Data processing agreement

Who does what

You decide what personal information goes into your portal and why. Tendroom processes it only on your behalf, to run the service for you. Under privacy laws such as the California Consumer Privacy Act this makes Tendroom your service provider, and under laws such as the GDPR your processor.

The information involved

• People: your clients and the people who write to you, your team members, and visitors to your contact page and client links.
• Information: names, email addresses, phone numbers, notes, messages, inquiries, bookings, invoices, estimates and payments recorded, photos and files you upload, schedules, hours, time off and pay.
• How long: while you use Tendroom, and until it's erased as described under “When it ends”.

What Tendroom promises

• To use the information only to provide Tendroom to you and as you instruct through the portal, never to sell it, share it for advertising, or combine it with other businesses' data.
• To keep it confidential, and to make sure anyone at Tendroom who can see it is bound to keep it confidential too.
• To protect it with the measures under “Security”.
• To help you answer requests from people to see, correct, export or delete their information. Most you can handle yourself: request a copy of your data from Settings, and erase a client from their page.
• To tell you without unreasonable delay, and within any time limit the law sets, if we confirm that your portal's personal information was accessed without permission, with what we know and what we're doing about it.
• To give you the information you reasonably need to show you meet your own privacy obligations, and to answer your reasonable questions about how we handle your data.
• To tell you if we believe an instruction from you breaks a privacy law.

Service providers we use

Tendroom uses these providers to run the service. Each handles your data only to provide their service to us, under terms that protect it at least as well as this agreement:

• Cloudflare: hosting, databases, domain names and the bot check on forms.
• Backblaze: storage for uploaded files such as gallery photos, receipts and logos.
• Resend: delivering the emails you and Tendroom send.

We'll update this list and email business owners before a new provider starts handling portal data. If you object, you can download your data and close your business.

Where it's kept

Tendroom is run from the United States, and uploaded files are stored there. Our hosting provider keeps databases and serves pages from its data centers, which are in many countries, so information may be processed outside your own. Where a law requires safeguards for this, we rely on our providers' standard contractual terms.

Security

• Everything travels over HTTPS; stored data is encrypted by our providers.
• Passwords are stored only as one-way hashes, and repeated sign-in attempts are slowed down.
• Each business's data is kept apart from every other business's, and each person sees only what their role allows.
• Links to client invoices, estimates and galleries are long and random, and can be turned off at any time.
• Important changes, such as team changes, exports and deletions, are recorded in the business's activity log.

When it ends

You can request a copy of your business's data from Settings at any time. When the owner closes the business, it goes offline straight away and all of its information, including uploaded files, is erased 30 days later, unless the law requires us to keep something. Backups held by our providers expire on their own schedule.

Contact

Questions about this agreement, or a request for a signed copy: privacy@tendroom.com.