Join preview

Privacy Policy

Last updated October 21, 2026

About this Privacy Policy

Treeverse, Inc. and Treeverse Labs Ltd. (the “Company,” “Treeverse,” “we,” “our” or “us”) present this privacy policy (the “Privacy Policy”), which applies to:

  • any individual who visits and interacts with our website, https://grepvine.ai/, including its subdomains (the “Website”), and uses its related services; and
  • any contact at our customers and other business partners who contacts us.

Each such individual is referred to as “User,” “you” or “your.”

This Privacy Policy describes how we collect, use, share, store and otherwise process personal information (as defined below). For any questions or requests under this Privacy Policy, please email us at privacy@lakefs.io.

Please read this Privacy Policy carefully to understand how we process your personal information. By accessing or browsing the Website and using its related services, or otherwise sharing your personal information with us, you confirm that you have read and understood the terms of this Privacy Policy.

1. What personal information do we collect about you and for what purposes?

1.1 Definition

When we use the term “personal information” in this Privacy Policy, we mean any information that identifies, relates to, describes, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a particular person, consumer or household, or an identified or identifiable natural person.

1.2 General provisions

We hereby inform you, and you hereby acknowledge, that you have no legal obligation to provide us with any personal information when you use the Website or contact us, and that providing it is solely based on your free will. However, without receiving personal information it may not be possible to operate the Website and its services or to handle your requests.

1.3 Collected personal information, purposes and EU legal basis

We collect and process the following categories of personal information for the purposes identified below, and we retain such personal information as described in Section 4.

Contact information and promotional activities

What we collect
  • Identifiers or identification information (first name, last name)
  • Contact details (email address)
  • Professional information (company, job title or role)
Sources

You provide this information directly and voluntarily through forms on the Website, including when you sign up for a free trial or contact us, and during our business and marketing communications (including correspondence, sensory information such as call recordings, and transcriptions and analyses thereof).

You, or third parties you have authorized, may also provide this information in connection with a webinar, business conference, meetup or similar event you attended.

PurposeHow we use itLegal basis (EU Users only)
Managing requests
  • To respond to your inquiry and provide you with information
  • To contact you if necessary
 Treeverse’s legitimate interest in managing its requests
Managing our marketing activities

If you sign up to receive our promotional materials, we use this information:

  • To send you newsletters, marketing communications and other content that may interest you
  • To manage your marketing communication preferences
  • To register you for webinars, events or other promotional activities
  • To measure the effectiveness of our communications
  • To improve the relevance and quality of future marketing communications
  • To maintain and improve our mailing lists
  • To understand aggregate campaign performance
  • To support the operation and security of our email communications
 Your consent

Automatically collected information and online identifiers

What we collect

We automatically collect technical information when you visit and interact with the Website:

  • Technical information, including the Internet Protocol (IP) address used to connect your device to the internet, domain name, the type of device used to access the Website (desktop or mobile), browser type and the country from which the request originates
  • Information about your visit and usage of the Website, including traffic data, pages viewed, referring pages, weblogs and other communication data
  • Approximate location information, which may be determined through your IP address
Sources

This information is automatically collected or generated when you use the Website, either directly by us or through third-party cookies and similar tracking technologies. See Section 7 for the providers we use.

PurposeHow we use itLegal basis (EU Users only)
Improving the Website
  • To monitor and analyze your use of the Website
  • To evaluate, develop, enhance, analyze and improve the Website
  • To facilitate your visit to the Website
  • For research and development, analysis and statistics
 Your consent, where required for non-essential cookies; otherwise Treeverse’s legitimate interest in improving its Website
Understanding engagement and managing marketing
  • To understand which organizations and community members engage with the Website and our open-source projects
  • To associate Website visits with contact information you have already provided to us
  • To measure the effectiveness of our marketing activities
 Your consent
Supporting and enhancing our data security measures
  • To monitor, investigate bugs and improve the Website
  • To prevent and mitigate the risks of fraud, error or any illegal, criminal or prohibited activity
 Treeverse’s legitimate interest in securing its Website

In addition, we may use some of the personal information described above to:

  1. manage any litigation, for example to take action against an identified security breach, manage any dispute or litigation, and seek advice from lawyers, auditors and other professional advisers. This processing is based on our legitimate interest in defending our rights and interests;
  2. comply with legal and regulatory obligations, for example to perform any reporting and notification obligations we may be subject to toward competent governmental agencies and authorities; process your requests to exercise your rights; and detect, investigate, prevent or take action against illegal activities, fraud or situations involving potential threats to the rights of others. This processing is based on the legal and regulatory obligations to which we are subject.

