email address, your phone number, your password, messages between you and another member, and reports you file about someone. Your phone number is used to send you alerts and is not shown to other members.

You can be left out of search. Turning off the searchable setting on your profile removes you from provider results while leaving your account intact.

Reviews are permanent. A review publishes the moment it is submitted and stays on the profile it was written about. You can’t withdraw one because you disliked the reply.

We share information with the companies that make the service work, and with nobody else except as described here. Each receives only what its job requires.

• Other members — the public parts of your profile, and the details of a job or application you are party to.
• Twilio — your phone number and the message text, to send SMS alerts and to receive your replies.
• Mailgun — your email address and the message text, to send email alerts and account email such as password resets.
• Google Maps Platform — the addresses you type and, if you allow it, your browser’s location, to turn them into coordinates and to draw maps. Google receives these as part of serving the map.
• Google reCAPTCHA, where it is enabled on a public form, to tell people from bots.
• DigitalOcean — our hosting provider. Your data is stored on servers and volumes we run there.

We may also disclose information if the law requires it, to investigate a credible safety concern, or as part of a merger or sale of the business — in which case this policy travels with the data, and we’ll tell you before anything about it changes.

Treelign does not sell, rent, or share mobile phone numbers or SMS opt-in consent with third parties or affiliates for their marketing or promotional purposes. SMS opt-in data and consent are used solely to provide the messaging services requested by the user. Message frequency varies. Message and data rates may apply.

Mobile information will not be shared with third parties or affiliates for marketing or promotional purposes. We may share mobile information with service providers solely as necessary to deliver our messaging services. Message frequency varies based on account activity. Message and data rates may apply. Reply STOP to opt out or HELP for help.

In practice that means your phone number goes to Twilio, and to nobody else, so that the alerts you asked for can be delivered — see Who we share it with for the full list of processors. SMS alerts are off unless you turn them on, and you give the number yourself: we never buy or append phone numbers.

The messages are recurring, and turning the switch on is not by itself consent: you also tick a box agreeing to receive them, directly beneath the disclosure. It is never pre-ticked, and neither the signup step nor the account setting will save with SMS on until it has been ticked.

You can stop the messages at any time, either by replying STOP to one of them or by switching SMS alerts off under Alerts in your account menu. Turning the switch off also clears the number from your profile.

We keep your account and profile for as long as your account exists. Jobs, applications, hires and reviews are kept as a record of work done on the platform, because they are what other members rely on when deciding who to work with.

Some things expire on their own: password reset links after a short window, and the records behind rate limiting after an hour.

When you ask us to delete your account, we deactivate it and remove your profile from search and from public view. We may retain the minimum needed to keep other members’ records coherent — a review you wrote about someone else stays on their profile, and the fact that a job was worked stays with that job — and to meet legal obligations.

• Edit anything. Your profile, services, rates, service area and travel dates are all editable from your profile at any time.
• Turn alerts off. SMS and email alerts each have their own switch in your profile settings. Reply STOP to any SMS to stop those. We will still send essential account email — a password reset, for example — because those aren’t marketing.
• Leave search. Turn off the searchable setting to keep your account without appearing in provider results.
• Ask for a copy, a correction, or deletion. Write to info@treelign.com and we’ll respond within the time the applicable law allows.
• Refuse location access. The browser prompt is optional; typing an address does the same work.

Depending on where you live — California and several other US states, or the UK/EU — you may have additional rights to access, correct, delete, or object to our use of your information, and to be free from discrimination for exercising them. We do not sell personal information or share it for cross-context behavioural advertising, so there is nothing to opt out of on that front.

Passwords are hashed with bcrypt and never stored in a readable form. Traffic is encrypted in transit. Changing your password ends every other signed-in session immediately, so a device you no longer trust stops working rather than waiting for a cookie to expire. Sensitive routes are rate-limited, and the server is protected against repeated intrusion attempts.

No system is perfectly secure, and we won’t claim otherwise. If a breach affects your information, we will notify you and the relevant authorities as required by law.

Treelign is a service for businesses and is not directed at anyone under 18. We don’t knowingly collect information from children. If you believe a child has given us information, write to info@treelign.com and we will delete it.

We’ll update this page when what we do changes, and the effective date at the top will change with it. If a change materially affects your rights, we will tell you by email or in the app before it takes effect rather than relying on you to notice.

Questions about this policy, or a request about your information, go to info@treelign.com, or by post to:

Treelign Business Inc.

This policy is governed by the laws of , without regard to its conflict-of-laws rules.