Privacy Policy

Tendera ("we," "us," or "our") operates the website tendera.chat and related services (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our AI companion chat service.

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2.1 Information You Provide Directly

• Account Information: When you create an account, we collect your email address and, if you use social login (e.g., Google OAuth), your name and profile picture as provided by the third-party service.
• Chat Messages: The messages you send to and receive from our AI companions are stored to maintain conversation continuity and enable our memory system.
• Voice Input: If you use speech input, your microphone recording is sent for transcription and is not stored by Tendera after that request. The resulting text is handled as a chat message. Generated audio for eligible written character replies may be cached for replay.
• Photos and Generated Images: If you choose to share a photo in a conversation, we collect the selected photo and any accompanying text. Shared photos are re-encoded to remove embedded metadata and stored privately with your conversation. Character-photo requests and the resulting generated images are also stored with your chat history.
• Payment Information: When you subscribe to our Premium plan, payment is processed by the authorized payment provider for your selected purchase channel. We do not directly collect or store your credit card number, bank account details, or other financial account information. Our payment provider handles all payment processing in compliance with PCI-DSS standards.

2.2 Information Collected Automatically

• Usage Data: We may collect information about how you access and use the Service, including your IP address, approximate location derived from your IP address, browser or app type, operating system, device category, referring URLs, pages viewed, and the dates/times of your visits.
• Request and Security Data: Our systems and service providers may process account identifiers, session or visitor identifiers, request timestamps, request frequency and timing patterns, requested routes, response status, app version, AI provider/model, request latency and outcome, token counts, and security or abuse-review outcomes. Request telemetry does not contain a copy of your prompt or AI response. We do not use this data to fingerprint your device for advertising.
• Cookies & Local Storage: We use essential cookies and browser local storage to maintain your session, remember your authentication state, and store preview session tokens. We do not use advertising or third-party tracking cookies.

2.3 AI Memory Data

Our AI companions use a memory system that extracts and stores contextual information from your conversations (such as your preferences, interests, and emotional context) to provide a more personalized experience. This data is stored securely and is associated with your account. You can request deletion of this data at any time (see Section 7).

We use the information we collect for the following purposes:

• Provide the Service: Deliver AI companion chat experiences, maintain conversation history, process photos you choose to share, generate requested character photos, and personalize interactions through our memory system.
• Account Management: Create and manage your account, authenticate your identity, and process subscription payments.
• Service Improvement: Analyze usage patterns (in aggregate, anonymized form) to improve the quality, safety, and features of the Service.
• Safety & Moderation: Detect, prevent, and investigate abuse, harmful content, account compromise, automated or scripted traffic, credential sharing, relay or mirror services, resale, attempts to bypass limits, and other violations of our Terms of Service. We may use bounded automated signals such as request volume and timing patterns to protect the availability and integrity of the Service.
• Communication: Send you service-related notifications, updates, and, if you opt in, promotional communications. You can opt out of promotional emails at any time.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.

We do not sell, rent, or trade your personal information. We may share your information only in the following limited circumstances:

• Service Providers: We share data with trusted third-party service providers who assist us in operating the Service, including:
  • Supabase — database hosting and authentication
  • DeepSeek / OpenAI — AI service providers that may process chat messages, selected photos, character-photo requests, speech input, or written replies to provide language, image understanding, image generation, transcription, and voice generation features
  • Payment Provider — payment processing
  • Vercel — website hosting and content delivery
• Legal Requirements: We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred as part of the transaction.

Your data is stored on secure servers provided by Supabase (PostgreSQL databases with Row Level Security policies). We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption in transit (TLS/HTTPS) for all data transmissions
• Encryption at rest for stored data
• Row Level Security (RLS) policies ensuring users can only access their own data
• Secure API key management and environment variable isolation
• Regular security reviews and updates

While we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

We retain your information as follows:

