Privacy Policy
Last updated: June 6, 2026
1. Introduction
Treeada ("the Platform," "the Service") is operated by Naviram Global Tech ("we," "us," "our"). This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our platform.
By creating an account or using any part of the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, please do not use the Service.
This policy applies to all users, including Maestros (content creators) and Students (content consumers), as well as visitors who browse the Platform without an account.
2. Data We Collect
Information You Provide
| Category | Data | Who |
|---|---|---|
| Account Registration | First name, last name, display name, email address, password (hashed) | All users |
| Profile Information | Profile picture, cover photo, bio, country, phone number, preferred language | All users |
| Social Accounts | Instagram username, connected YouTube channel, connected TikTok account | Maestros |
| Payment Information | PayPal email, Stripe Connect account ID, Tilopay subscriber ID | Maestros |
| Content | Videos, sheet music (MusicXML), lesson text, course metadata, blog posts | Maestros |
Treeada does not store full credit/debit card numbers. All card processing is handled directly by our payment providers (Stripe, PayPal, Tilopay).
Information Collected Automatically
| Category | Data | Purpose |
|---|---|---|
| Usage & Progress | Lessons viewed, completion status, video playback position, timestamps | Track learning progress, show completion to Maestros |
| Account Activity | Last sign-in time, last activity time, password change history | Account security, fraud prevention |
| Transaction Records | Purchase amount, currency, payment provider, transaction ID, date | Billing records, invoices, earnings reporting |
| Session Data | Session tokens, authentication cookies | Keep you signed in, maintain session state |
Information from Third Parties
When you connect external accounts, we may receive:
- YouTube: Channel ID, channel URL, uploads playlist ID, public video metadata (titles, thumbnails)
- TikTok: Account identifier, public video URLs and metadata
- Instagram: Public post URLs for profile display
- Payment providers: Transaction confirmations, subscription status updates, webhook notifications
We store OAuth tokens necessary to maintain these connections. We do not access your private messages, unpublished content, follower lists, or analytics data from any third-party platform.
3. How We Use Your Data
We use the information we collect to:
Provide & Operate the Service
- Create and manage your account
- Display your profile to other users (Maestro profiles are public)
- Process course purchases and subscription payments
- Track and display your learning progress within courses
- Generate purchase invoices and receipts
- Deliver email notifications (account confirmations, purchase receipts, password resets)
Improve & Protect the Platform
- Monitor content for copyright compliance (automated keyword flagging and audio fingerprinting)
- Detect and prevent fraud, abuse, and unauthorized access
- Provide aggregated, anonymized analytics to Maestros (student counts, completion rates, country breakdown)
- Debug technical issues and improve platform performance
Communicate with You
- Send transactional emails (purchase confirmations, subscription updates, security alerts)
- Notify Maestros about content review results, sale seasons, and platform updates
- Respond to support requests
We do not send unsolicited marketing emails. All communications are related to your account activity or features you have opted into.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract performance: Processing necessary to provide the Service you signed up for (account management, payment processing, content delivery).
- Consent: Where you have given explicit consent, such as connecting third-party accounts (YouTube, TikTok, Instagram) or agreeing to these terms at registration.
- Legitimate interests: Fraud prevention, platform security, content moderation, and service improvement, where these interests do not override your rights.
- Legal obligation: Where we are required to retain or disclose data by applicable law (e.g., tax records, legal proceedings).
6. Data Retention
We retain your data for as long as necessary to provide the Service and fulfill the purposes described in this policy:
- Active accounts: Data is retained for the lifetime of your account.
- Deleted accounts: Upon account deletion, we remove your profile and content from the Platform. Some data may be retained for up to 90 days in backups. Certain records (transaction history, invoices) may be retained longer as required by tax and accounting laws.
- Transaction records: Purchase and payment records are retained for a minimum of 7 years to comply with financial reporting and tax obligations.
- Security logs: Account activity logs (sign-ins, password changes) are retained for up to 12 months for security and fraud prevention purposes.
7. Security
We implement industry-standard measures to protect your data:
- All data in transit is encrypted using TLS/HTTPS
- Passwords are hashed and never stored in plain text
- Two-factor authentication (2FA) is available for all accounts via authenticator apps
- Payment card data is handled exclusively by PCI-compliant payment providers (Stripe, PayPal, Tilopay)
- Payout email changes require identity verification and are subject to a security cooldown period
- Database access is restricted and encrypted
While we take reasonable precautions to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. If you believe your account has been compromised, please contact us immediately at support@treeada.com.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete personal data. You can update most information directly through your account settings.
- Deletion: Request deletion of your personal data. You can delete your account through your account settings. Some data may be retained as described in the Data Retention section.
- Data portability: Request a machine-readable copy of data you have provided to us.
- Withdraw consent: Where processing is based on consent, you may withdraw it at any time. For third-party integrations, you can disconnect accounts through your profile settings or revoke access directly through the third-party provider.
- Objection: Object to processing based on legitimate interests.
To exercise any of these rights, contact us at support@treeada.com. We will respond to requests within 30 days. We may request identity verification before processing your request.
Revoking Third-Party Access
You can revoke Treeada's access to connected accounts at any time:
- YouTube / Google: Google Security Settings
- TikTok: Manage connected apps in your TikTok account settings
- Instagram: Manage connected apps in your Instagram account settings
Revoking access will disconnect the integration from your Treeada profile. Previously imported public data (e.g., featured video URLs) may remain visible until you update your profile.
9. Children's Privacy
Treeada is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without parental consent, we will take steps to delete that information.
Users between 13 and 18 may use the Service with the consent of a parent or legal guardian. Payment features require users to be at least 18 years of age or have parental/guardian authorization.
If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at support@treeada.com.
10. Cookies & Similar Technologies
Treeada uses cookies and similar technologies for the following purposes:
- Essential cookies: Required for authentication, session management, and security. These cannot be disabled without breaking core functionality.
- Functional cookies: Remember your preferences (language, theme).
We do not use third-party advertising or tracking cookies. We do not participate in ad networks or cross-site tracking.
Embedded content from third-party services (YouTube, TikTok, Instagram) may set their own cookies when loaded. These are governed by the respective third party's cookie policies.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence. Our service providers (Stripe, PayPal, Mux, Microsoft, etc.) operate globally. By using the Service, you consent to the transfer of your data to these jurisdictions.
We ensure that any international transfers are subject to appropriate safeguards, including the use of standard contractual clauses and provider certifications where applicable.
12. Changes to This Policy & Contact
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable laws. We will post the updated policy on this page and update the "Last updated" date. For material changes, we may notify you by email.
Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.
Contact Us
If you have questions, concerns, or requests regarding your privacy or this policy, contact us:
- Privacy & Support: support@treeada.com
- Legal & Data Requests: legal@treeada.com
By using Treeada, you acknowledge that you have read and understood this Privacy Policy.