- We never sell or share personal information, and we run no third-party advertising trackers.
- Website analytics run on our own self-hosted Matomo (stats.greentreehosting.net) with IP addresses truncated before storage.
- We honor the Global Privacy Control (GPC) and Do Not Track signals, and your Cookie Preferences choice.
- You can request access, correction, deletion, or a portable copy of your data at privacy@greentreehosting.com.
- Inquiries and uploads are used only to answer your request and are never used to train public AI models.
1. Who We Are and What This Policy Covers
GreenTree Hosting, LLC ("GreenTree," "we," "us") is a web application engineering, managed cloud, and enterprise email company headquartered in Southbury, Connecticut 06488. Our founders have been in web technology since 1997 and GreenTree has operated since March 2007.
This policy covers greentreehosting.com and its subdomains, our public software and library sites, our inquiry and order forms, and our customer portal at customers.greentreehosting.com. When we host a client's website, mailbox, or application, that client is the controller of the data its own visitors and users provide, and GreenTree acts only as its processor or service provider under the client's agreement.
2. Information We Collect
We collect the minimum information needed to answer you, run the service, and keep it secure.
| Category | Examples | Why we collect it |
|---|---|---|
| Inquiry and order details | Name, email, company, phone, project description, and anything you type or upload into our contact, order, or scoping forms. | To respond to you, prepare a quote or proposal, and provision services you order. |
| Customer account data | Account contact details, service records, support tickets, and billing history in the customer portal. | To deliver, support, and bill the services you buy. |
| Technical and security data | IP address, browser and device type, request timestamps, and anti-abuse signals such as honeypot fields and form-fill timing. | To keep the site and your data secure and to block spam and automated abuse. |
| Website analytics | Pages viewed, referrer, device and browser, approximate location derived from IP, and time on page, collected by our self-hosted Matomo. | To understand which pages help visitors and to improve them. |
| Assistant conversations | Messages and contact details you enter into the AI Concierge widget, where it appears on a page. | To answer questions and, if you ask, route your request to a person. |
| Preferences | Your cookie and telemetry choice, stored in your browser. | To remember your privacy choices. |
3. How We Use Information
- Respond to inquiries, scope projects, deliver and support services, and process orders.
- Secure our systems, detect abuse, and keep the 60-second external health checks accurate.
- Measure and improve page performance and content using aggregate first-party analytics.
- Meet legal, accounting, and regulatory obligations.
- We do not use your information for third-party advertising, do not sell it, and do not use customer inquiries or uploads to train public third-party AI models.
4. Legal Bases (EEA and UK Visitors)
Where the EU/UK GDPR applies, we rely on: consent for optional analytics (Article 6(1)(a)); performance of a contract or steps you request before a contract (Article 6(1)(b)); legal obligation (Article 6(1)(c)); and our legitimate interests in network security and spam prevention (Article 6(1)(f)). You can withdraw consent at any time from Cookie Preferences in the site footer.
5. Analytics, Cookies, and Global Privacy Control
Analytics run on our own Matomo instance at stats.greentreehosting.net. We do not use Google Analytics, advertising pixels, or social media trackers. Visitor IP addresses are truncated (the final IPv4 octet is masked) before they are stored.
We honor browser opt-out signals. If your browser sends the Global Privacy Control signal (Sec-GPC: 1) or Do Not Track, or you choose "Essential Only" in Cookie Preferences, our analytics script does not run. See the Cookie Policy for the exact cookies and browser storage we use.
7. Retention
We keep inquiry and account records for as long as needed to serve you and meet legal and accounting requirements, then delete or de-identify them. Analytics are used in aggregate for trend analysis, and a verified request lets you have records tied to your email address or domain deleted. Encrypted backups age out on their normal rotation.
8. Security
We apply administrative, technical, and physical safeguards designed to be consistent with Massachusetts 201 CMR 17.00 and similar state standards: TLS encryption in transit, isolated per-site databases, access controls, automated off-site backups, 60-second external monitoring, and a multi-layer form shield against automated abuse. No system is perfectly secure, and we will notify affected individuals and regulators as required by law if a breach occurs.
9. Where Data Is Processed
Our infrastructure runs in the United States and Canada. If you access our services from outside those countries, your information will be transferred to and processed there, with the safeguards described in this policy.
10. Your Privacy Rights
Depending on where you live, you have some or all of the following rights. We extend them to every visitor regardless of location.
| Right | What it means | Applies under |
|---|---|---|
| Access and portability | Confirm whether we hold your data and receive a portable copy. | GDPR/UK GDPR, CCPA/CPRA, CTDPA, NHDPA |
| Correction | Fix inaccurate personal information. | GDPR/UK GDPR, CCPA/CPRA, CTDPA, NHDPA |
| Deletion | Ask us to delete personal information, subject to legal retention duties. | GDPR/UK GDPR, CCPA/CPRA, CTDPA, NHDPA |
| Opt out of sale, sharing, targeted advertising, and profiling | We do none of these, and every visitor is opted out by default. | CCPA/CPRA, CTDPA, NHDPA |
| Withdraw consent / object | Withdraw analytics consent or object to processing based on legitimate interests. | GDPR/UK GDPR |
| Appeal | If we deny a request, you may appeal and we will respond in writing with the outcome. | CTDPA, NHDPA and other state laws |
| Non-discrimination | We will not penalize you for exercising your rights. | CCPA/CPRA and other state laws |
11. How to Make a Request
Email privacy@greentreehosting.com or use our Contact page and tell us which right you want to exercise and the email address or domain associated with your records. We verify your identity before acting, respond within 45 days (extendable once by 45 more days where permitted, with notice), and never charge for a reasonable request. An authorized agent may submit a request on your behalf with proof of authorization.
12. Children
Our services are for businesses and are not directed to children under 16. We do not knowingly collect personal information from children, and we will delete it if we learn we have.
13. Changes and Contact
We will post changes here with a new effective date. Questions or concerns: privacy@greentreehosting.com or GreenTree Hosting, LLC, Southbury, Connecticut 06488, USA.