2. With whom do we share your personal information?

2.1 Third parties

We share your personal information with third parties as described below:

  1. With our service providers and subcontractors that perform functions on our behalf and assist us in the ongoing operation of the Website or our other services and business offerings, including technical, IT, hosting, logistical, call recording and administrative service providers, and insurers.
  2. To the extent required or authorized by law, if we believe it is necessary to comply with the law, or if we need to do so to protect or defend our legal rights or the rights of others (including to investigate and protect our users from fraudulent or unlawful use of the Website), with third parties requiring information for legal reasons, third-party investigators, authorities, regulators or law enforcement bodies.
  3. With any of our affiliates, where we consider that it is in our legitimate interests to do so for internal administrative purposes (for example, corporate strategy, compliance, auditing and monitoring, research and development, and quality assurance).
  4. With companies that assist us in our marketing, advertising and promotional activities, such as HubSpot and Common Room.
  5. With analytics providers that assist us in improving and optimizing the Website and that process personal information in the context of providing analytics services to us, such as Google Analytics.

We will not sell or otherwise disclose personal information for monetary or other consideration to any third parties (and have not done so over the last twelve (12) months).

We will not share your personal information for cross-context behavioral advertising (and have not done so over the last twelve (12) months).

2.2 Other disclosures

We will also disclose your personal information to third parties:

  1. Where it is in our legitimate interests to do so to run, grow and develop our business:
    1. if we sell or buy any business or assets, we will disclose your personal information to the prospective seller or buyer of such business or assets; and
    2. if the Company or substantially all of its assets are acquired by a third party, in which case personal information held by Treeverse will be one of the transferred assets.
  2. To establish, protect or exercise our legal rights, as required to enforce our Terms of Use or other contracts; to defend against legal claims or demands; and to detect, investigate, prevent or take action against illegal activities, fraud or situations involving potential threats to those rights.
  3. To protect the rights, property or safety of Treeverse, our employees, customers, suppliers or other persons.
  4. If we are under a duty to disclose or share your personal information in order to comply with any legal obligation or any lawful request from government or law enforcement officials, and as may be required to meet national security or law enforcement requirements or prevent illegal activity.

3. How is your personal information transferred outside of the European Economic Area (“EEA”) and Israel?

3.1 General provisions

Your personal information will be used, stored and/or accessed by staff operating outside the EEA working for us, our affiliates or third-party suppliers. These non-EEA countries include the State of Israel, where Treeverse Labs Ltd. is based, and the United States, where our cloud storage providers’ main data centers are located.

3.2 International transfers of personal information from the EEA

When transferring personal information outside the EEA, we will usually:

  1. in accordance with Article 45 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the General Data Protection Regulation, “GDPR”), ensure that the country in which your personal information will be handled (such as the State of Israel) has been deemed “adequate” by the European Commission; or
  2. in accordance with Article 46(2) of the GDPR and in the absence of an adequacy decision, implement all necessary measures through appropriate safeguards, such as incorporating the standard contractual clauses (“SCCs”) approved by the European Commission into our contracts with those third parties.

3.3 International transfers of personal information from Israel

When transferring personal information outside Israel, the transfer takes place on the basis of:

  1. a transfer to a country recognized as offering an equivalent level of protection by the Israeli Privacy Protection Authority; or
  2. otherwise, your consent to the transfer of your personal information to other jurisdictions, understanding that in some countries the level of protection may be lower than under Israeli law.

4. For how long do we keep your personal information?

Subject to Section 8.4, we retain your personal information for as long as we reasonably deem necessary to provide you with the Website and its related services. We may retain your personal information for longer periods where: (i) we are required to do so to comply with applicable laws; or (ii) it is needed to establish, exercise or defend our legal rights, and we reasonably believe there is a prospect of litigation.

5. How do we keep your personal information secure?

5.1 We use appropriate technical and organizational measures to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access.

