Legal & Settings

Privacy Policy

Effective: 2026-05-30

Treayo (“the Site”, treayo.com) respects visitor privacy. The Site is an open index of customs tariff information and requires no registration, no login, and creates no user account. This policy explains what data we process, why, and with whom it is shared.

1. What we collect

  • Hashed IP for rate limiting: to enforce the “10 free lookups per IP per day” quota, we store a salted one-way SHA-256 hash of the visitor IP. It is irreversible; we do not store the raw IP.
  • Anonymous usage analytics: aggregate pageviews, referrers and device type via Google Analytics 4, to understand traffic. GA4 does not collect directly identifying information by default.
  • Query logs: to improve AI classification, we record de-identified logs of query text, results, dwell and calculation events (linked only to the IP hash, not to a real identity).
  • Server access logs: our web server and CDN record requests (IP, timestamp, user agent) per industry practice, for security and troubleshooting.

We do not ask you to provide your name, email or phone number — unless a future logged-in feature is introduced with separate consent.

2. How we use data

Only to: provide and maintain the lookup/calculator service, enforce the free quota and prevent abuse, improve HS classification and data quality, and protect site security. We do not sell personal data and do not build cross-site advertising profiles.

3. Third-party services

  • AI classification: when you use AI classification, the product description you enter is sent to a large language model provider (e.g. Alibaba Cloud DashScope) to perform the lookup. Do not enter sensitive personal or confidential business information.
  • Cloudflare: CDN and security protection at the network layer.
  • Google Analytics 4: aggregate analytics.

4. Cookies

Core lookup features do not rely on tracking cookies. Google Analytics may set cookies to distinguish sessions; you can decline these via your browser settings or extensions.

5. Retention & security

De-identified logs are retained only as long as needed for quality improvement and security auditing. We apply reasonable technical and organizational safeguards, but no internet transmission or storage can be guaranteed absolutely secure.

6. Changes

We may update this policy as the service evolves; changes are reflected in the “Effective” date above. The latest version on this page governs.