Privacy policy

Who is responsible

The controller of the personal data described here is Treant’s founders, David Zlatanoski and Ivica Petojevik, based in Slovenia (“we”, “us”). Treant is the name we work under; it is not a registered company yet. The EU General Data Protection Regulation (GDPR) and the Slovenian Personal Data Protection Act (ZVOP-2) apply.

Questions about your data go to privacy@treant.app. Both founders read it.

When you contact us

All three sites send you to one Contact form, on treant.app/contact, whether you want to book a demo of Bloom, apply for the Pilot program, talk to sales, join the Sprig Waitlist or ask something else. When you send it, we save:

• your first name, and your last name if you give it;
• your work email address;
• the product and the reason you chose;
• your company website and your message, if you give them;
• which of our sites you came from, and the date you sent it.

The spam check on the form

To keep automated spam out, the Contact form uses Cloudflare Turnstile. While the form is open, Turnstile checks technical signals from your browser, such as your IP address and browser details, to tell people from bots. We only receive the result of the check.

What each site collects besides the form

Like most websites, our servers record technical data when you load a page, such as your IP address, your browser and the time of the request. We use it only to keep the sites running and secure. Besides that:

• treant.app collects nothing more.
• bloom.treant.app counts visits and measures page speed with Vercel Web Analytics and Vercel Speed Insights. They use no cookies and see things like the page you opened, your browser and your country, but nothing that identifies you.
• sprig.treant.app counts visits with Vercel Web Analytics, in the same way.

Cookies

None of our sites uses cookies for tracking or advertising, and we don’t track you across other websites.

Why we use it

We use your data to:

• read your request, reply to it and follow up, for example about a demo call, the Pilot program or a Managed Instance;
• email the people on the Sprig Waitlist about Sprig’s launch;
• see which pages people visit, so we can make the sites better;
• keep the sites and the Contact form secure and free of spam.

Legal basis

We answer your request because you asked us to, which includes steps you asked for before a possible agreement (Article 6(1)(b) GDPR).

Joining the Sprig Waitlist is your consent to emails about Sprig’s launch (Article 6(1)(a) GDPR). You can withdraw it at any time, and every email we send has an unsubscribe link.

Server logs, anonymous visit counts and the spam check rest on our legitimate interest in running useful and secure websites (Article 6(1)(f) GDPR).

We don’t sell your data, we don’t use it for advertising and we don’t use it to train AI models.

Who handles it for us

We keep Contact requests in our own database, not in a third-party sales or waitlist tool. Four providers help us run the sites. They process data only on our behalf and may not use it for their own purposes:

• Vercel hosts the three sites and provides the visit counts.
• Neon hosts our database, which stores Contact requests in Frankfurt, Germany.
• Resend delivers each Contact request to our inbox by email.
• Cloudflare runs the Turnstile spam check on the Contact form.

Transfers outside the EU

Vercel, Neon, Resend and Cloudflare are US companies. Where your data reaches them outside the EU, the transfer is covered by the EU-US Data Privacy Framework. We don’t share your data with anyone else, unless the law requires us to.

How long we keep it

• Sprig Waitlist: until 6 months after Sprig launches, or sooner if you ask us to remove you.
• Every other Contact request: we delete it 12 months after our last exchange, unless your company becomes a customer or joins the Pilot program and we need it for that relationship.
• Sign-ups from the earlier forms on bloom.treant.app and sprig.treant.app follow the same rules.
• Server logs are deleted on a rolling basis.

Your rights

Under the GDPR you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct data that is wrong;
• delete your data;
• restrict or stop using it, or object to how we use it;
• send your data to you or another company in a common format;
• stop using it where you gave your consent, such as for the Waitlist.

How to ask

Email privacy@treant.app. We’ll reply within 30 days.

Complaints

If you think we have mishandled your data, please tell us first so we can fix it. You also have the right to complain to the Information Commissioner of the Republic of Slovenia (Informacijski pooblaščenec, ip-rs.si), or to the data protection authority where you live or work.

Changes

If we change what we collect or how we use it, we’ll update this page and the date at the top. Before an important change, we’ll email the people on the Sprig Waitlist.