5.2 Your personal information is likely to be transferred over the internet and/or stored on cloud-based servers. Although we make every effort to protect the personal information you provide to us, the transmission of information over the internet and storage on cloud-based servers is not completely secure. As such, you acknowledge and accept that we cannot guarantee the security of personal information transmitted to, or automatically created by, the services we offer, and that any such transmission is at your own risk. If you have found a vulnerability or would like to report a security incident, please email privacy@lakefs.io.

6. What rights do you have regarding your personal information?

6.1 General provisions

Individuals have certain rights regarding their personal information, depending on their jurisdiction. If you wish to exercise your rights, contact us at privacy@lakefs.io. We will consider all such requests and respond within a reasonable period (and in any event within any time period required by applicable law).

When you ask us to exercise any of your rights under this Privacy Policy and applicable law, we may need to ask you for certain credentials to make sure you are who you claim to be, to avoid disclosing to you personal information related to others that you are not authorized to receive, and to ask you questions to better understand the nature and scope of the personal information you request to access.

We may redact from the personal information we make available to you any personal information related to others.

6.2 Rights of Israeli Users

If you are based in Israel, you are entitled to ask us to:

  1. review and access the personal information we process about you; and
  2. update, amend or delete personal information that is incomplete, incorrect, outdated or unclear.

6.3 Rights of individuals in the European Union

6.3.1 If our processing of your personal information is subject to the GDPR, you are entitled to ask us to:

  1. give you access to your personal information, confirm whether or not personal information about you is being processed, provide clear, transparent and understandable information on how it is being processed, and provide a copy of it;
  2. rectify any of your personal information that is obsolete, inaccurate or incomplete;
  3. delete any personal information we hold about you (the “right to be forgotten”);
  4. restrict the way we process your personal information for a limited period of time;
  5. consider any valid request to transfer your personal information to a third-party service provider (data portability);
  6. consider any valid objection you have to our use of your personal information where the processing is based on Treeverse’s legitimate interest; and
  7. withdraw your consent where it has been obtained, without this withdrawal affecting the lawfulness of processing previously carried out.

6.3.2 We will consider all such requests and respond within a reasonable period (and in any event within any time period required by applicable law). Please note that these rights do not always apply and there are certain exceptions to them. We will also need to confirm your identity before acting on certain requests, to ensure that personal information is not disclosed to an individual who does not have the right to receive it.

6.3.3 If you have a complaint about how we use your personal information, we would always prefer that you contact us first. However, you may also make a complaint to the data protection authority in the EU country where you are based. If you are unsure which data protection authority to contact, please contact us at privacy@lakefs.io.

6.4 Rights of California residents

If our processing of your personal information is subject to the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”), you are entitled to the following rights:

  1. to request what personal information we have collected, including the categories of personal information, the categories of sources from which it is collected, the business or commercial purpose for collecting, selling or sharing it, the categories of third parties to whom we disclose it, and the specific pieces of personal information we have collected about you;
  2. to request, subject to certain exceptions, the deletion of personal information we have collected or maintain about you;
  3. to request the correction of inaccurate personal information we maintain about you;
  4. to the extent applicable, to opt out of the “sharing” of your personal information for “cross-context behavioral advertising,” often referred to as “interest-based advertising” or “targeted advertising”;
  5. to the extent applicable, to opt out of the sale of your personal information to third parties;
  6. in certain circumstances and to the extent applicable, to opt out of the use of automated decision-making in relation to your personal information;
  7. under certain circumstances, and to the extent we use or disclose “sensitive personal information” (“SPI”), to limit the use or disclosure of SPI;
  8. to receive a copy of your personal information, including specific pieces of personal information and, where applicable, a copy of the personal information you provided to us in a portable format; and
  9. not to receive discriminatory treatment when you exercise your rights under the CCPA.

Only you, or a person registered with the California Secretary of State whom you authorize to act on your behalf, may make a request related to your personal information. If you are an authorized agent making a request on behalf of another individual, you must provide signed documentation showing that you are authorized to act on that individual’s behalf.

7. Cookies and similar technologies

7.1 What are cookies?

Cookies and similar technologies such as pixels, tags, scripts and local storage (together, “Cookies”) are small pieces of data that a website stores on, or reads from, your browser or device. We use both first-party Cookies, set by the Website, and third-party Cookies, set by a domain other than the Website’s.

  • Strictly necessary Cookies make the Website work, keep it secure and remember choices you make, such as your color theme and your cookie preferences. They cannot be switched off.
  • Analytics Cookies help us understand how visitors use the Website, so we can measure and improve it.
  • Marketing Cookies help us understand which organizations engage with us and measure our marketing activities.

