Who is responsible
TendoFlow.[Owner/legal review: legal entity, address and data-protection contact; NDPA (Nigeria) and other applicable laws]
What we collect
- Account details: email, display name and an optional profile photo (JPG or PNG; resized and stripped of hidden file details).
- Workspace content you add: brands, projects, plans, uploads and drafts.
- Early-access and support messages you send, with a record of your consent.
- Security records: sign-in attempts and a one-way hashed form of your network address, used only to limit abuse.
- Short, redacted error codes. We strip tokens, emails, phone numbers and IDs before saving them.
How we use it
Only to run the service, keep it secure and answer you. We don't sell your data. Marketing emails need your separate opt-in and can be unsubscribed from; email sending is switched off today.
Support staff see only a masked version of your email address on tickets.
AI processors
No AI provider is enabled in the provider registry.[Owner/legal review: processor contracts and international transfer terms]
How long we keep it
Storage time limits for uploads and finished files are shown on Refunds & retention. Error logs are designed to be cleared after 30 days once the scheduler is switched on.
Your rights and account deletion
You can download a copy of your data from your privacy settings. Account deletion is on hold while the retention policy is reviewed: we will not promise a deletion deadline until it is approved.[Owner/legal review: deletion timeline, which financial/audit records must be kept, and how sign-in accounts are removed]