1. Overview
TreeSight ("Service"), operated by JabLab ("we", "us", "our"), respects your privacy. This policy explains what data we collect, how we use it, and your rights regarding that data.
2. Data We Collect
| Data Type | What | Why | Retention |
|---|---|---|---|
| KML/KMZ files | Polygon geometries you upload | To run satellite imagery analysis | Automatically deleted after 30 days |
| Analysis results | NDVI, weather data, AI insights | To display results to you | Automatically deleted after 30 days |
| Early access form | Organisation, use case, email | To contact you about access | Until you request deletion |
| Server logs | IP address, timestamps, request metadata | Operations, debugging, security | 90 days (Azure Application Insights) |
3. How We Use Your Data
We use your data exclusively to:
- Process your KML/KMZ files and deliver analysis results
- Operate and improve the Service
- Respond to your enquiries and support requests
- Monitor for security issues and abuse
We do not sell, rent, or share your data with third parties for marketing purposes.
4. Third-Party Services
The Service uses the following third-party infrastructure:
- Microsoft Azure — hosting, storage, and Application Insights telemetry (UK South region)
- Microsoft Planetary Computer — satellite imagery sourcing (STAC API)
- Azure AI Foundry / Ollama — AI-powered analysis insights
- Open-Meteo — weather data enrichment
Each provider processes data under their own privacy policies. We select providers with strong data protection practices.
5. Data Retention
Uploaded files and analysis results are automatically deleted after 30 days. This retention period is designed to give you time to retrieve results while minimising unnecessary data storage.
Server logs are retained for 90 days in Azure Application Insights for operational and debugging purposes, then automatically purged.
6. Data Security
We protect your data with:
- Encryption in transit (TLS 1.2+) and at rest (Azure Storage encryption)
- Tenant-scoped blob access via time-limited valet tokens
- No long-lived credentials stored in application code
- Security headers on all web responses
7. Your Rights
Under applicable data protection laws (including UK GDPR), you have the right to:
- Access — request a copy of the data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your data
- Portability — receive your data in a structured format
- Object — object to processing for certain purposes
To exercise any of these rights, contact us via the Early Access form or our GitHub repository.
8. Cookies
TreeSight does not use cookies or tracking scripts. We do not use any analytics services that track individual users across the web.
9. Changes to This Policy
We may update this policy as the Service evolves. Changes will be indicated by updating the "Last updated" date at the top of this page. Continued use of the Service constitutes acceptance of the updated policy.
10. Contact
Questions about this policy? Reach us via the Early Access form or open an issue on our GitHub repository.