Where required by applicable law, we ask for your consent before setting analytics or marketing Cookies, and you can change or withdraw your consent at any time through the on the Website. If your browser sends a Global Privacy Control signal, we treat it as an opt-out of marketing Cookies and keep them off, whatever you choose in the cookie settings.

7.2 Cookies and third-party services we use

ProviderPurposeCategory
Grepvine (first party) Remembers your color theme and your cookie preferences in your browser’s local storage. This information is not sent to us. Strictly necessary
Google Tag Manager Loads the other analytics and marketing tags on the Website according to your cookie preferences. It does not itself collect personal information beyond what is needed to deliver it. Google Privacy Policy Strictly necessary
Google Analytics Measures visits, pages viewed, referrers and interactions so we can understand and improve the Website. Sets cookies such as _ga and _ga_*, which last up to two years. How Google uses data from sites that use its services Analytics
HubSpot Tracks visits and form submissions, and associates them with contact information you provide to us, to manage our communications with you. Sets cookies such as __hstc, hubspotutk, __hssc and __hssrc. HubSpot Privacy Policy Marketing
Common Room Helps us understand which organizations and community members engage with the Website and our open-source projects. Common Room Privacy Policy Marketing
GitHub Displays repository information and links to our projects on GitHub. GitHub may receive your IP address and set its own cookies, particularly if you are signed in to GitHub. GitHub Privacy Statement Functional

7.3 Managing Cookies in your browser

Most browsers let you see which Cookies are stored on your device, delete them, and block some or all of them. Blocking strictly necessary Cookies may affect how the Website works. Opting out is browser- and device-specific and lasts only until you clear Cookies from that browser or device. For instructions, see the help pages for Firefox, Chrome, Safari and Microsoft Edge. You can also opt out of Google Analytics with the Google Analytics opt-out browser add-on.

8. Recording calls and meetings

8.1 General provisions

This Section 8 describes how we collect and use your personal information when we record calls and meetings. It supplements the other sections of this Privacy Policy.

8.2 Collected personal information, sources, purposes and EU legal basis

We collect, record, analyze, use and retain the following categories of personal information during calls with our sales representatives, customers’ representatives and other business contacts, for the purposes identified below, and we retain such personal information as described in Section 8.4.

What we collect
  • Identifiers or identification information (first name, last name)
  • Contact details (email address, phone number)
  • Professional information (job title, company)
  • Voice
  • Any information you provide during the call
Sources

You provide this information directly during the call.

PurposeHow we use itLegal basis (EU Users only)
Managing customer support and requests
  • To respond to your inquiry and provide you with information
  • To contact you if necessary
  • To provide you with customer support
 Treeverse’s legitimate interest in managing its requests
Improving internal sales processes
  • To analyze our customer support services
  • For service and business quality control and improvement
 Treeverse’s legitimate interest in improving its sales processes and customer support

8.3 Recipients of personal information

We disclose this personal information to our call recording service provider, including to train its artificial intelligence system.

8.4 Personal information retention

We retain this personal information for the duration of the process and request. After the request has been handled, we may retain your personal information to send you service-related communications, unless you notify us that you do not wish to receive them.

10. Social media widgets

The Website includes social media features, such as GitHub™ links and buttons. These features may collect your IP address and which page you are visiting on the Website, and may set Cookies to function properly. Social media features are hosted by a third party, and your interactions with them are governed by the privacy policy of the company, social media platform or third-party service providing them.

11. What is our policy regarding minors?

The Website is not intended for use by minors (individuals under the age defined by applicable law, which in the EEA is under the age of 18 and in the United States is under the age of 13), and we do not knowingly collect or process personal information relating to minors. If you do not meet these age requirements, you must not use the Website. We will discard any personal information we receive from a minor immediately upon discovering that such a user shared personal information with us.

12. How do we approach changes to this Privacy Policy?

We will change this Privacy Policy from time to time. Any changes we make will be posted on this page, and the “last updated” date at the top of this page will be amended accordingly.

13. Contact us

If you have any comments or questions regarding this Privacy Policy or our information practices in connection with the Website, please contact us at privacy@lakefs.io.

The practices described in this Privacy Policy are our current personal information protection policies, as of October 21, 2026.