Legal

This clause is included in our Data Processing Addendum and summarizes how contribution to Trefur’s cross-organization corpus works. It is provided here for transparency; the executed DPA governs.

1. Opt-in. Contribution is disabled by default. Trefur will not incorporate a Customer’s telemetry into the shared corpus unless an authorized workspace administrator or owner explicitly enables the “Contribute anonymized signals” control. Enabling or disabling the control is logged in the Customer’s audit trail.

2. Scope of contributed data. Only de-identified, statistically aggregated signals (for example, tool-reliability and usage metrics) are contributed. Raw traces, prompts, inputs, outputs, and any content identifying the Customer, its tenants, or individuals are excluded. Contributed signals are combined across many organizations and de-identified before storage, such that no contributed value is attributable to any single Customer.

3. Reciprocal benefit. A contributing Customer receives shared reliability and risk benchmarks derived from the corpus. Receipt of these benchmarks does not require contribution.

4. Withdrawal. The Customer may withdraw consent at any time via the same control. Withdrawal halts all future contribution. Because corpus data is aggregated and non-attributable, signals aggregated prior to withdrawal cannot be isolated for deletion and remain only in non-identifying, aggregated form. Withdrawal does not affect the Customer’s right to erasure of its own identifiable data under the DPA and applicable law.