• Account Data: Retained for as long as your account is active. When you request account deletion, access is disabled immediately and personal account data is scheduled for deletion after a 7-day safety period. If deletion cannot complete automatically, it will be completed within 30 days, except where retention is required by law.
• Chat History, Photos & Memory Data: Messages, photos shared in chat, generated character photos, and memory data are retained for as long as your account is active to maintain conversation continuity. They are placed beyond normal product use when deletion is requested and permanently removed when the deletion process completes.
• Guest Preview Data: Guest preview messages and their session records are normally removed when you claim them into an account, and otherwise are retained for up to 30 days.
• Usage and Network Data: Raw IP addresses and IP-derived city data in guest preview and page-view records are retained for up to 7 days. Raw page-view records are retained for up to 90 days. Aggregated, de-identified statistics that no longer contain chat text or raw IP addresses may be retained longer for analytics and service planning.
• Security and Review Data: Restriction status, relevant request metadata, and administrative review records may be retained for as long as reasonably necessary to protect the Service, investigate disputes, prevent repeat abuse, and comply with legal obligations. We limit access to authorized personnel and do not retain this information for advertising.
• Payment Records: Transaction and subscription lifecycle records may be retained in a minimized, account-detached form as required for tax, refund, payment-dispute, and financial obligations (typically 5–7 years). This does not keep your conversations or active Tendera account.
• AI Request Records: Content-free records of request timing, outcome, provider/model, token counts, and app version are retained for up to 90 days for reliability, cost reconciliation, and safety analysis.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data, including chat history, shared and generated photos, memory data, and account information.
• Data Portability: Request a machine-readable copy of your data.
• Objection: Object to processing of your personal data for certain purposes.
• Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time.

To exercise any of these rights, please contact us at privacy@tendera.chat. We will respond to your request within 30 days.

When request patterns reasonably indicate automation, a compromised account, an unauthorized relay or mirror, resale, or other abusive use, we may temporarily rate-limit or pause chat access while the account is reviewed. A temporary chat pause does not by itself cancel a paid subscription or remove the remaining subscription entitlement.

Where practical, the Service will display when the temporary pause is expected to end. You may request human review or correct relevant information by contacting support@tendera.chat. We will consider the account history, available technical evidence, and any information you provide; payment status alone does not prove that activity was human-operated or authorized.

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete such information promptly. If you believe a child under 18 has provided us with personal information, please contact us at privacy@tendera.chat.

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that differ from those of your jurisdiction. By using the Service, you consent to the transfer of your information to these countries. We take appropriate safeguards to ensure that your personal data remains protected in accordance with this Privacy Policy.

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every site you visit.

• AI-Generated Content: All responses from Tendera companions are generated by artificial intelligence. They are not real people. Conversations are simulations and should not be treated as professional advice (medical, legal, financial, psychological, or otherwise).
• Message Processing: Your chat messages are sent to third-party AI model providers (DeepSeek and/or OpenAI) for response generation. These providers process your messages in accordance with their own privacy policies and data processing agreements.
• Photo Processing: Photos you choose to share, related chat text, and character-photo requests may be sent to DeepSeek and/or OpenAI to understand the selected image or generate the requested image. Tendera does not access other photos in your library unless you select them.
• Memory System: Our AI memory system extracts and stores structured data (preferences, interests, emotional context) from your conversations. This data is used solely to improve your personal experience and is not shared with other users or used for training AI models.
• No Training on Your Data: We do not use your personal conversations to train or fine-tune AI models. Your chat data is used only to provide the Service to you.

If you are located in the European Economic Area (EEA), the following additional provisions apply:

• Legal Basis: We process your personal data based on: (a) your consent, (b) the necessity to perform our contract with you (the Terms of Service), (c) our legitimate interests in operating and improving the Service, and (d) compliance with legal obligations.
• Data Protection Officer: For GDPR-related inquiries, contact us at privacy@tendera.chat.
• Supervisory Authority: You have the right to lodge a complaint with a data protection supervisory authority in your country of residence.

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

• The right to know what personal information we collect, use, and disclose about you.
• The right to request deletion of your personal information.
• The right to opt out of the sale of your personal information. Note: We do not sell your personal information.
• The right to non-discrimination for exercising your CCPA rights.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. For significant changes, we may also send you a notification via email. Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: privacy@tendera.chat
• Website: tendera.chat