Privacy Policy

1. Information we collect

We collect only the information needed for the purpose described. Specifically:

We do not use advertising or analytics trackers on the Sites. Our hosting provider processes technical information such as IP addresses and request logs as needed to deliver and secure the Sites.

2. How we use information

• To provide the Sites, your account, the customer success inbox and the services you request.
• To send the updates you subscribed to. You can unsubscribe at any time.
• To evaluate job applications and communicate with candidates.
• To respond to your questions and requests.
• To secure the Sites, prevent abuse and fraud, and enforce our Terms of Use.
• To comply with legal obligations.

3. Legal bases for processing

Where the law requires a legal basis for processing (for example, in the European Economic Area and the United Kingdom), we rely on: performance of a contract (to provide your account and requested services); your consent (for updates, which you may withdraw at any time); our legitimate interests (to operate and secure the Sites, evaluate applications and communicate with you, balanced against your rights); and compliance with legal obligations.

4. How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising. We share information only:

• With service providers that process it on our behalf under contractual obligations: Cloudflare, Inc. (website hosting, databases and file storage), Google LLC (Google Workspace, for email) and Resend (Plus Five Five, Inc.), which delivers our transactional emails such as account verification, password resets and notifications about your requests.
• Within TensaCo, with personnel who need it to perform their roles, such as reviewing a service request or an application.
• For legal reasons, when required by law, legal process or to protect the rights, property or safety of TensaCo, our users or others.
• In a corporate transaction, such as a merger, financing or acquisition, subject to this Policy.

5. Retention

• Subscriptions: until you unsubscribe; we then keep a record of the unsubscription so we don’t contact you again.
• Accounts, support conversations and service requests: for as long as your account is active, and then as needed for legal, security and record-keeping purposes.
• Sessions: until they expire (30 days) or you sign out.
• Job applications and résumés: up to two years after the position is filled or closed, unless you ask us to delete them sooner or applicable law requires otherwise.
• Abuse-prevention records (hashed IP addresses and attempt logs): for a short period needed to enforce rate limits.

6. Security

We use administrative, technical and physical safeguards appropriate to the information we hold, including encrypted connections (HTTPS), salted password hashing, hashed session tokens stored only server-side, access limited to authorized personnel, and storage with established cloud providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal information we hold about you and receive a copy of it;
• correct inaccurate information (you can update your name and organization in your account profile);
• delete your information, including your account and job applications;
• object to or restrict certain processing, and withdraw consent where processing is based on consent;
• data portability; and
• lodge a complaint with your local data protection authority.

To exercise these rights, write to hello@tensaco.ai from the email address associated with your request. We will verify your request and respond within the time required by law. We will not discriminate against you for exercising your rights.

California residents

Under the California Consumer Privacy Act, as amended, California residents have the rights to know, delete and correct personal information, and to opt out of its sale or sharing. TensaCo does not sell or share personal information as those terms are defined, and does not use or disclose sensitive personal information for purposes other than those permitted. The categories of information we collect are described in section 1; we collect them from you directly and from your device when you use the Sites, for the purposes in section 2, and disclose them only as described in section 4.

8. International transfers

TensaCo is based in the United States, and our service providers may process information in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers, such as the contractual commitments of our service providers.

9. Children

The Sites are not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided us information, contact hello@tensaco.ai and we will delete it.

10. Third-party sites

The Sites link to third-party sites, such as GitHub, PyPI, npm and social networks. Their privacy practices are governed by their own policies.

11. Changes to this Policy

We may update this Policy from time to time. We will post the updated Policy on this page with a new “Last updated” date, and where changes are material we will provide additional notice.

12. Contact

Questions about this Policy or our privacy practices: hello@tensaco.ai.