Legal

Confidentiality & Data Handling

This policy describes how Liberty Tree handles non-public information provided for an engagement.

Effective July 14, 2026

Confidential information

Confidential information includes non-public product, supplier, formulation, technical, commercial, customer, and business information disclosed for an engagement, whether uploaded, written, or discussed. It does not include information that is public through no breach, already lawfully known without restriction, independently developed without use of the confidential information, or lawfully received from another source without a confidentiality duty.

Permitted use

Liberty Tree uses confidential information only to evaluate, administer, and deliver the engagement; communicate with authorized representatives; secure and maintain the service; comply with law; and establish or defend legal rights. Confidential information is not sold or used to market unrelated services.

Access and service providers

Access is limited to Liberty Tree personnel, authorized reviewers, and service providers who need the information for the engagement or supporting operations and who are subject to confidentiality or data-protection obligations. Core infrastructure providers support private storage, hosting, payment status, and transactional email. Liberty Tree does not intentionally place engagement documents in public repositories.

Automated tools and expert review

Liberty Tree may use approved document-processing and analysis tools to organize, search, extract, or compare engagement materials. Confidential documents will not knowingly be submitted to consumer tools that permit public disclosure or general model training. Material conclusions and final deliverables remain subject to human review. A client may request additional written restrictions before purchase; they apply only if accepted in writing.

Safeguards

Engagement files are stored in a private bucket under server-authorized paths. Uploads use short-lived signed authorization, accepted-type and size limits, stored-object validation, and engagement-specific identifiers. Access links should be treated as confidential. Clients must promptly report a lost or improperly shared link.

Client handling responsibilities

Clients must provide only materials they are authorized to share and only information reasonably needed for the engagement. Do not upload malware, credentials, payment-card details, Social Security numbers, protected health information, export-controlled technical data, or third-party information subject to restrictions Liberty Tree has not accepted in writing.

Retention and deletion

Working documents and portal files are ordinarily deleted from active systems 90 days after final delivery. Earlier deletion may be requested after delivery. Essential engagement, payment, acceptance, and dispute records may be retained as described in the Privacy Policy. Deletion may be delayed by backup cycles, legal obligations, security investigations, or a preservation duty.

Required disclosure and incidents

If legally compelled to disclose confidential information, Liberty Tree will provide notice when legally permitted and disclose only what is reasonably required. Liberty Tree will investigate a confirmed security incident affecting engagement information and provide notice as required by applicable law and contractual commitments.

Separate agreements

If the parties sign a separate confidentiality or data-processing agreement, that agreement controls to the extent it expressly conflicts with this policy. Submit required terms through the contact page before purchasing.