Privacy
We process the minimum data needed for the assistant to work. Here we explain which data, what for, and how you can control it.
Controller
The controller of account data is the owner of Tendr, identified in the legal notice. Privacy contact: [email protected].
What data we process
| Data | Purpose | Legal basis |
|---|---|---|
| Account: name, company, email and password (stored hashed with scrypt, never in plain text). | Giving you access to the dashboard, managing your licences and notifying you of changes to the service. | Performance of the contract. |
| Technical session data: device, browser and IP address of each session. | Account security and showing you your open sessions. | Legitimate interest. |
| Your store’s data: catalogue, published policies, shipping rates, domain and plugin version. | So the assistant knows your store and answers with real information. | Performance of the contract. |
| Conversations from your store’s chat and attributed orders (number and amount). | Providing the service, showing you analytics and improving your assistant’s answers. | Performance of the contract (we act as your store’s processor). |
Your store’s customers
For visitors who use a store’s chat, the store is the controller and Tendr acts as processor under the terms of service. The visitor is identified only by a random code stored in their browser. The shipping details they type into the chat are sent directly to the store’s cart and Tendr does not store them. We never process card data.
Who we share it with
- AI providers (DeepSeek and, if the store chooses it, OpenAI): they receive the conversation text and catalogue data to generate each reply. They may be located outside the European Economic Area; such transfers are covered by the European Commission’s standard contractual clauses or equivalent mechanisms.
- Transactional email provider, to send you sign-in links and notices.
- Stripe (Stripe Payments Europe, Ltd., Ireland), to process payments and subscription billing. Card details are entered directly with Stripe and Tendr never stores them; we only keep your Stripe customer ID, plan, billing period and invoice status.
- Google (Google Ireland Ltd.), only if you choose “Continue with Google”: we receive your name, email, profile picture and Google account ID to create your account or sign you in.
- Hosting for the API and database, on servers located in the European Union.
We don’t sell data or use it for advertising.
How long we keep it
- Account: for as long as it is active. When you delete it from the dashboard, your licences, stores, indexed catalogue and conversations are deleted immediately.
- Conversations: while the store is connected, and for a maximum of 24 months.
- Technical security logs: 90 days.
Cookies and storage
The dashboard uses a single technical session cookie (tendr_session), which is essential for signing in. On stores, the chat stores the visitor’s random code and the conversation history in their browser, plus a technical cookie (tendr_conv) to attribute the order to the chat. We don’t use advertising cookies or third-party analytics cookies. This website loads its fonts from Google Fonts.
Your rights
You can access, rectify and erase your data, object to or restrict its processing, and request its portability by writing to [email protected]. You can delete your account yourself from My account. If you believe we haven’t handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).