Last updated January 15, 2026
Treo d.o.o. ("us", "we", or "our") operates the treo.sh website (the "Service").
This page informs you of our policies regarding the collection, use and disclosure of Personal Information when you use our Service.
We will not use or share your information with anyone except as described in this Privacy Policy.
We use your Personal Information for providing and improving the Service. By using the Service, you agree to the collection and use of information in accordance with this policy. Unless otherwise defined in this Privacy Policy, terms used in this Privacy Policy have the same meanings as in our Terms and Conditions, accessible at treo.sh.
While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to, your email address, name ("Personal Information").
We explicitly do not track your website's end-users (visitors). We do not inject scripts into your website or collect Personal Information regarding your customers. We operate primarily on public technical metadata.
We are an EU based company and comply with GDPR. We strongly believe in your right to own and control your personal information within our systems, including the rights to:
Request access to your personal data;
Request correction or deletion of your personal data;
Object to our use and processing of your personal data;
Request portability of your personal data.
If you stop using Treo, all your personal data and backups will be automatically removed after 9 months of inactivity.
We may also collect information that your browser sends whenever you visit our Service ("Log Data"). This Log Data may include information such as computer's Internet Protocol ("IP"), browser type, browser version, the pages of our Service that you visit, the time and date of your visit, the time spent on those pages and other statistics. We retain these access logs for 7 days for security auditing purposes, after which they are permanently deleted.
Cookies are files with small amount of data, which may include an anonymous unique identifier. Cookies are sent to your browser from a web site and stored on your computer's hard drive.
We use "cookies" to collect information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.
We employ third party companies and individuals to facilitate our Service, to provide the Service on our behalf, to perform Service-related services or to assist us in analyzing how our Service is used.
These third parties have access to your Personal Information only to perform these tasks on our behalf and are obligated not to disclose or use it for any other purpose. Our authorized sub-processors are:
Amazon Web Services (AWS): Infrastructure and hosting (USA, us-east-1).
Google Cloud Platform (GCP): Data analysis (USA/Global).
Sentry: Error tracking (USA).
Stripe: Payment processing (USA/Global).
We may use your Personal Information to contact you with newsletters, marketing or promotional materials and other information that may be of interest to you. You may opt out of receiving any, or all, of these communications from us by following the unsubscribe link or instructions provided in any email we send.
We will disclose your Personal Information where required to do so by law or subpoena or if we believe that such action is necessary to comply with the law and the reasonable requests of law enforcement or to protect the security or integrity of our Service.
If Treo d.o.o. is involved in a merger, acquisition or asset sale, your Personal Information may be transferred. We will provide notice before your Personal Information is transferred and becomes subject to a different Privacy Policy.
The security of your Personal Information is important to us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. We implement industry-standard encryption, including TLS 1.3 for data in transit and AES-256 for data at rest. While we strive to use commercially acceptable means to protect your Personal Information, we cannot guarantee its absolute security.
Your information, including Personal Information, may be transferred to — and maintained on — computers located outside of your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.
Important: While we are headquartered in Slovenia, our primary data infrastructure (AWS) is located in the United States. By using the Service, you consent to the transfer of your information to the United States. We rely on standard transfer mechanisms (such as Standard Contractual Clauses or Data Privacy Frameworks) to ensure your data remains protected under GDPR standards.
Our Service may contain links to other sites that are not operated by us. If you click on a third party link, you will be directed to that third party's site. We strongly advise you to review the Privacy Policy of every site you visit.
We have no control over, and assume no responsibility for the content, privacy policies or practices of any third party sites or services.
Our Service does not address anyone under the age of 13 ("Children").
We do not knowingly collect personally identifiable information from children under 13. If you are a parent or guardian and you are aware that your child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a children under age 13 without verification of parental consent, we take steps to remove that information from our servers.
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.
You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.
If you have any questions about this Privacy Policy, please contact us.
January 15, 2026. Added details about international data transfers and sub-processors.
August 1, 2024. Updated the company legal name to Treo d.o.o.
February 15, 2022. Remove usage of Intercom and Google Analytics in the app.
May 25, 2018. Explained the use of personal data and the rights to control it regarding GDPR.
August 28, 2017. Initial revision.