Privacy Policy

Tendera ("we," "us," or "our") operates the website tendera.chat and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our AI companion chat service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address and, if you use social login (e.g., Google OAuth), your name and profile picture as provided by the third-party service.
• Chat Messages: The messages you send to and receive from our AI companions are stored to maintain conversation continuity and enable our memory system.
• Payment Information: When you subscribe to our Premium plan, payment is processed by our merchant of record, Lemon Squeezy. We do not directly collect or store your credit card number, bank account details, or other financial account information. Lemon Squeezy handles all payment processing in compliance with PCI-DSS standards.

2.2 Information Collected Automatically

• Usage Data: We may collect information about how you access and use the Service, including your IP address, browser type, operating system, referring URLs, pages viewed, and the dates/times of your visits.
• Cookies & Local Storage: We use essential cookies and browser local storage to maintain your session, remember your authentication state, and store preview session tokens. We do not use advertising or third-party tracking cookies.

2.3 AI Memory Data

Our AI companions use a memory system that extracts and stores contextual information from your conversations (such as your preferences, interests, and emotional context) to provide a more personalized experience. This data is stored securely and is associated with your account. You can request deletion of this data at any time (see Section 7).

We use the information we collect for the following purposes:

• Provide the Service: Deliver AI companion chat experiences, maintain conversation history, and personalize interactions through our memory system.
• Account Management: Create and manage your account, authenticate your identity, and process subscription payments.
• Service Improvement: Analyze usage patterns (in aggregate, anonymized form) to improve the quality, safety, and features of the Service.
• Safety & Moderation: Monitor for abuse, harmful content, or violations of our Terms of Service to ensure a safe environment.
• Communication: Send you service-related notifications, updates, and, if you opt in, promotional communications. You can opt out of promotional emails at any time.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating the Service, including:
  • Supabase — database hosting and authentication
  • DeepSeek / OpenAI — AI language model providers that process your chat messages to generate responses
  • Lemon Squeezy — payment processing
  • Vercel — website hosting and content delivery
• Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of the transaction.

Your data is stored on secure servers provided by Supabase (PostgreSQL databases with Row Level Security policies). We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (TLS/HTTPS) for all data transmissions
• Encryption at rest for stored data
• Row Level Security (RLS) policies ensuring users can only access their own data
• Secure API key management and environment variable isolation
• Regular security reviews and updates

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your information as follows:

• Account Data: Retained for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where retention is required by law.
• Chat History & Memory Data: Retained for as long as your account is active to maintain conversation continuity. Deleted upon account deletion or upon your request.
• Usage Data: Aggregated and anonymized usage data may be retained indefinitely for analytics purposes.
• Payment Records: Transaction records may be retained as required by tax and financial regulations (typically 5–7 years).

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, including chat history, memory data, and account information.
• Data Portability: Request a machine-readable copy of your data.
• Objection: Object to processing of your personal data for certain purposes.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, please contact us at privacy@tendera.chat. We will respond to your request within 30 days.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe a child under 18 has provided us with personal information, please contact us at privacy@tendera.chat.

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those of your jurisdiction. By using the Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy.

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

• AI-Generated Content: All responses from Tendera companions are generated by artificial intelligence. They are not real people. Conversations are simulations and should not be treated as professional advice (medical, legal, financial, psychological, or otherwise).
• Message Processing: Your chat messages are sent to third-party AI model providers (DeepSeek and/or OpenAI) for response generation. These providers process your messages in accordance with their own privacy policies and data processing agreements.
• Memory System: Our AI memory system extracts and stores structured data (preferences, interests, emotional context) from your conversations. This data is used solely to improve your personal experience and is not shared with other users or used for training AI models.
• No Training on Your Data: We do not use your personal conversations to train or fine-tune AI models. Your chat data is used only to provide the Service to you.

If you are located in the European Economic Area (EEA), the following additional provisions apply:

• Legal Basis: We process your personal data based on: (a) your consent, (b) the necessity to perform our contract with you (the Terms of Service), (c) our legitimate interests in operating and improving the Service, and (d) compliance with legal obligations.
• Data Protection Officer: For GDPR-related inquiries, contact us at privacy@tendera.chat.
• Supervisory Authority: You have the right to lodge a complaint with a data protection supervisory authority in your country of residence.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose about you.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information. Note: We do not sell your personal information.
• The right to non-discrimination for exercising your CCPA rights.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also send you a notification via email. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@tendera.chat
• Website: tendera.chat